About This Policy
SimuPro Data Solutions ("SimuPro", "we", "us") is a sole proprietorship (eenmanszaak) registered in the Netherlands, committed to protecting your personal data under the General Data Protection Regulation (GDPR / AVG) and applicable Dutch privacy law.
This policy explains what personal data we collect through simupro.nl, why we collect it, how long we keep it, and what rights you have.
Data We Collect
Only when voluntarily submitted via contact form or purchase:
- First and last name
- Company name
- Email address
- Phone number (optional)
- Message content
- Payment data — SimuPro has zero visibility into, and never receives, stores or processes any payment data. All payment transactions are handled exclusively and directly by Stripe under their own secure infrastructure and privacy policy.
No tracking cookies, analytics, or ad networks are used on this site.
Legal Basis — GDPR Art. 6
- Contact form — legitimate interest (6.1.f): to respond to your enquiry
- PDF purchases — contractual necessity (6.1.b): to fulfil your order
- Financial records — legal obligation (6.1.c): Dutch tax law, 7-year retention
Data is never used for marketing, profiling, or any other purpose.
Data Retention
- Contact messages — email inbox only, deleted after handling
- Purchase records — 7 years (Belastingdienst requirement)
- Payment data — Stripe only; we have zero access to card data
No contact submissions are stored in any database or CRM.
Security
- All traffic served exclusively over HTTPS / TLS
- Stripe PCI-DSS Level 1 — card data never touches our servers
- PDF delivery via AWS pre-signed URLs (time-limited, 24h)
- Contact form rate-limited and honeypot bot-protected
Third-Party Processors
- Stripe — payment processing, GDPR compliant, PCI-DSS Level 1 — stripe.com/privacy
- Amazon Web Services — PDF delivery infrastructure hosted in eu-central-1 Frankfurt (EU)
- Strato AG — website hosting, servers in Germany — strato.nl/privacy
- Cal.com — appointment booking widget — cal.com/privacy
We do not sell, rent, or share personal data with any other parties.
Your Rights Under GDPR
- Access — request a copy of your data
- Rectification — correct inaccurate data
- Erasure — right to be forgotten
- Restriction — limit processing
- Object — object to legitimate interest
- Portability — machine-readable export
To exercise any right contact info@simupro.nl — we respond within 30 days. Complaints: autoriteitpersoonsgegevens.nl
Data Controller
- SimuPro Data Solutions
- Kievitsweg 13, 5813 CA Ysselsteyn
- Netherlands (eenmanszaak / ZZP)
- Email: info@simupro.nl
- Web: simupro.nl
- Response within 5 business days