Privacy Statement

1. Who we are

This website is operated by Soterna (hereinafter also: “we”), with its registered office at Keizersgracht 452, 1016 GD Amsterdam, the Netherlands, registered with the Dutch Chamber of Commerce (KvK) under number 42105823. For privacy questions, you can get in touch via the contact form.

2. Which data we process

On this website we process only:

• Contact and lead data that you enter yourself through our forms: name, organisation, business email address, phone number (optional), organisation size, area of interest and your message. When you submit a form we also record the IP address, to counter misuse and spam.
• Newsletter subscription: your email address, the moment of subscription and the IP address used to sign up, only after explicit consent. The IP address serves as proof of your subscription and to counter misuse.
• Technical log data needed to run the website securely (such as concise error logs). We do not log form content and do not build profiles.

3. What we use data for

• Following up on your demo, information or quote request (basis: legitimate interest or pre-contractual phase);
• Sending the newsletter (basis: consent);
• Securing the website against misuse and spam (basis: legitimate interest).

We do not sell data and do not share it with third parties for marketing purposes.

4. Retention periods

We retain lead data for a maximum of 24 months after the last contact. We retain newsletter data until you unsubscribe. The IP address recorded with a form is kept no longer than the related request or subscription. Technical logs are retained briefly and cleaned up automatically.

5. Cookies and statistics

We use only necessary cookies and therefore show no cookie banner. For visit statistics we use Plausible Analytics (Plausible Insights OU, Estonia), which acts as a processor and processes and stores the data exclusively within the EU. Plausible places no cookie, uses no browser storage and creates no persistent identifier. Because the visitor’s browser sends the count itself, Plausible does receive the IP address and browser details along with it. The IP address is not stored but converted once using a salt that expires every 24 hours, so that a repeat visit within a day is not counted twice.

The legal basis is legitimate interest: we want to know which pages are useful, and this is the least intrusive way to measure that. Personal links, such as the one to your own survey page or a booked appointment, are made unrecognisable before a visit is counted; the key in such a link is never shared with Plausible. You can opt out via the cookie policy.

6. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction, data portability and objection. Send your request via the contact form; we will respond within four weeks. You can also file a complaint with the Dutch Data Protection Authority.

7. Security

Data is stored securely, protected with among other things encrypted connections, strict access rights, rate limiting and logging without sensitive content. See also our security page.

8. Changes

We may amend this statement. The current version is always available on this page, with the date of the last change shown at the top.