Privacy Policy

Last updated: 11 August 2026

Creosoft (“we”, “us”, “our”) is a digital solutions provider based in the Netherlands, registered with the Dutch Chamber of Commerce (KVK) under number 97079413, VAT/BTW-id NL005247301B75. This Privacy Statement explains how we collect, use, and protect your personal data when you visit creosoft.nl or use our services, in accordance with the EU General Data Protection Regulation (GDPR) and the Dutch implementing act (AVG, Algemene Verordening Gegevensbescherming).

1. Who We Are

Creosoft operates the website creosoft.nl. We are the controller for the personal data described in this statement. You can reach us at any time at info@creosoft.nl.

2. What Personal Data We Collect

We collect personal data in the following situations:

  • Contact and quote request forms: name, company name, email address, phone number, the service you are interested in, your industry, and the content of your message. We also record the page from which you sent the form.
  • Newsletter sign-up: your email address and name, if you opt in voluntarily. As proof of your consent we also record the date and time, the exact consent text you agreed to, the page from which you subscribed, and a truncated IP address.
  • Cookies: technical data such as browser type and pages visited may be processed through cookies, but only within the categories you consent to. See our Cookie Policy for exactly which cookies we use. We use Google Analytics 4 to measure website usage, but only after you have accepted analytics cookies; if you refuse, no data is sent to Google. No marketing or advertising cookies are used on this website.
  • Client and project data: if you become a client, we may process billing details, project communications, and account credentials necessary to deliver our services.

3. Why We Process Your Data (Legal Basis)

  • Consent: for newsletters and non-essential cookies.
  • Contract performance: to respond to quote requests and deliver services you have purchased.
  • Legitimate interest: to improve our website and services.
  • Legal obligation: to comply with Dutch tax and administration law (e.g. invoicing records).

We do not use automated decision-making or profiling that produces legal or similarly significant effects concerning you.

4. Cookies

Our website uses cookies: small text files stored on your device. We use strictly necessary cookies (required for the site to work) and, only with your consent, functional, analytical, and marketing cookies. Our Cookie Policy lists every cookie by name, purpose, and retention period. You can manage or withdraw your cookie consent at any time via the cookie banner or your browser settings.

5. Sharing Your Data With Third Parties

We only share personal data with third parties where necessary to operate our business, such as:

  • Our hosting provider, for storing website and application data on EU-based servers.
  • Email delivery services, for transactional and, with your consent, marketing emails.
  • Payment processors, for handling invoices and payments.
  • Google Ireland Limited, for Google Analytics 4, and only after you have consented to analytics cookies.

These parties act on our behalf under data processing agreements and may not use your data for their own purposes. We do not sell your personal data to third parties. Where data is processed outside the European Economic Area, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses).

6. How Long We Keep Your Data

We retain personal data only as long as necessary for the purposes described above, or as required by Dutch law:

  • Financial administration: 7 years, as required by Dutch tax law.
  • Contact form submissions that do not lead to a client relationship: deleted automatically after 24 months.
  • Newsletter subscriptions: until you unsubscribe. We keep a minimal record of the withdrawal itself, so we can prove we stopped emailing you.

7. Your Rights

Under the GDPR/AVG, you have the right to:

  • Request access to the personal data we hold about you;
  • Request correction or rectification of inaccurate data;
  • Request erasure of your personal data (“right to be forgotten”);
  • Object to or restrict certain processing;
  • Request data portability;
  • Withdraw consent at any time, where processing is based on consent;
  • Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

To exercise any of these rights, contact us using the details below. We respond to all requests within one month. Every marketing email we send includes an unsubscribe link.

8. Data Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse, including encrypted connections (HTTPS), access controls, and regular security reviews. If you believe you have found a security vulnerability, please report it through our responsible disclosure policy.

9. Social Media

We are not responsible for the processing of personal data when you visit Creosoft pages on social media platforms such as LinkedIn, Instagram, or YouTube. The privacy policies of those platforms apply there, and we advise you to review them.

10. Contact Us

If you have questions about this Privacy Statement or how we handle your personal data, please contact us:

  • Email: info@creosoft.nl
  • Company: Creosoft, the Netherlands
  • KVK-nummer: 97079413

11. Changes to This Privacy Statement

We may update this Privacy Statement from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top of this page indicates when it was last revised.