Privacy Policy

1. Who we are

1.1Biotiq V.O.F. is the controller of the personal data described in this policy. We are established at Eerste van der Helststraat 58-1, 1072 NX Amsterdam, the Netherlands, and registered with the Dutch Chamber of Commerce under number 42046489.

1.2You can reach us about anything in this policy at info@biotiq.io.

1.3We have not appointed a Data Protection Officer. We are a two-person firm and are not required to appoint one.

2. What this policy covers

2.1This policy explains what happens to personal data when you visit biotiq.io, when you email us, when you book a call with us, and when we research or approach you as part of our business development work.

2.2It does not cover personal data we process on behalf of a client during an engagement. In that situation the client is the controller and we act as a processor, under a separate data processing agreement as described in clause 14.4 of our Terms & Conditions.

3. What we collect when you visit the site

3.1This website has no analytics, no advertising, no tracking pixels and no cookies. We do not build a profile of you and we do not know who you are when you read these pages.

3.2Our hosting provider records standard server logs when a page is requested. These contain your IP address, the time of the request, the page requested, and your browser and operating system. This happens automatically and is technically necessary to serve the site and to keep it secure.

3.3The site loads two typefaces from Google Fonts. Your browser requests those files directly from Google, and Google receives your IP address as part of that request. This happens on every page and is not something you have consented to, which is why we state it plainly here.

3.4The site stores a single value in your browser session storage while alternative homepage designs are being reviewed, so that navigation returns you to the version you were looking at. It contains no personal data, is not sent anywhere, and is deleted when you close the tab. It will be removed once the review is finished.

4. What we collect when you contact us

4.1If you email us, we receive your email address, your name if you give it, and whatever you choose to write. We keep the correspondence so we can answer you and continue the conversation.

4.2If you book an introductory call, the scheduling service we use collects your name, your email address, the time you selected, and anything you enter in the booking form. That service acts on our instructions.

4.3We do not ask for and do not want special categories of personal data, and we do not knowingly collect personal data from anyone under 16.

5. What we collect when we approach you for business

5.1We identify organisations that may need what we do, and the people inside them who are responsible for the relevant area. We do this for our own outreach, and in some engagements to deliver a researched list of organisations and contacts to a client. In both cases we are the controller of the research we carry out.

5.2What we hold about you here is business contact data and nothing more: your name, your job title and role, the organisation you work for, your professional profile page, your business email address where it is published or technically verifiable, and the public source and date we relied on. We do not collect private email addresses or private telephone numbers, and we do not collect special categories of personal data.

5.3We did not obtain this data from you. We obtain it from publicly accessible sources, chiefly your employer’s website, your professional profile and public registers, and from business contact enrichment and verification providers.

5.4Basis: our legitimate interest, and the legitimate interest of the organisation we act for, in reaching the person responsible for a business decision. We have weighed that interest against your interests and rights and we record that assessment. We will share it with you on request.

5.5Where a client engaged us to carry out the research, we pass the data to that client. From the moment they receive it they decide for themselves whether, when and how to contact you, and they are the controller of that decision.

5.6We keep this data for no longer than six months after we deliver it to a client or last use it ourselves. We keep a limited record of which organisations we have already researched or delivered, so that we do not do the same work twice or charge a client twice, and we keep what the law requires us to keep.

5.7You can object at any time to our use of your data for this purpose on grounds relating to your particular situation, and you can tell us at any time to stop using it for direct marketing. If you do, we stop and we remove you. Email info@biotiq.io. Section 9 sets out your other rights.

5.8Because we did not get your data from you, we would normally tell you individually that we hold it. Where reaching every person individually would take a disproportionate effort, we rely on the exception the GDPR provides for exactly that situation and publish this section instead. If a client contacts you using data we supplied, they will tell you where it came from and point you here.

6. Why we process it, and on what basis

6.1Serving the website and keeping it available and secure. Basis: our legitimate interest in operating a website that works and is not abused.

6.2Answering your email and arranging a call. Basis: your request, and the steps taken at your request before entering into a contract.

6.3Performing an engagement once you become a client, including invoicing. Basis: performance of the contract, and our legal obligations for financial records.

6.4We do not sell personal data, and we do not use it for automated decision-making that produces legal effects for you.

7. Who else receives it

7.1We use a small number of service providers to run the business: a hosting provider for the website, an email and document provider for correspondence, and a scheduling service for booking calls. They process personal data on our instructions and are not permitted to use it for their own purposes.

7.2Google receives your IP address when your browser fetches the webfonts, as described in article 3.3. Google is not acting on our instructions in that exchange, and its own terms apply.

7.3We share personal data with anyone else only where the law requires it, or where it is necessary to establish or defend a legal claim.

7.4Where a provider processes personal data outside the European Economic Area, that transfer takes place under the European Commission’s Standard Contractual Clauses or another lawful transfer mechanism.

8. How long we keep it

8.1Server logs are kept only as long as our hosting provider retains them for operational and security purposes, which is a short period measured in weeks.

8.2Correspondence that does not lead to an engagement is kept for no longer than two years, after which we delete it.

8.3Invoices, contracts and the records that support them are kept for seven years, because Dutch tax law requires us to retain our business records for that period.

8.4Business contact data we gathered by researching an organisation is kept as described in article 5.6, which is a shorter period than the ones above.

9. Your rights

9.1You have the right to ask what personal data we hold about you and to receive a copy of it.

9.2You have the right to have inaccurate data corrected, and to have data erased where we no longer have grounds to keep it.

9.3You have the right to ask us to restrict processing, to object to processing we base on our legitimate interest, and to receive data you gave us in a portable form.

9.4To exercise any of these rights, email info@biotiq.io. We will respond within one month. There is no charge.

9.5If you are not satisfied with how we have handled your data, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl. You also have the right to complain to the supervisory authority in the country where you live.

10. Links to other websites

10.1This site links to LinkedIn and to our scheduling service. Once you follow such a link you are on someone else’s website, governed by their privacy policy and not by this one. We have no control over what they collect.

11. Changes to this policy

11.1If we change how we handle personal data we will update this page and change the version date at the top. Material changes will be described rather than quietly absorbed.