Privacy Policy

1. Who we are

1.1Biotiq V.O.F. is the controller of the personal data described in this policy. We are established at Eerste van der Helststraat 58-1, 1072 NX Amsterdam, the Netherlands, and registered with the Dutch Chamber of Commerce under number 42046489.

1.2You can reach us about anything in this policy at info@biotiq.io.

1.3We have not appointed a Data Protection Officer. We are a two-person firm and are not required to appoint one.

2. What this policy covers

2.1This policy explains what happens to personal data when you visit biotiq.io, when you email us, and when you book a call with us.

2.2It does not cover personal data we process on behalf of a client during an engagement. In that situation the client is the controller and we act as a processor, under a separate data processing agreement as described in clause 13.4 of our Terms & Conditions.

3. What we collect when you visit the site

3.1This website has no analytics, no advertising, no tracking pixels and no cookies. We do not build a profile of you and we do not know who you are when you read these pages.

3.2Our hosting provider records standard server logs when a page is requested. These contain your IP address, the time of the request, the page requested, and your browser and operating system. This happens automatically and is technically necessary to serve the site and to keep it secure.

3.3The site loads two typefaces from Google Fonts. Your browser requests those files directly from Google, and Google receives your IP address as part of that request. This happens on every page and is not something you have consented to, which is why we state it plainly here.

3.4The site stores a single value in your browser session storage while alternative homepage designs are being reviewed, so that navigation returns you to the version you were looking at. It contains no personal data, is not sent anywhere, and is deleted when you close the tab. It will be removed once the review is finished.

4. What we collect when you contact us

4.1If you email us, we receive your email address, your name if you give it, and whatever you choose to write. We keep the correspondence so we can answer you and continue the conversation.

4.2If you book an introductory call, the scheduling service we use collects your name, your email address, the time you selected, and anything you enter in the booking form. That service acts on our instructions.

4.3We do not ask for and do not want special categories of personal data, and we do not knowingly collect personal data from anyone under 16.

5. Why we process it, and on what basis

5.1Serving the website and keeping it available and secure. Basis: our legitimate interest in operating a website that works and is not abused.

5.2Answering your email and arranging a call. Basis: your request, and the steps taken at your request before entering into a contract.

5.3Performing an engagement once you become a client, including invoicing. Basis: performance of the contract, and our legal obligations for financial records.

5.4We do not sell personal data, and we do not use it for automated decision-making that produces legal effects for you.

6. Who else receives it

6.1We use a small number of service providers to run the business: a hosting provider for the website, an email and document provider for correspondence, and a scheduling service for booking calls. They process personal data on our instructions and are not permitted to use it for their own purposes.

6.2Google receives your IP address when your browser fetches the webfonts, as described in article 3.3. Google is not acting on our instructions in that exchange, and its own terms apply.

6.3We share personal data with anyone else only where the law requires it, or where it is necessary to establish or defend a legal claim.

6.4Where a provider processes personal data outside the European Economic Area, that transfer takes place under the European Commission’s Standard Contractual Clauses or another lawful transfer mechanism.

7. How long we keep it

7.1Server logs are kept only as long as our hosting provider retains them for operational and security purposes, which is a short period measured in weeks.

7.2Correspondence that does not lead to an engagement is kept for no longer than two years, after which we delete it.

7.3Invoices, contracts and the records that support them are kept for seven years, because Dutch tax law requires us to retain our business records for that period.

8. Your rights

8.1You have the right to ask what personal data we hold about you and to receive a copy of it.

8.2You have the right to have inaccurate data corrected, and to have data erased where we no longer have grounds to keep it.

8.3You have the right to ask us to restrict processing, to object to processing we base on our legitimate interest, and to receive data you gave us in a portable form.

8.4To exercise any of these rights, email info@biotiq.io. We will respond within one month. There is no charge.

8.5If you are not satisfied with how we have handled your data, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl. You also have the right to complain to the supervisory authority in the country where you live.

9. Links to other websites

9.1This site links to LinkedIn and to our scheduling service. Once you follow such a link you are on someone else’s website, governed by their privacy policy and not by this one. We have no control over what they collect.

10. Changes to this policy

10.1If we change how we handle personal data we will update this page and change the version date at the top. Material changes will be described rather than quietly absorbed.