Last updated: 13 October 2026

Dot Technology respects your privacy. This Privacy Policy explains how we handle personal data when you visit [www.dottechnology.nl](https://www.dottechnology.nl) or contact us in connection with our business. We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch data protection law.

1. Who we are

Dot Technology is responsible for the processing described in this Privacy Policy and acts as the data controller.

Dot Technology
Van Mourik Broekmanweg 4
2628 XE Delft
The Netherlands
Telephone: +31 (0) 15 202 6133
Website: www.dottechnology.nl

You can contact us using these details for privacy questions or to exercise your rights.

2. Personal data we process

Depending on how you interact with us, we may process:

• Your name, company name and job title.
• Contact details you provide, such as your email address, telephone number or postal address.
• The contents of your enquiry and related correspondence.
• Technical information received when you visit our website, such as your IP address, browser information, requested pages, and the date and time of your visit. Our hosting infrastructure may record this information in server or security logs.

We obtain contact and enquiry information directly from you. Technical information is received automatically when your browser connects to the website.

You do not have to provide personal data to make an enquiry. However, without sufficient contact information, we may be unable to respond or provide the information you request. Please avoid including sensitive personal data in general enquiries.

3. Why we use personal data

We process personal data for the following purposes and on the following legal bases:

• Responding to enquiries and maintaining business contact: our legitimate interest in communicating with people who contact us and answering their questions.
• Preparing or carrying out an agreement with you:*taking steps at your request before entering into a contract, or performing that contract. Where you act on behalf of a company, we generally rely on our legitimate interest in managing that business relationship.
• Operating and protecting our website: our legitimate interest in delivering website content, diagnosing technical problems, and preventing misuse and security incidents.
• Meeting legal requirements: compliance with applicable legal obligations, where these require us to process or retain personal data.

Where processing requires your consent, we will ask for it separately. You may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

4. Cookies

Cookies are small files that websites can store on your device.

Our website scan carried out on 13 October 2026 did not detect any cookies on the ten pages scanned. This scan result does not exclude the processing of technical data described above.

If we introduce cookies or similar technologies, we will update the relevant information and obtain your consent before using them where required by law. Where consent is required, you will be able to refuse it and withdraw it as easily as you give it.

5. Sharing personal data

We do not sell your personal data. We share it only where necessary for the purposes described in this policy, for example with website hosting, IT support and communication service providers, professional advisers, or authorities where disclosure is legally required.

Service providers processing personal data on our behalf must follow our instructions and are subject to appropriate data processing agreements. We limit disclosures to the information necessary for the relevant purpose.

6. International transfers

If a service provider processes personal data outside the European Economic Area (EEA), we will ensure that an appropriate transfer mechanism applies. This may be a European Commission adequacy decision or Standard Contractual Clauses, together with additional safeguards where necessary.

You can contact us for information about any applicable transfers and to obtain a copy of the relevant safeguards.

7. How long we keep personal data

We retain personal data only for as long as necessary for the purpose for which it was collected:

• Enquiries and correspondence:** until your enquiry and related follow-up are completed, unless the correspondence remains necessary for an ongoing business relationship or a legal claim.
• Contract-related information:** for the duration of the relationship and afterwards only where needed to meet legal retention requirements or establish, exercise or defend legal claims.
• Technical and security logs:** for the period needed to investigate technical problems, detect misuse and address security incidents. Where a specific incident requires investigation, relevant records may be retained until that investigation and any related proceedings are completed.

When deciding whether continued retention is necessary, we consider outstanding requests, ongoing relationships, applicable legal requirements and unresolved disputes. Once retention is no longer necessary, we delete the data or make it anonymous.

8. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration and disclosure. Access is limited to people who need the information for their work.

9. Your rights

Subject to the conditions and exceptions in the GDPR, you have the right to:

• Access your personal data and receive a copy.
• Have inaccurate or incomplete personal data corrected.
• Request deletion of your personal data.
• Request restriction of processing.
• Object to processing based on legitimate interests.
• Receive data you provided in a commonly used, machine-readable format and have it transferred to another organisation, where the right to data portability applies.
• Withdraw consent where processing is based on consent.

To exercise your rights, contact us using the details above. We may request information reasonably necessary to confirm your identity. We normally respond within one month. If an extension is permitted because of the complexity or number of requests, we will inform you within that month and explain why.

You also have the right to lodge a complaint with the [Autoriteit Persoonsgegevens](https://www.autoriteitpersoonsgegevens.nl), the Dutch data protection authority, or another competent supervisory authority.

10. Automated decision-making

We do not make decisions about you based solely on automated processing that produce legal effects or similarly significantly affect you.

11. External websites

Our website may contain links to external websites. Those websites have their own privacy policies. Please review their policies when you visit them.

12. Changes to this policy

We may update this Privacy Policy to reflect changes in our activities or legal requirements. The latest version will be published on this website, with the date of the most recent update shown above.