Privacy statement

Who is responsible

Fiusion B.V. is responsible for the personal data we process through this website and our email address. We are registered with the Netherlands Chamber of Commerce (KvK) under number 42100808. Questions about privacy can be sent to info@fiusion.nl.

This statement covers two situations: you visit fiusion.nl, or you email us. Work we do for clients is covered by separate agreements.

What we don't do

This website uses no cookies for statistics, advertising or tracking, no social media buttons and no embedded videos or maps. We don't profile visitors, we don't make decisions based solely on automated processing that have legal or similarly significant effects on you (Article 22 GDPR), and we don't sell personal data.

1. When you visit our website

What data. To deliver a page to your browser, our hosting provider's server receives technical details of your request: your IP address, the date and time, the page requested, the server's response and what your browser sends automatically, such as browser type and operating system. Your country can be derived from your IP address.

Why. To display the website, trace faults and detect and block misuse and attacks.

Legal basis. Our legitimate interest in a working and secure website (Article 6(1)(f) GDPR). Without this data the website cannot be displayed. We don't use it to recognise or track you.

How long. The logs our hosting provider keeps for us are deleted automatically, no later than 30 days after your visit. Data Vercel uses to secure its own platform is kept for the periods set out in Vercel's privacy notice.

Who receives it. Vercel Inc. hosts our website as our processor under a data processing agreement. Vercel uses its own sub-processors, for example for data centres. Vercel also uses limited traffic data, such as IP addresses, to secure its own platform. Vercel is responsible for that use itself; see Vercel's privacy notice.

Statistics and loading speed. We want to know how many people visit the website, which pages they read and how quickly those pages load. For this we use Vercel Web Analytics and Vercel Speed Insights. Both work without cookies and without storing anything in your browser. For a page view, Vercel records which page was viewed (without query parameters), the time, the country, the device type, the browser and the operating system. Web Analytics also records which website you came from, your approximate region and city, and whether you click a button or link to email us. Speed Insights also records loading times, the type of network connection (such as 4G) and which part of the page a measurement relates to. To count visits without cookies, Web Analytics derives a code from your request (a hash). That code is discarded after 24 hours. Your IP address is not stored with this data. We only see totals, not what an individual visitor does. The legal basis is our legitimate interest in understanding how the website is used and improving it (Article 6(1)(f) GDPR). Vercel processes this data as our processor under the same data processing agreement. If Global Privacy Control or Do Not Track is switched on in your browser, we do not measure your visit. You can also block the measurement with a content blocker; the website will still work.

2. When you email us

What data. Your email address and name, and whatever you include in your message, signature or attachments, such as your role, organisation and phone number. We also receive technical details of the message, such as the date and time.

Why. To answer your question, arrange an introductory conversation, prepare a proposal if you ask us to, and pick up the conversation if you come back to it later.

Legal basis. Our legitimate interest in answering questions about our services (Article 6(1)(f) GDPR). If you contact us on your own behalf as a prospective client, for example as a sole trader, we also process your data to take steps at your request before entering into a contract (Article 6(1)(b) GDPR). If your question leads to an engagement, we keep documents that form part of our accounts because the law requires us to (Article 6(1)(c) GDPR).

Who receives it. Within Fiusion, only the people who handle your question. Our email runs on Google Workspace. Google Cloud EMEA Limited in Ireland processes your message as our processor under Google's data processing terms and uses sub-processors to do so. We don't share your message with anyone else unless that is needed to answer your question and you agree, or the law requires it. Our bookkeeper or accountant may see documents that form part of our accounts.

How long.

• If your question does not lead to an engagement, we delete the correspondence no later than 12 months after our last contact.
• If it does lead to an engagement, the correspondence becomes part of the engagement file. We keep it for as long as the engagement runs and afterwards for as long as the law requires. Documents covered by Dutch tax record-keeping rules, such as quotes and engagement confirmations, are kept for seven years.
• Messages with no business purpose, such as spam, are deleted as soon as we see them. Messages caught by the spam filter are erased automatically after 30 days.

Deleted data may remain in Google's systems and backups for up to 180 days before it is permanently erased. This also applies to messages we delete as described in section 3.

You don't have to email us. Without an email address, we simply can't reply.

3. What not to send us

Please don't send us health information, citizen service numbers (BSN) or other sensitive personal data. Please don't send personal data about clients, patients, residents or colleagues either. If we receive it anyway, we won't use it, we will answer your question without it as far as we can and we will delete the message or attachment within 30 days of receipt. We will let you know when we have.

Want to share confidential business information, for example for a tender? Email us first. We will agree how you share it and on what confidentiality terms.

4. Data outside the European Economic Area

Vercel Inc. is based in the United States. Vercel and Google use sub-processors and data centres outside the European Economic Area (EEA). Data only goes to a country outside the EEA if the European Commission has decided that the country offers an adequate level of protection (an adequacy decision), or if appropriate safeguards apply.

• United States: the adequacy decision for the EU-U.S. Data Privacy Framework applies to companies certified under it. Vercel and Google are certified; you can check this at dataprivacyframework.gov. Vercel also uses the European Commission's standard contractual clauses, and Google uses them where the Data Privacy Framework does not apply. They are included in the data processing terms of Vercel and Google.
• United Kingdom: our hosting provider may also process requests in London. An adequacy decision applies to the United Kingdom.

5. Security

We protect personal data with measures that suit the nature of the data. The website is only available over an encrypted connection (HTTPS). Access to the contact mailbox is limited to the people who handle messages.

6. Your rights

You can ask us for access to your data, or ask us to correct or delete it or to restrict its processing. Where we process data to take steps towards a contract at your request, you can also ask to receive the data you provided to us in a commonly used file format, or to have it transferred to another party.

Objection. You can object at any time to processing based on our legitimate interest, such as website logs, the statistics and your email. We will then stop, unless we have compelling legitimate grounds that override your interests, or need the data for legal claims.

Send your request to info@fiusion.nl with the subject line "Privacy request". We will respond within one month. If your request is complex or you send many requests, we may extend that period by two months. We will tell you within the first month if we do. Requests are free of charge. If we need to check that a request really comes from you, we will ask for as little additional information as possible.

If your request is about a website visit, please include your IP address and the time of your visit. Without them, we usually can't link log entries to you. After 30 days, the logs kept for us have been deleted.

Unhappy with how we handle your data? Let us know at info@fiusion.nl. You can also lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or with the supervisory authority where you live or work.

7. Cookies

Our cookie statement explains how we handle cookies and similar technologies.

8. Changes

We will update this statement when our processing changes, for example if we add a contact form. The version and date are shown at the top. Version 1.1 added the statistics and the measurement of loading speed under section 1.