Privacy Policy

Effective Date: 2025-11-12

Welcome to evolv365.com (“we”, “us”, “our”).
We are Evolv365 B.V., a private limited company established in the Netherlands, located at Grotelseboslaan 8, 3451 HD Vleuten, The Netherlands, registered with the Dutch Chamber of Commerce (KvK 98451863).

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit or use our website – evolv365.com (the “Site”) – and any related services, features, or tools (collectively, the “Services”).
By using our Site, you agree to the terms of this Privacy Policy.


1. Controller Information

Under the General Data Protection Regulation (GDPR), the data controller responsible for your personal data is:

Evolv365 Holding B.V.
Attn: Data Protection Officer
Address: Grotelseboslaan 8, 3451 HD Vleuten, The Netherlands
Email:

We determine the purposes and means of processing personal data under Article 4(7) GDPR.


2. What Personal Data We Collect

We may collect the following categories of personal data:

A. Information you provide directly

  • Name, email address, telephone number, company name
  • Message content when you contact us
  • Account registration details (if applicable)
  • Payment or billing information (if applicable)

B. Information collected automatically

  • IP address, browser type, operating system
  • Pages visited, time spent, referral URL
  • Cookies and analytics data

C. Information from third parties

  • Data from analytics or marketing partners (aggregated, anonymized, or pseudonymized)

3. Purposes and Legal Bases of Processing

We process your personal data only when we have a lawful basis under Article 6 GDPR.

Purpose and Legal Basis

-- To operate and maintain our Site ==> Legitimate interest (Art. 6 (1)(f))

-- To respond to enquiries and communicate with you ==> Consent or legitimate interest

-- To provide services or fulfil a contract ==> Contractual necessity (Art. 6 (1)(b))

-- To send newsletters or marketing updates ==> Consent (Art. 6 (1)(a))

-- To comply with legal obligations ==> Legal obligation (Art. 6 (1)(c))


4. Cookies and Tracking

We use cookies to ensure proper functionality, analyze usage, and improve our content.
You may adjust your browser settings to refuse cookies or opt out through the cookie banner available on our website.


5. Data Sharing and Processors

We only share data when necessary and under a Data Processing Agreement (DPA) in line with Article 28 GDPR.

We may use:

  • Microsoft Azure (for hosting)
  • Analytics providers (e.g., Google Analytics 4)
  • Email communication services (e.g., Outlook 365)

Each processor only acts on our documented instructions and ensures appropriate security.


6. International Data Transfers

If personal data is transferred outside the European Economic Area (EEA), we ensure adequate protection under Chapter V GDPR through:

  • An adequacy decision from the European Commission, or
  • Standard Contractual Clauses (SCCs) approved by the Commission.

7. Data Retention

We store personal data only as long as necessary for the purposes described or as required by law.
After that, we securely delete or anonymize it.

Example retention periods:

  • Contact form data: 12 months
  • Client correspondence: up to 7 years (for Dutch tax compliance)

8. Data Security

We implement appropriate technical and organizational measures per Article 32 GDPR, including:

  • Encryption (TLS/SSL)
  • Access controls and authentication
  • Regular software and infrastructure updates
  • Restricted access to personal data

9. Your Data Protection Rights

Under the GDPR, you have the following rights:

  • Right of access (Art. 15) – to request copies of your data
  • Right to rectification (Art. 16) – to correct inaccuracies
  • Right to erasure (Art. 17) – to request deletion (“right to be forgotten”)
  • Right to restriction of processing (Art. 18)
  • Right to data portability (Art. 20)
  • Right to object (Art. 21) – especially for direct marketing
  • Right to withdraw consent (Art. 7(3)) – at any time

To exercise these rights, contact us at .
We will respond within 30 days, subject to identification verification.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):
https://autoriteitpersoonsgegevens.nl/en


10. Children’s Privacy

Our services are not directed to children under 16 years of age.
We do not knowingly collect data from minors.
If you believe we have collected data from a minor, please contact us to delete it.


11. Updates to This Policy

We may update this Privacy Policy periodically.
The latest version will always be available at evolv365.com/privacy-policy.
Substantial changes will be clearly communicated.


12. Contact

Evolv365 B.V.
Attn: Data Protection Officer
Grotelseboslaan 8, 3451 HD Vleuten, The Netherlands