Privacy Policy
Your privacy is fundamental to our service. This policy explains how we collect, use, and protect your personal data in full compliance with GDPR and EU privacy regulations.
Effective Date: January 15, 2025 | Last Updated: January 15, 2025 | Data Controller: Datlas B.V., Netherlands
Privacy at a Glance
We process your personal data fairly, lawfully, and transparently with strong technical and organizational measures to protect your privacy rights.
GDPR Compliant
Full compliance with EU data protection regulations and privacy by design principles.
EU Data Residency
Your data stays in Europe. No transfers to third countries without your explicit consent.
Your Rights Protected
Full access to your data rights with easy tools to exercise them at any time.
Personal Data We Process
We only collect personal data that is necessary for providing our document intelligence services and maintaining platform security.
Account Information
Service provision and account management
Data Examples:
Usage Analytics
Service improvement and security
Data Examples:
Document Metadata
Document processing and compliance
Data Examples:
Security Information
Platform security and fraud prevention
Data Examples:
Your Privacy Rights
Under GDPR, you have comprehensive rights regarding your personal data. We provide easy ways to exercise these rights.
Right to Information
Understand how your personal data is processed
Right of Access
Request a copy of your personal data
Right to Rectification
Correct inaccurate personal data
Right to Erasure
Request deletion of personal data
Right to Restrict Processing
Limit how we process your data
Right to Data Portability
Receive data in machine-readable format
Right to Object
Object to processing based on legitimate interests
Exercise Your Rights
Response time: Within 30 days | Free of charge for reasonable requests
International Data Transfers
We maintain strict controls on where your data goes. EU data sovereignty is our priority.
Within EU/EEA
Primary data processing and storage
GDPR applies directly
None - full EU data sovereignty
Third Countries
Limited support services
Adequacy decisions only
No personal data transfer without explicit consent
Technical & Organizational Measures
We implement state-of-the-art security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
Data Breach Procedures
Detection & Assessment
Automated detection within 15 minutes, risk assessment within 1 hour
Authority Notification
Dutch DPA notification within 72 hours if high risk to rights
Individual Notification
Direct communication if high risk to rights and freedoms
Remediation
Immediate containment and measures to prevent recurrence
Privacy Questions?
Our Data Protection Officer is available to help with any privacy-related questions or concerns.
Data Protection Officer
privacy@datlas.eu
Supervisory Authority
Dutch Data Protection Authority (AP)
Response Time
Within 30 days maximum