This policy informs you under General Data Protection Regulation (GDPR) Art. 13 and GDPR Art. 14. The terms are the Terms of Service. This policy incorporates the Processor and recipient register. This policy is not a data processing agreement.
It covers the company website at arkintel.com and arkintel-staging.com.
1. Controller
Arkintel B.V., Molengraaffsingel 12, 2629 JD Delft, the Netherlands. Chamber of Commerce 99939940. RSIN 869196911. VAT NL869196911B01. Established in the Netherlands.
The lead supervisory authority is the Autoriteit Persoonsgegevens. How to complain is in §11 of this policy.
2. Delivery and analytics
We do not keep a visitor record.
Pages are delivered by Vercel Inc. Cookieless web analytics are also provided by Vercel Inc. When these legal documents are fetched from object storage, that request is handled by Cloudflare, Inc.
Categories:
IP address and request metadata, handled by Vercel to deliver the page
Aggregated figures such as page views, referring source, and region, and the request metadata Vercel uses to produce those aggregates
IP address and request metadata handled by Cloudflare when a published legal file is fetched
Names, locations, and transfer tools are on the register.
3. Whose data, and sources
The data in §2 of this policy is about the person whose browser requests a page, to the extent an IP address or request metadata identifies anyone. It comes from that request.
4. Purposes and legal bases
Purpose
Basis
Delivering the page you request
Legitimate interest, GDPR Art. 6(1)(f): publishing this site
Legitimate interest, GDPR Art. 6(1)(f): understanding use of this site
Fetching these published legal files from object storage
Legitimate interest, GDPR Art. 6(1)(f): making the legal documents available
Where we rely on legitimate interest, we have balanced that interest against your rights. The interest is publishing this site and understanding its use. The data is the request data in §2 of this policy. You can object (§10 of this policy).
5. Recipients
Categories are listed here. Names, locations, and transfer tools are on the register, which this policy incorporates. The label is processors and recipients, not sub-processors. We are the controller of the purposes in §4 of this policy.
Categories:
content delivery and cookieless analytics (Vercel Inc.)
object storage for these published legal files (Cloudflare, Inc.)
authorities, when the law requires a disclosure
our staff who publish the site
6. Transfers
A provider may process the request data in §2 of this policy outside the European Economic Area only with a GDPR Chapter V tool: an adequacy decision, including the EU-US Data Privacy Framework where that recipient is certified, and/or Standard Contractual Clauses, with supplementary measures where we use them. The register states the tool for each named recipient, as contracted.
7. Retention
We do not keep a visitor record. Request handling for the categories in §2 of this policy stays at the vendor named on the register.
8. Security
Connections use HTTPS.
Report vulnerabilities to legal@arkintel.com. §12 of this policy applies when a breach is likely to risk rights.
9. Links that leave this site
The page links to LinkedIn, X, Instagram, YouTube, and Meta Facebook. A click leaves this site. That platform then receives what that platform collects under its own rules. It is an independent controller of that processing. We do not control it. Your relationship with that platform is the one that applies.
10. Your rights
You may ask for access (GDPR Art. 15), correction (GDPR Art. 16), erasure (GDPR Art. 17), restriction (GDPR Art. 18), and a portable copy (GDPR Art. 20). You may object to processing based on legitimate interest (GDPR Art. 21).
We hold no visitor record, so we cannot provide a copy of data we do not have.
Email legal@arkintel.com. We reply within one month. If the request is complex, we may extend by two further months and we will tell you why within the first month. We may refuse or charge a reasonable fee for a request that is manifestly unfounded or excessive (GDPR Art. 12(5)).
You may also go to court under GDPR Art. 79, including, where GDPR Art. 79 allows, the courts of your habitual residence.
Please contact us first. You do not have to.
12. Breaches
If a breach is likely to risk your rights, we notify the Autoriteit Persoonsgegevens without undue delay and, where feasible, within 72 hours of becoming aware of it (GDPR Art. 33).
If the risk is high, we notify the people affected without undue delay (GDPR Art. 34), unless an exception in GDPR Art. 34 applies. We hold no visitor email address, so where individual contact is impossible we use a public communication, as GDPR Art. 34 allows.
13. Cookies
The Cookie Policy covers information stored on or read from your device.
14. Changes
The file on the site is the current policy. The version and the effective date are on this file. We replace the file in place.
A new purpose, or a new flow outside the European Economic Area, is stated in the replaced policy and on the register. If you do not agree, stop using the site.
15. Law
Processing is governed by the General Data Protection Regulation and the Dutch GDPR Implementation Act (Uitvoeringswet AVG). Disputes about the terms follow the Terms of Service.