Privacy statement

1. Who we are

This privacy statement applies to the comprendly.com website, operated by Comprendly. Our office is at Tappersweg 12-N, 2031 ET Haarlem, the Netherlands. You can reach us at info@comprendly.com or +31 85 2007 810.

We are the data controller for the personal data described in this statement. We have not appointed a Data Protection Officer; the contact above handles all privacy requests.

2. Personal data we process

We process the following categories of personal data:

• Contact details you give us. When you fill in our contact or demo request form, we receive your name, email address, phone number, company name, role, and the message you send.
• Technical data. Your IP address, browser type, device information, and pages visited. Some of this is collected automatically by our hosting provider; some is collected by analytics and visitor identification tools that activate only after you consent.
• Consent records. Our consent banner records which cookie categories you accept or decline, so we can respect your choice on return visits.

3. Why we process your data

We process personal data for the purposes below, each with its own lawful basis under the GDPR:

• Responding to your enquiry. When you submit our contact or demo form, we use your details to reply, schedule a call, or prepare a proposal. Lawful basis: taking pre-contractual steps at your request (Article 6(1)(b) GDPR).
• Understanding how our website is used. We use Google Analytics 4 (via Google Tag Manager) to measure traffic and improve the site. Lawful basis: your consent (Article 6(1)(a) GDPR).
• Identifying which companies visit our website. We use ZenGem (powered by Snitcher) to recognize the company behind each visitor and remember returning visitors across sessions. Lawful basis: your consent (Article 6(1)(a) GDPR).
• Protecting the website from abuse. We apply a short per-IP rate limit to the lead form to prevent spam and abuse. Lawful basis: our legitimate interest in keeping the site secure (Article 6(1)(f) GDPR).
• Recording your cookie preferences. Our consent banner stores your choices so we can apply them on every visit. Lawful basis: compliance with our legal obligations under the ePrivacy Directive and GDPR.

4. Cookies and trackers

We use cookies and similar technologies to operate the website, measure usage, and identify visiting companies. We set non-essential cookies only after you consent through our banner. For the full list and details on managing your choices, see our cookies page.

5. Service providers we share data with

We use the following service providers to operate the website. They process personal data only on our instructions, under written data processing agreements:

• Vercel Inc. Hosts the website and processes server request data. United States, with EU regions available. Standard Contractual Clauses are in place.
• Resend (Drest, Inc.). Delivers the email we send when you submit a form. United States. Standard Contractual Clauses are in place.
• Google Ireland Limited. Provides Google Analytics 4 and Google Tag Manager. Ireland, with onward transfers to the United States under Standard Contractual Clauses.
• ZenGem (operating the Snitcher tracker). Identifies the company behind each visitor. Netherlands.
• CookieHub ehf. Provides our cookie consent banner. Iceland (within the EEA).

6. International transfers

Some of our service providers are based outside the European Economic Area, primarily in the United States. When personal data leaves the EEA, we rely on Standard Contractual Clauses approved by the European Commission and, where relevant, on supplementary measures to maintain a level of protection consistent with EU law.

7. How long we keep your data

We keep personal data only as long as we need it:

• Lead form submissions: up to two years from your last interaction with us, unless we enter into a customer relationship.
• Analytics data: up to fourteen months in Google Analytics 4.
• ZenGem visitor identifier (ajs_anonymous_id): up to two years from your last visit.
• Rate limit records: one hour, then deleted.
• Server logs: typically thirty to ninety days, depending on our hosting provider.
• Consent records: thirteen months, the standard retention for cookie consent under Dutch guidance.

8. Your rights

Under the GDPR you have the following rights:

• Access. Ask for a copy of the personal data we hold about you.
• Rectification. Ask us to correct data that is inaccurate or incomplete.
• Erasure. Ask us to delete your data, where the law allows.
• Restriction. Ask us to pause processing your data while a dispute is resolved.
• Portability. Ask for your data in a portable format, or for us to send it to another provider.
• Objection. Object to processing we carry out under legitimate interest.
• Withdraw consent. Where processing relies on your consent, you can withdraw it at any time. Use the cookie preferences link in the footer to change your cookie choices.

To exercise any of these rights, email us at info@comprendly.com. We respond within one month.

9. Filing a complaint

10. Security

We apply technical and organisational measures to protect personal data against loss, misuse, and unauthorised access. These include encryption in transit, access controls, and regular review of the service providers we work with.

11. Changes to this statement

We may update this privacy statement from time to time. Material changes will be reflected on this page, and we will update the last-revised date below.

12. Contact