Privacy statement
Last updated [DATE]
This statement explains how Site Pulse handles personal data when you visit this website, request a demo, or use the platform. We keep it plain. If anything is unclear, email us at info@site-pulse.nl. [Legal entity name] ("Site Pulse", "we") is the data controller for this website and for its own customer and account records; for the permit and operational data you process inside the platform, your organisation is the controller and Site Pulse acts as processor on your behalf.
01 Who we are
Site Pulse is operated by [Legal entity name], registered with the Dutch Chamber of Commerce (KvK) under [KvK number], with its registered office at [Registered address]. For any question about this statement or your data, reach us at info@site-pulse.nl.
02 Data we collect
We collect only what we need:
- Contact data you send us: name, company, email, phone and your message, via the contact form or by email.
- Account data: name, work email, role and organisation, for the people your site gives access to the platform.
- Operational data inside the platform: permits, LOTO procedures, certificates, timestamps and the signatures on each handover. This is your data; you are its controller.
- Technical data: limited, privacy-friendly request logs needed to run and secure the service. We use no advertising or tracking cookies.
03 Why we process it, and on what basis
We process personal data on these grounds under the GDPR (and the Dutch UAVG):
- To answer your enquiry and prepare a demo or quote: on the basis of your request and our legitimate interest in responding (Art. 6(1)(b) and (f)).
- To provide the platform under our agreement with your organisation: performance of a contract (Art. 6(1)(b)).
- To keep the service secure and reliable and to meet our legal obligations: legitimate interest and legal obligation (Art. 6(1)(f) and (c)).
04 Controller and processor
For the data your team enters into the platform (permits, isolations, certificates, audit trails), your organisation decides why and how it is processed, so you are the controller and we are the processor. We process it only on your documented instructions, under a data processing agreement that forms part of our contract. For this website and our own customer records, we are the controller.
05 Where your data is hosted
The platform runs in the EU region (Frankfurt, Germany). Data stays in the EU. We use a small number of sub-processors, strictly to run the service; a current list is available on request and named in the data processing agreement. We never sell personal data.
06 Who can see your data
Inside your organisation, access follows the role each person holds. Site Pulse staff access your data only when you ask us to for support, with your explicit permission, and every access is recorded in an audit trail.
07 How long we keep it
We keep contact-form messages for as long as we need to follow up, then archive or delete them. Platform data is kept for the life of your contract; on termination we export it to you in an open format and then delete it from our systems within [retention period], unless the law requires us to keep certain records longer.
08 Your rights
Under the GDPR you can ask us to:
- Give you access to the personal data we hold about you.
- Correct anything that is wrong.
- Delete your data, where no overriding legal reason requires us to keep it.
- Restrict or object to certain processing.
- Provide your data in a portable format.
09 Cookies and this website
This site uses no advertising or analytics cookies. We load fonts from Google Fonts to render the page, so your browser contacts Google to fetch them. We keep third-party calls to the minimum needed to serve the site.
10 Security
We protect data with encryption in transit and at rest, role-based access and audited support access. No system is perfect; if a breach ever affects your personal data, we will notify you and the authorities as the law requires.
11 Questions or complaints
To exercise a right, or if you have a concern, email info@site-pulse.nl and we will respond within one month. If we cannot resolve it together, you have the right to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).
12 Changes to this statement
When this statement changes, we update the date above and tell affected customers about material changes. The current version always lives at site-pulse.nl/privacy.