Privacy Policy

01Data controller

Orbecta (trade name of Dynasticon B.V.) is responsible for the processing of personal data as described in this privacy policy.

02What data do we process?

Orbecta processes personal data because you use our services and/or because you provide it to us yourself. We process the following categories of data:

2.1 Account data

• First and last name
• Business email address
• Phone number
• Role within the company
• Password (stored encrypted)

2.2 Company data

• Company name
• Chamber of Commerce number
• VAT number
• Company address
• PO/reference number (if provided)

2.3 Payment data

• For online payments: processed by our payment provider (we only receive confirmation)
• For invoice payment: bank account number for administration
• Invoice numbers and payment dates

2.4 Usage data

• IP address and browser information
• Date and time of visit to the Platform
• Which pages and features you use
• Claims, questions or analyses you submit
• Usage and interaction data via our analytics tool (PostHog), only with your consent — see section 10

2.5 Communication data

• Email correspondence between you and Orbecta
• Content of support questions or feedback

03Why do we process this data?

We process your data for the following purposes:

• Performance of the agreement: Providing Pro and Business access, managing your account and billing;
• Legal obligations: Accounting, tax obligations, GDPR requests;
• Customer communication: Answering questions, sending confirmations and invoices;
• Platform improvement: Anonymised usage data helps us improve the Platform;
• Security: Detection of fraudulent use or abuse.

04Legal basis

We process your personal data on the basis of:

• Performance of the agreement (GDPR art. 6(1)(b)) for providing the subscription;
• Legal obligation (GDPR art. 6(1)(c)) for billing and accounting (7-year retention requirement);
• Legitimate interest (GDPR art. 6(1)(f)) for security and platform improvement;
• Consent (GDPR art. 6(1)(a)) where explicitly requested, for example for optional communication and analytical cookies.

05How long do we keep your data?

We do not keep your data longer than strictly necessary:

06Who do we share your data with?

We never sell your data to third parties. We only share data with:

6.1 Sub-processors

Orbecta uses carefully selected sub-processors to provide the Platform. Below you will find the categories with the location of processing:

• Hosting of database, authentication and files (within EU);
• Sending of transactional emails (within EU);
• Processing of online payments (within and outside EU);
• AI analysis of anonymised market data (outside EU, under Standard Contractual Clauses);
• Product and website analytics + session replay via PostHog (hosted within the EU), only with consent;
• Website and email hosting.

An up-to-date list of sub-processors with names and exact locations is provided on request as an annex to our Data Processing Agreement (DPA). Please send an email to [email protected].

6.2 Legal obligations

When we are legally obliged to do so (for example at the request of the tax authorities, police or judiciary).

07Transfers outside the EU

Some of our sub-processors are (partly) established outside the European Economic Area (EEA). Transfers take place on the basis of:

• Standard Contractual Clauses (SCCs) of the European Commission;
• Adequacy decisions where applicable;
• EU-US Data Privacy Framework certification where applicable.

08Your rights (GDPR)

You have the following rights regarding your personal data:

• Right of access — request which data we hold about you;
• Right to rectification — correct inaccurate data;
• Right to erasure — delete your data (within legal limits);
• Right to restriction — restrict processing;
• Right to data portability — transfer data to another service;
• Right to object — object to processing;
• Right to withdraw consent — withdraw previously given consent.

You can submit requests via [email protected]. We respond within 30 days.

09Security

We take the protection of your data seriously and apply appropriate technical and organisational measures:

• Encrypted connections (HTTPS/TLS) across the entire Platform;
• Passwords are stored securely encrypted according to industry standards;
• Access to data only on a need-to-know basis via strict authorisation rules;
• Regular security updates of software and infrastructure;
• Audit logs for sensitive actions.

10Cookies and analytics

The Platform uses two types of cookies and similar techniques:

• Strictly necessary cookies — for login, session management and security. These are needed to make the Platform work and are placed without consent.
• Analytical cookies (PostHog) — we use PostHog (hosted within the EU) to understand how the Platform is used and to improve it. This collects usage data such as pages visited and click behaviour, and — via session replay — recordings of user interaction. With session replay, text and input fields are masked by default, so that personal data is not visible.

We place analytical cookies only with your consent. On your first visit we ask for consent via a cookie notice. You can change or withdraw your choice at any time by clearing your browser data for this website. If you decline, PostHog is not loaded and no analysis takes place. See also our cookie policy.

11Complaints

If you have a complaint about the processing of your personal data, you can first report it to us via [email protected].

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): autoriteitpersoonsgegevens.nl.

12Data Processing Agreement (DPA)

For enterprise customers or customers with specific compliance requirements, a Data Processing Agreement is available on request. Send an email to [email protected] to request it.

13Changes

We may amend this privacy policy. Substantial changes are communicated to active customers by email at least 30 days before they take effect. The most recent version is always available at orbecta.com/privacy_en.html.

14Contact

Questions about this privacy policy or your data?