1. Data Controller
Orbecta (trade name of Dynasticon B.V.) is responsible for the processing of personal data as described in this privacy statement.
- Naam
- Dynasticon B.V. (handelsnaam: Orbecta)
- Adres
- Waldorpstraat 584, 2521 CK Den Haag, Nederland
- KvK-nummer
- 72579943
- info@orbecta.com
2. What data do we process?
Orbecta processes personal data because you use our services and/or because you provide this data to us. We process the following categories of datevens:
2.1 Account data
- First and last name/li>
- Business email address
- Phone number
- Job title within the company
- Password (stored in encrypted form)
2.2 Company data
- Company name
- Chamber of Commerce registration number
- BTW-nummer
- VAT number
- PO/reference number (if provided)
2.3 Payment data
- For online payments: processed by our payment provider (we only receive confirmation)
- For invoice payment: bank account number for administration
- Invoice numbers and payment dates
2.4 Usage data
- IP address and browser information
- Date and time of visits to the Platform
- Pages and features you use
- Claims, questions or analyses you submit
2.5 Communication data
- E-mailcorrespondentie tussen u en Orbecta
- Content of support questions or feedback
3. Why do we process this data?
We process your data for the following purposes:
- Performance of contract: Providing Pro and Business access, account management and invoicing;
- Legal obligations: Accounting, tax obligations and GDPR requests;
- Customer communication: Answering questions, sending confirmations and invoices;
- Platform improvement: Anonymized usage data helps us improve the Platform;
- Security: Detecting fraudulent use or misuse.
4. Legal basis
We process your personal data on the basis of:
- Performance of the contract (GDPR art. 6(1)(b)) for delivering the subscription;
- Legal obligation (GDPR Art. 6(1)(c)) for invoicing and accounting purposes (7-year retention obligation);
- Legitimate interest (GDPR Art. 6(1)(f)) for security and platform improvement;
- Consent (GDPR Art. 6(1)(a)) where explicitly requested, for example for optional communications.
5. How long do we keep your data?
We do not retain your data longer than strictly necessary:
- Account data: Up to 2 years after termination of the subscription;
- Invoices and accounting: 7 years (statutory retention obligation);
- Communicatie en support: 3 years after last contact;
- Usage data (logged): 12 months;
- E-mail logs (audit trail): 24 months.
6. With whom do we share your data?
We never sell your data to third parties. We only share data with:
6.1 Sub-processors
Orbecta uses carefully selected sub-processors for delivering the Platform. Below you can find the categories with the location of processing:
- Hosting of databases, authentication and files (within the EU);
- Sending transactional emails (within the EU);
- Processing online payments (within and outside the EU);
- AI analysis of anonymized market data (outside the EU, in accordance with Standard Contractual Clauses);
- Privacy-friendly website analytics without cookies (within the EU);
- Website and email hosting.
An up-to-date list of sub-processors with names and exact locations is provided on request as an appendix to our Data Processing Agreement (DPA). Email info@orbecta.com.
6.2 Wettelijke verplichtingen
When we are legally obliged to do so (for example, at the request of the Tax Authority, police or judiciary).
7. Transfer outside the EU
Some of our sub-processors are (partly) located outside the European Economic Area (EEA). Transfer takes place on the basis of:
- Standard Contractual Clauses (SCCs) van de Europese Commissie;
- Adequacy decisions where applicable;
- EU-US Data Privacy Framework certification where applicable.
8. Your rights (GDPR)
You have the following rights regarding your personal data:
- Right of access — request which data we hold about you;
- Right to rectification — correct inaccurate data;
- Right to erasure — request deletion of your data (within legal limits);
- Right to restriction — restrict processing;
- Right to data portability — transfer data to another service;
- Right to object — object to processing;
- Right to withdraw consent — withdraw previously given consent.
Requests can be submitted via info@orbecta.com. We will respond within 30 days.
9. Security
We take the protection of your data seriously and apply appropriate technical and organisational measures:
- Encrypted connections (HTTPS/TLS) across the entire Platform;
- Passwords are securely encrypted and stored according to industry standards;
- Access to data is restricted on a need-to-know basis through strict authorization controls;
- Regular security updates of software and infrastructure;
- Audit logs for sensitive actions.
10. Cookies and analytics
The Platform uses strictly necessary cookies for login and session management. For website analytics, we use a privacy-friendly analytics solution that sets no cookies, collects no personal data and immediately anonymizes IP addresses. Therefore, no consent is required under the GDPR and the ePrivacy Directive. See our Cookie Policy for details.
11. Complaints
If you have a complaint about the processing of your personal data, you can first report it to us via info@orbecta.com.
You also have the right to file a complaint with the Dutch Data Protection Authority: autoriteitpersoonsgegevens.nl.
12. Data Processing Agreement (DPA)
For enterprise customers or customers with specific compliance requirements, a Data Processing Agreement is available on request. Email info@orbecta.com to request it.
13. Changes
We may amend this Privacy Statement. Substantial changes will be communicated to active customers by email at least 30 days before they take effect. The most recent version is always available at orbecta.com/privacy.html.
14. Contact
Questions about this privacy statement or your data:
Orbecta (Dynasticon B.V.)
Waldorpstraat 584
2521 CK Den Haag
Netherlands
Email: info@orbecta.com
KvK: 72579943