Who we are
This website is operated by Waardenburg Ecology, Varkensmarkt 9, 4101 CK Culemborg, Netherlands, registered with Kamer van Koophandel under number 11028826 ("EcoSymbia", "we", "us"). We are the controller for the personal data described in this policy.
For any privacy question or request, email info@ecosymbia.com with "Privacy" in the subject line.
What we collect and why
When you use the contact form
We ask for your name, organisation, email address and country, your message, and optionally how you heard about us and whether you would like to receive news from EcoSymbia.
We use this to answer your enquiry and, where relevant, to discuss a possible project with you. The legal basis is our legitimate interest in responding to people who contact us, or taking steps at your request before entering into a contract (Article 6(1)(f) and (b) GDPR).
Depending on your question, we may forward your enquiry to the EcoSymbia partner company best placed to help. Each partner company then handles your data as an independent controller under its own privacy policy.
When you sign up for news
If you tick the newsletter box, we use your name and email address to send you news about EcoSymbia, such as events, publications and case studies. The legal basis is your consent (Article 6(1)(a) GDPR). No newsletter has gone out yet. If you tick the box we keep your address so we can send you the first one once we start. The box is never ticked in advance, and you can unsubscribe at any time through the link in every email or by writing to us.
When you email us
We use your email address and the content of your message to reply and keep a record of our correspondence, on the basis of our legitimate interest.
When you browse this website
We measure visits with Umami, a privacy-friendly analytics tool. Umami does not use cookies, does not store IP addresses and does not build profiles of individual visitors. It records anonymous, aggregated information only: the pages viewed, the referring website, browser, operating system, device type and country. We use this to see which content is useful and to improve the site (legitimate interest). Umami runs on servers at Hetzner in Germany.
Like any web server, our hosting provider automatically processes technical data such as your IP address, the time of your request and your browser type, so that the site can be delivered and protected against misuse. These server logs are kept for no more than 14 days.
What we don't do
- We don't use cookies or similar tracking technologies. See our cookie page.
- We don't use advertising, retargeting or social media tracking pixels.
- We don't embed social media plugins. The LinkedIn link is a plain link: LinkedIn only receives data if you click it and visit LinkedIn.
- We don't sell or rent personal data, and we don't use it for automated decision-making or profiling.
How long we keep data
- Enquiries and correspondence: up to 2 years after our last contact, unless a project follows, in which case the retention rules of that contract apply.
- Newsletter subscriptions: until you unsubscribe. We then keep only your email address on a suppression list so we don't contact you again.
- Server logs: up to 14 days.
- Analytics: aggregated and anonymous, so it contains no personal data.
Security
We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access limited to people who need it, and agreements with our service providers.Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have incorrect data corrected;
- have your data erased;
- restrict or object to our processing, including processing based on legitimate interest;
- receive your data in a portable format;
- withdraw your consent at any time, without affecting processing that took place before.
To use any of these rights, email info@ecosymbia.com. We will respond within one month. We may ask you to confirm your identity first.
If you are not satisfied with how we handle your data, you can lodge a complaint with a data protection authority, in particular the one in the EU country where you live or work. Our lead authority is Autoriteit Persoonsgegevens (Netherlands).