Privacy Policy

Introduction

SovereignAI Grid B.V. ('we', 'our', 'us') respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you visit our website or use our services, in compliance with the EU General Data Protection Regulation (GDPR) and Dutch Personal Data Protection Act (UAVG).

Data Controller

SovereignAI Grid B.V. is the data controller for the personal data we process. Our contact details are:

Data We Collect

We collect the following types of personal data:

• Contact information: name, email address, company name when you submit contact forms
• Technical data: IP address, browser type, device information, website usage analytics
• Analytics data: website interactions, page views, and user behavior (anonymized where possible)

Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR Article 6:

• Consent (Article 6(1)(a)) - For marketing communications and optional data processing
• Contract (Article 6(1)(b)) - For providing our services and processing partnership inquiries
• Legitimate Interest (Article 6(1)(f)) - For website analytics and improving our services

How We Use Your Data

We use your personal data to provide our services, respond to inquiries, improve our website, comply with legal obligations, and communicate about partnership opportunities. All processing is limited to what is necessary for these purposes and in accordance with GDPR principles of data minimization.

Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy. Contact form data is retained for 2 years, analytics data for 13 months, and partnership inquiry data for 5 years or as required by Dutch commercial law.

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure (right to be forgotten)
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with the Dutch Data Protection Authority (AP)

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our infrastructure is designed with EU data sovereignty principles, ensuring data remains within EU jurisdiction.

Third-Party Services

We use EU-based and GDPR-compliant third-party services including Vercel (hosting), Resend (email delivery). We ensure all third parties meet EU adequacy requirements or have appropriate safeguards in place.

Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal data from children under 16 without parental consent, in accordance with GDPR Article 8.

Changes to This Policy

We may update this privacy policy to reflect changes in our practices or applicable law. We will notify you of any material changes and obtain consent where required by law.

Contact Us

For any questions about this privacy policy or to exercise your rights, contact us at privacy@sovernaigrid.nl or our Data Protection Officer at dpo@sovernaigrid.nl.