Privacy statement
This statement covers the data we collect ourselves: when you visit this website, book a demo, email us or when your organisation becomes a client. Updated on 15 October 2026.
PrivaSearch is a product of Nerdpower Solutions, a brand of Coding Agency. Coding Agency is the controller for the processing described in this statement.
For the data below, we determine the purpose and means ourselves; we are then the controller. For the documents and user accounts in a client's PrivaSearch environment, this is different: there the client is the controller and we process the data solely on its instructions, on the basis of a data processing agreement (Article 28 GDPR). If your data is in a document of one of our clients, please contact that organisation. If such a request reaches us, we forward it to the client and help it to respond. See also the data processing agreement.
| When | Data | Purpose | Lawful basis | Retention period |
|---|---|---|---|---|
| You book a demo | Name, business email address, organisation, sector, number of employees, current use of AI and anything you choose to add about your bottleneck | Scheduling and preparing the demo, getting in touch and, where needed, making a proposal | Legitimate interest (Article 6(1)(f) GDPR): responding to the question you ask yourself. We only use what you fill in and do not put you on a mailing list | 12 months after the request, then deleted automatically. If you become a client, the contact details move to the client relationship |
| You sign up to recommend PrivaSearch | Name, email address, how you know the organisation you recommend, and your personal link. If an organisation books a demo through that link: the name of that organisation and the status of the referral | Sending you your link, letting you know that a demo has been booked through your link, and sending you the gift voucher if the organisation becomes a client | Performance of the agreement you make with us by signing up (Article 6(1)(b) GDPR). The rules (Dutch) are on a separate page | 12 months after the last activity, then deleted automatically. Earlier at your request |
| You open the website through the link of someone who recommends PrivaSearch, and then book a demo | The code of that link, stored in a cookie of this website | Attributing the request to the person who recommended us. They learn that your organisation has booked a demo, and nothing else from the request. If your organisation becomes a client, the person who recommended us receives a reward | Legitimate interest (Article 6(1)(f) GDPR): running the referral programme. Without the cookie, this does not happen | The cookie 30 days; the attribution for as long as the sign-up of the person who recommended us exists |
| You request access to the knowledge base on this website | Your business email address | Sending you the code with which you open the knowledge base, and seeing which organisations request the knowledge base. We receive a copy of the email with the code | Legitimate interest (Article 6(1)(f) GDPR): opening the knowledge base only to those who identify themselves. We do not put you on a mailing list | The code 10 minutes and the access 60 minutes. The copy of the email at most 12 months |
| You email us | Name, email address and the content of your message | Answering your question | Legitimate interest (Article 6(1)(f) GDPR) | Until your question has been dealt with and then at most twelve months, unless the correspondence becomes part of a client relationship |
| Your organisation becomes a client | Name, job title and contact details of contact persons; invoicing and payment details | Performing the agreement, invoicing and maintaining the relationship | Performance of the agreement and legitimate interest (Article 6(1)(b) and (f) GDPR); for the accounts, a legal obligation applies (point (c)) | For as long as the agreement runs. The financial accounts seven years (Article 52 of the Dutch General Tax Act, Algemene wet inzake rijksbelastingen) |
| You visit this website | IP address and technical data of your request, such as browser type and requested page | Delivering the page and limiting abuse, such as too many form or sign-in attempts | Legitimate interest (Article 6(1)(f) GDPR): a working and secure website | Counters against abuse expire within ten minutes. We keep technical logs no longer than necessary for security and troubleshooting |
Filling in the demo form is not mandatory and is not a condition for anything else. Without a name and email address, we simply cannot schedule a demo with you.
This website uses no analytics cookies, no tracking cookies and no advertising cookies, and loads no fonts or videos from third parties. A page without a form sets no cookie at all, apart from the exception below. Only the pages with a form (requesting a demo, recommending us and access to the knowledge base) and the sign-in page set two functional cookies: a session cookie and a cookie against cross-site request forgery. They are needed to process that form and the sign-in process securely and expire after 120 minutes of inactivity. Cookies that are strictly necessary to provide a requested service do not require consent (Article 11.7a(3) of the Dutch Telecommunications Act, Telecommunicatiewet). That is why you see no cookie banner here.
There is one exception. If you open this website through the personal link of someone who recommends PrivaSearch, your browser stores the code of that link in a cookie of this website, for 30 days. The cookie contains only that code, cannot be read by scripts and is not shared with any other party. If you book a demo during that time, we use it to attribute the request to the person who sent you the link. You can delete the cookie in your browser; the request is then not linked.
If you enter the code with which you open the knowledge base on this website, a functional cookie remembers until when you may read along: at most 60 minutes. The cookie contains only that time, cannot be read by scripts and is not shared with any other party.
To see how often the pages of this website are viewed, every page loads the script of Clear Analytics, a statistics service of Coding Agency, the same company as PrivaSearch. The script sets no cookies. For each page viewed it sends the address of the page, the page you came from, the language of your browser and the size of your screen. Your IP address is not kept: it is shortened and used only to count visits on the same day together.
We do not sell data and do not use it for advertising. On our instructions, under a data processing agreement, we work with:
Which parties are involved in the service itself is set out in the overview of sub-processors. Otherwise, we only disclose data when a legal obligation requires us to.
We aim to keep processing within the European Economic Area. Where that is not the case somewhere — such as with the mailbox in Switzerland — it takes place on the basis of an adequacy decision (Article 45 GDPR) or with appropriate safeguards such as standard contractual clauses (Article 46 GDPR).
You have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), portability where it applies (Article 20) and objection (Article 21). Because we rely on a legitimate interest for the demo request and for contact, you can always object to it; we then stop the processing, unless there are compelling legitimate grounds that override it.
Send your request to privacy@privasearch.ai. You will receive an answer within one month (Article 12(3) GDPR) and we do not charge for it. We only ask for additional information if we cannot otherwise verify your identity. If you disagree with how we handle your data, you can lodge a complaint with the Autoriteit Persoonsgegevens, the Dutch data protection authority (autoriteitpersoonsgegevens.nl).
We do not take decisions about you based solely on automated processing (Article 22 GDPR) and do not create profiles.
Which measures we take is set out on the page security. If our processing changes, we update this statement; the date at the top shows when that last happened.
This page was translated from Dutch with the help of AI. In case of differences, the Dutch version applies. Read the Dutch version
