Privacy Policy

ReactiveZero B.V. ("ReactiveZero", "we", "us") is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR).

Controller:
ReactiveZero B.V.
Admiraliteitskade 50-923, 3063ED Rotterdam, The Netherlands
KVK: 97512249
Email: privacy@reactivezero.com

1. Data We Collect

We collect personal data only when you voluntarily provide it through our contact form:

• First name and last name
• Work email address
• Phone number (optional)
• Company name
• Industry and services of interest
• Message content

We also collect standard server log data (IP address, browser type, pages visited) for security monitoring purposes.

2. How We Use Your Data

We use the data you submit to:

• Respond to your inquiry and provide information about our services
• Follow up on potential engagements
• Comply with legal obligations

Legal basis: legitimate interest (Article 6(1)(f) GDPR) and, where applicable, performance of a contract (Article 6(1)(b) GDPR).

3. Cookies

Our website uses the following types of cookies:

• Essential cookies — necessary for the website to function correctly. These cannot be disabled.
• Analytics cookies — help us understand how visitors use our site (e.g., pages visited, time on site). We only set these with your consent.

You can manage your cookie preferences at any time by clicking Cookies Settings.

4. Data Sharing

We do not sell your personal data. We may share data with:

• Our hosting and email service providers (acting as data processors), who are bound by data processing agreements
• Competent authorities if required by law

5. Data Retention

Contact form submissions are retained for up to 2 years from the date of receipt, after which they are securely deleted unless an ongoing business relationship requires longer retention.

6. Your Rights

Under the GDPR you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest
• Restriction — request that we restrict processing in certain circumstances

To exercise any of these rights, email privacy@reactivezero.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Dutch supervisory authority: Autoriteit Persoonsgegevens (AP).

7. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. As a cybersecurity firm, data security is central to how we operate.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of our website after changes constitutes acceptance of the updated policy.

9. Contact

Questions about this Privacy Policy? Contact us at privacy@reactivezero.com or visit our contact form.