Privacy statement

NorthDock B.V. respects your privacy. In this privacy statement we explain which personal data we process, why we do so and what rights you have. We process personal data in accordance with the General Data Protection Regulation (GDPR).

1. Who we are

The controller for the processing described in this statement is:

NorthDock develops and operates the software services FlowLynq (including OrderLynq and WorkLynq), CodeLynq and KatalogIQ. For questions about privacy you can reach us at the email address above.

2. Scope of this statement

This statement applies to personal data we process as a controller: when you visit our websites, contact us, request a demo, create an account or become a customer. When our customers use our services to process personal data of their own customers, employees or other people, the customer is the controller and NorthDock acts as a processor. That processing is governed by our data processing agreement, not by this statement.

3. Which data we process and why

Contact, demo and startup programme requests

When you use a contact, demo or startup programme application form, we process your name, company name, email address, phone number (if provided) and the content of your message. We use these to answer your question, plan a demo or assess your application, and to follow up on it. The legal basis is our legitimate interest in responding to your request, or taking steps at your request prior to entering into a contract.

Customers and users

When you or your organisation becomes a customer, we process contact details, account and login details, billing and payment details, and communication with our support team. We need these to perform the agreement, to manage accounts and subscriptions, to invoice and to meet our legal obligations, such as tax retention requirements.

Website visits

When you visit our websites, our servers process technical data such as your IP address, browser type, pages visited and the date and time of your visit. We use this data to deliver and secure the website and to fix problems. The legal basis is our legitimate interest in a secure, working website. We only use analytical or marketing cookies with your consent; see our cookie policy.

Product updates and newsletters

We send product news and newsletters only to customers about similar services, or to people who gave their consent. Every message contains an unsubscribe link, and you can object at any time.

4. How long we keep your data

We do not keep personal data longer than necessary for the purposes described above. Contact and demo requests that do not lead to an agreement are deleted no later than two years after our last contact. Customer data is kept for the duration of the agreement and deleted or anonymised afterwards, except for data we must keep by law, such as financial records, which we keep for seven years.

5. Sharing with third parties

We never sell personal data. We only share data with parties that help us provide our services, such as hosting, email and payment providers, and only to the extent needed. We conclude data processing agreements with these parties. We may also share data if we are legally required to do so.

6. Transfers outside the European Economic Area

We prefer suppliers that process data within the European Economic Area (EEA). If data is transferred outside the EEA, we ensure an adequate level of protection, for example through an adequacy decision of the European Commission or standard contractual clauses.

7. Security

We take appropriate technical and organisational measures to protect personal data against loss and unauthorised access, including encryption of connections, access control on a need-to-know basis, logging and regular backups.

8. Your rights

You have the right to access, rectify and erase your personal data, the right to restrict processing, the right to data portability and the right to object to processing. Where processing is based on consent, you can withdraw that consent at any time. Send your request to the email address listed above; we respond within one month. To protect your data we may ask you to verify your identity.

If you have a complaint about how we handle your personal data, please contact us first. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

9. Changes

We may update this privacy statement from time to time. The most recent version is always available on this page. We will inform customers of material changes.