Privacy Statement

Last updated: May 2026

On 25 May 2018, the General Data Protection Regulation (GDPR) entered into force. This regulation ensures that organisations handle personal data with care. In this privacy statement, we explain what we mean by personal data, what processing entails, the purposes for which we use your data, your rights, how we protect your data, how long we retain it, and how you can contact us.

Scope

This privacy statement applies when you visit our website (https://www.alphaindigo.nl), request or use our services (including the AI Opportunity Scan, AI Steward, AI Academy and AI Engineering Lab), enter into an agreement with us, subscribe to our newsletter, or submit data via our contact and lead forms.

Data controller

AlphaIndigo B.V. is the data controller for personal data processed via this website and in the context of our services.

What is personal data?

Personal data is any information relating to an identified or identifiable natural person. This includes, among other things, name, contact details, role and company information, location data, and online identifiers (such as IP address or cookie ID) where these can be linked to you.

When do we collect personal data?

We collect personal data when you submit information on our website or on forms we host (for example at bcc.alphaindigo.nl), when you contact us, request a service, enter into an agreement with AlphaIndigo, or subscribe to our newsletter.

Which personal data do we process?

We process personal data that is necessary to deliver our services and maintain our relationship with you. This may include name, contact details (email address, telephone number), company name and job title, correspondence, and other information you voluntarily provide.

Some of this information is required to perform a service or maintain contact with you. Additional information may be desirable to tailor our services to your situation or to meet specific requirements or compliance needs.

Processing of personal data means any operation performed on personal data as defined in Article 4(2) GDPR — including collection, recording, organisation, storage, consultation, use, and erasure.

Why do we use your data?

We process personal data for the following purposes:

• To maintain contact with you and answer your questions;
• To prepare and execute quotations, proposals and agreements;
• To deliver our services (advisory, scans, training, embedded leadership and related work);
• To inform you about changes to our services;
• To send newsletters and updates where you have given consent;
• To improve our website and service delivery;
• To handle complaints and prevent fraud;
• To comply with legal obligations.

We never sell your personal data to third parties. Where we engage a processor within the meaning of Article 28 GDPR, we enter into a data processing agreement.

Who do we share personal data with?

We may share personal data with business partners and suppliers who perform services on our behalf (such as hosting, forms, email and analytics), with clients where necessary for a joint engagement, and with public authorities when required by law.

Some processors may process data inside or outside the European Economic Area. In that case, we implement appropriate safeguards under the GDPR, such as standard contractual clauses or an adequacy decision.

How long do we retain your data?

We retain personal data no longer than necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law (for example statutory tax retention periods).

How do we protect your data?

AlphaIndigo has implemented appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access.

These measures include access restrictions, secure connections (TLS), backups, and limiting access to personal data to those who need it for their work.

Cookies and online analytics

Our website uses functional storage (for example your language preference and cookie choice) and may use analytics tools to measure website usage. On your first visit, you can choose via the cookie banner to accept all cookies or only necessary cookies.

Contact and newsletter forms are hosted at bcc.alphaindigo.nl. Processing of data you submit there is covered by this privacy statement and the privacy policy of that platform. We use Google Fonts; your IP address may be processed by Google. See Google's privacy policy for more information.

Your rights

You have the right to request access to your personal data (Article 15 GDPR), rectification (Article 16 GDPR), erasure (Article 17 GDPR), to object to processing (Article 21 GDPR), and, where applicable, data portability (Article 20 GDPR).

You may submit your request to:

AlphaIndigo B.V.
Saskia van Uilenburgkade 84
1058 GA Amsterdam
The Netherlands
[email protected]

We will respond to your request within four weeks at the latest. If you have a complaint about how we process your personal data, you may lodge it with the Dutch Data Protection Authority.

Changes

AlphaIndigo reserves the right to amend this privacy statement. We recommend that you review this page regularly. Where appropriate, we will inform you of material changes via the website or by email.