LEGAL
How Dquadrant collects, uses, and protects Personal Data under Regulation (EU) 2016/679 — the General Data Protection Regulation. Dquadrant is established in the European Union, so this policy is drafted for GDPR compliance, not as a US-style opt-out notice.
DATA CONTROLLER
Dquadrant B.V.
JURISDICTION
The Netherlands, EU
GOVERNING LAW
Regulation (EU) 2016/679
LAST UPDATED
20 August 2026
Depending on how you interact with the site, we may collect:
Unless stated otherwise at the point of collection, providing this Data is necessary for us to deliver the relevant feature — we cannot respond to a request without an email address, for example. Where Data is optional, this is indicated at collection, and declining has no negative consequence. If you submit a third party's Personal Data to us, you confirm you're authorized to do so.
As an EU-based controller, Dquadrant relies exclusively on the legal bases set out in Article 6(1) GDPR — never on an "opt-out" model. Data is retained only for as long as needed to deliver the relevant part of the Service; the only exception is where the law requires us to keep specific records for longer (e.g. Dutch tax law).
We do not keep Personal Data for a longer, indefinite, or precautionary period. Once a purpose is fulfilled and no legal retention obligation applies, the Data is deleted or anonymized.
We use a small, deliberately limited set of processors to run the site, each under a data processing agreement — including Standard Contractual Clauses where Data leaves the EEA. Rather than making you ask, we link each processor's own data processing addendum directly below wherever the vendor publishes one.
Email delivery
Resend
Delivers transactional emails triggered by your use of the site — enquiry notifications, confirmations.
Turnstile · Analytics · DNS/CDN
Cloudflare
Spam/bot protection on our forms, privacy-respecting traffic analytics, and DNS/CDN routing and security for the site.
Scheduling
Cal.com
Lets you book a meeting directly in our calendar and sends confirmations and calendar invites.
Analytics · Video conferencing Meet
Google Analytics measures site traffic and usage (only after you consent via our cookie banner); Google Meet provides the video-call link included in meeting confirmations, via our connected Google account.
Script delivery (CDN)
jsDelivr
Serves Alpine.js, the small JavaScript library behind the mobile nav menu and a few form interactions — a static file request, loaded unconditionally like any other site asset. Sets no cookies and isn't gated by the cookie banner.
Font delivery (CDN)
Google Fonts
Serves the site's typefaces (Archivo, Inter, JetBrains Mono) — a static file request, loaded unconditionally like any other site asset. Sets no cookies and isn't gated by the cookie banner.
Some processors are based in, or process Data in, the United States — outside the EEA. Where this occurs, we rely on appropriate safeguards, in particular the European Commission's Standard Contractual Clauses, as permitted under Chapter V GDPR. We linked each processor's own data processing addendum directly in the table above rather than asking you to request it.
We take appropriate technical and organizational measures against unauthorized access, disclosure, alteration, or destruction of Data, consistent with Article 32 GDPR. Access within Dquadrant is limited to personnel who need it to perform their role.
As a data subject, you have the following rights regarding your Personal Data.
Art. 15
Access
Confirm whether we process your Data and get a copy of it.
Art. 16
Rectification
Have inaccurate or incomplete Data corrected.
Art. 17
Erasure
Have your Data deleted, subject to legal retention obligations.
Art. 18
Restriction
Limit how we use your Data in certain circumstances.
Art. 20
Portability
Receive your Data in a structured, machine-readable format.
Art. 21
Object
Object to legitimate-interest processing, or to direct marketing at any time.
Art. 7(3)
Withdraw consent
At any time, without affecting prior lawful processing.
Art. 77
Lodge a complaint
With the Dutch DPA (Autoriteit Persoonsgegevens) or your own EU supervisory authority.
Send your request to [email protected]. Requests are free of charge and answered as soon as possible, and always within one month — extendable by two further months for complex requests, in which case we'll tell you why. We may verify your identity first.
No formal Data Protection Officer is required for our size and scope of processing — requests go straight to us.
This site uses cookies. See our separate Cookie Notice for the full list, purpose, and how to manage preferences.
Your Data may be used for legal purposes arising from improper use of the site, or disclosed in response to a lawful request by a public authority.
Material changes are notified on this page and, where feasible, directly to registered Users. The version in force at the time of processing applies, unless stated otherwise.
This Privacy Policy is based on Articles 12–14 and Chapter III of Regulation (EU) 2016/679 (GDPR).