Privacy & Cookies Policy

1. Who is responsible for this website?

This website is operated by Aardaia B.V. ("Aardaia", "we", "us" or "our"). Our registered address is Bronland 10, Wageningen 6708WH, The Netherlands.

If you have any questions about this policy or about how we handle personal data, you can contact us at:

Email: info@aardaia.com
Postal address: Bronland 10, Wageningen 6708WH, The Netherlands

2. What is this policy about?

This Privacy & Cookies Policy explains how Aardaia collects and uses personal data when you visit our website, browse its content, or contact us through the contact form. It also explains how we use cookies and similar technologies on the website.

This policy is intended to meet the requirements of the EU General Data Protection Regulation (GDPR) and applicable EU ePrivacy rules.

3. What personal data do we collect?

3.1 Data you provide directly

If you use our contact form, we may collect the following information:

• Name
• Email address
• Company name (optional)
• Website (optional)
• Information about how you would like to work with us (optional free-text field)

Please do not send sensitive personal or confidential data through the contact form unless it is strictly necessary.

3.2 Data collected automatically

When you visit our website, Squarespace and/or our hosting setup may automatically collect technical information, such as:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and time spent
• Date and time of access
• Referring website.

We have Squarespace Analytics enabled. Other than this, we are not collecting any information. Squarespace may also maintain server logs containing technical information necessary to operate, secure, and troubleshoot the website in accordance with its own Privacy Policy.

4. Why do we use personal data?

We use personal data collected through the website for the following purposes:

• To respond to contact requests
• To communicate with potential partners
• To operate, maintain and secure the website
• To comply with legal obligations and protect our legal rights where necessary.

We do not currently use the website to send newsletters, promotional emails, or other regular marketing communications.

5. What legal bases do we rely on?

Under the GDPR, we process personal data on the following legal bases:

• Pre-contractual steps: where processing is necessary to respond to your enquiry or explore a potential collaboration.
• Legitimate interests: where processing is necessary to operate and secure our website, manage incoming requests, and maintain our business communications, provided that these interests are not overridden by your rights and freedoms.
• Legal obligation: where processing is necessary to comply with applicable legal or regulatory requirements.

Where consent is required for non-essential cookies, we will ask for it before placing those cookies on your device.

6. Who do we share personal data with?

We may share personal data with service providers that support the operation of our website and communications, including:

• Squarespace, which provides the website platform and hosting services
• Gmail, which receives contact form submissions and related correspondence

We do not routinely share website-derived personal data with other recipients.

7. Do we transfer personal data outside the EU/EEA?

Some service providers used in connection with the website may process personal data outside the European Union or European Economic Area.

In particular, Squarespace is a US-based provider and data processed through the website may therefore be transferred to or accessed from the United States. Where this happens, we will rely on appropriate safeguards under the GDPR.

8. How long do we keep personal data?

We keep personal data only for as long as necessary for the purposes described in this policy.

Contact requests submitted through the website are sent to our Aardaia email account and remain there until they are manually deleted. We aim to delete routine contact requests within 12 months after the last meaningful contact unless further retention is needed.

Technical data and logs may be retained by Squarespace for the period applied in its systems.

9. How do we protect personal data?

We take reasonable technical and organisational measures to protect personal data processed through our website. These measures include HTTPS and limiting access to website-related data on a need-to-know basis.

We also rely on the security measures provided by our service providers, including Squarespace and our email provider, including multi-factor authentication, password management and access logging.

10. What rights do you have?

Subject to applicable law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete personal data;
• request deletion of your personal data;
• request restriction of processing;
• object to certain processing, particularly processing based on legitimate interests;
• receive your personal data in a structured, commonly used and machine-readable format, where applicable; and
• withdraw consent at any time where processing is based on consent.

To exercise your rights, please contact us at info@aardaia.com.

You also have the right to lodge a complaint with the supervisory authority in your country.

11. Cookies and similar technologies

11.1 General

We use cookies and similar technologies on our website. Cookies are small text files placed on your device when you visit a website. Similar technologies can include pixels, tags, scripts, local storage, and device identifiers.

Because our website is built on Squarespace, Squarespace may use cookies and similar technologies necessary for website operation, security, fraud prevention, remembering user choices, and providing core website functionality.

11.2 Essential cookies

We may use strictly necessary cookies that are required for the website to function properly. These may include cookies for:

• security and fraud prevention;
• authentication or session management;
• remembering user preferences;
• storing cookie consent choices.

These cookies do not generally require consent under applicable ePrivacy rules.

11.3 Non-essential cookies

We do not currently use advertising, social media, heatmap, session replay, or marketing pixels.

If Squarespace Analytics or other analytics/performance tools are enabled, the website may use analytics or performance cookies to understand how visitors use the website and improve its performance.

Where required by law, we will ask for your consent before placing non-essential cookies on your device.

11.4 Cookie choices

If non-essential cookies are used, users should be able to accept or reject them and change their preferences later.

11.5 Cookie details

12. Children

Our website is not directed at children under the age of 16, and we do not knowingly collect personal data from children through the website.

13. Sensitive personal data

We do not intentionally collect sensitive personal data through the website.

14. Automated decision-making

We do not use website data to make automated decisions about individuals without human involvement.

15. Changes to this policy

We may update this Privacy & Cookies Policy from time to time to reflect changes to our website, our practices, or applicable law. The latest version will always be published on the website and will show the updated "Last updated" date.