Privacy statement
Privacy is a right, and one of the foundations of a democratic state. We take the benefits of new technology without giving that up, and we hold ourselves to it as a software company first. This page says exactly what we do with your data, in plain language.
This statement describes the new website and replaces the statement of 6 July 2018.
Who is responsible
Enigmatry B.V., Stationsplein 45 (Unit C8.070), 3013 AK Rotterdam, KvK 27265056, is the controller for the processing described here. Questions and requests: privacy@enigmatry.com or +31 10 240 99 29.
This website
Without your consent the site sets no cookies and loads no analytics or marketing scripts. It stores your chosen language and your cookie choice in your own browser. Our web server keeps standard access logs (IP address, requested page, time, browser type) for security and fault-finding, for no longer than thirty days.
With your consent we use four services in three categories, and you choose each category separately. Analytics: Google Analytics (Google Ireland Ltd) for anonymised usage statistics, with IP anonymisation and Google Consent Mode. Visitor recognition: Leadinfo (Leadinfo B.V., Rotterdam) recognises the organisation behind a business IP address. It identifies companies, not people. We use it to know which organisations are interested in which subjects. Campaign measurement: the LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company) and Google Ads (Google Ireland Ltd). When we advertise on LinkedIn or Google, they tell us whether a visit came from one of our advertisements and let us show a follow-up message to people who visited this site. These are advertising cookies, used only for our own campaigns. Legal basis for all four: your consent. You can withdraw it at any time via “Cookie settings” in the footer. Details, cookie names and retention are on the cookie page.
The contact page shows a map from OpenStreetMap. The contact form and the application form on the careers page use a spam check by Cloudflare Turnstile. When these load, your browser requests them from openstreetmap.org and challenges.cloudflare.com, which see your IP address and apply their own privacy policies. Fonts are served from our own domain.
The contact form
If you write to us through the form, we process the details you enter: company, name, e-mail address, telephone number if you give it, the subject and your question. We use them to answer you and for nothing else. They go to info@enigmatry.com, one mailbox read by a person, not into a marketing system, and you are not added to a newsletter or a follow-up sequence. Legal basis: our legitimate interest in answering people who contact us, and pre-contractual steps at your request. Retention: as long as the conversation is open, and up to two years afterwards if it leads to an agreement or may.
Clients, suppliers and partners
To perform agreements and keep in contact we process business contact details: name, role, telephone number, e-mail address and, where needed, invoicing details. We keep them for the duration of the relationship and afterwards as long as the law requires, which for administrative records is seven years.
Applicants
If you apply to work with us, we process your name, contact details, CV, the contact moments and, where an assessment is part of the process, its outcome. We use business social-media platforms to find and approach candidates. Data of applicants we do not hire is deleted within four weeks of the end of the procedure, unless you ask us to keep it for up to a year.
Client data in our services
When we build or run software for a client, that client is the controller and we are the processor. Before anyone gets access, a processing agreement sets out what we may do with the data, where it is processed, which sub-processors we use and how long we keep it. That includes which AI model providers we use, if any. Our security page describes the measures, and our ISO 27001 certification covers them.
Sharing and transfers
We share personal data only when you ask us to, when the law or a court requires it, or when it is necessary to perform our services. In that case we share it with hosting and e-mail providers, under processing agreements. Where a provider is outside the EEA, we rely on appropriate safeguards such as the EU standard contractual clauses, and we prefer providers inside it.
Your rights
You can ask what we hold about you, receive a copy, have it corrected, deleted or restricted, object to processing based on legitimate interest, and receive data you gave us in a portable form. Write to privacy@enigmatry.com; we answer within a month. You can also complain to the Autoriteit Persoonsgegevens.
Changes
We will change this statement when what we do changes, and we will say what changed. Version: September 2026.
Ask us which data we hold about you.
Mail privacy@enigmatry.com. You get an answer from a person within a month, usually much sooner.
Enigmatry B.V. · KvK 27265056 · Rotterdam