Privacy statement Vivedis scope scan

For vivedis.nl/en/privacy (also applies to vivedis.ai) · Version 1.8 · Last updated: 23 October 2026. The scope scan is currently offered in Dutch at vivedis.nl; vivedis.ai is an information page that collects no data beyond technical logs.

1. Who we are

The controller for the Vivedis service is Vivedis Assetmanagement B.V., registered office Amsterdam, Netherlands Chamber of Commerce (KvK) no. 91678986, branch no. 000057342490. Privacy contact: privacy@vivedis.nl. No data protection officer has been appointed.

2. The scan and the PDF

No account is needed; the scan does not ask for your name, phone number or organisation and has no free-text fields. Your answers and result are processed only in your browser during the session. If you wish, you can make a PDF of the overview yourself using your browser's print function. We do not receive that PDF unless you send it to us yourself. The scan does not send your answers or result to us, and we do not store them.

3. Email option not yet available

In this version you cannot leave an email address and we do not send emails. If this option is introduced, we will update this statement beforehand.

4. If you contact us

If you email or otherwise contact us, we process the details you provide (such as your email address, name and message) to answer you and, if you wish, schedule a conversation. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) or pre-contractual steps at your request (Art. 6(1)(b)). Conversation: we do not record or minute the conversation itself. We only keep a tally of type of role, how you found us, own budget and reaction to the price, without name, organisation, date or email. Retention: we delete your email no later than 60 days after receipt and any calendar appointment no later than 60 days after the conversation. If an assignment follows, we keep these data for that assignment.

5. Technical logs

Our own server (Strato) keeps technical logs (for example system logs) for security and troubleshooting (legitimate interest, Art. 6(1)(f) GDPR). Technical logs (including system logs) are kept for no more than 7 days and IP addresses in them are masked. Query strings and your scan answers are not included in these logs. For visits to vivedis.ai, Cloudflare's logs also apply (see section 7).

6. Cookies and measurement

No cookies or trackers. If we start counting visits without cookies, we will state this here beforehand.

7. Processors and transfers

Hosting: a virtual private server (VPS) at Strato in the EU, managed by Vivedis; Strato acts as processor. Email: messages to privacy@vivedis.nl and other @vivedis.nl addresses are processed via Google Workspace by Google Ireland Ltd. (processor). Google may transfer data to the United States; such transfers rely on the EU-US Data Privacy Framework and the European Commission's standard contractual clauses. vivedis.ai via Cloudflare: visits to vivedis.ai are routed through Cloudflare, Inc. (USA), which terminates the encrypted (TLS) connection and can therefore see your full IP address and request details such as page, time and browser. For delivering and securing the site, Cloudflare acts as our processor (legal basis: legitimate interest in a secure and available website, Art. 6(1)(f) GDPR) under Cloudflare's data processing terms. Data are transferred to the United States under the EU-US Data Privacy Framework and the European Commission's standard contractual clauses. Cloudflare also uses this traffic data to derive statistics and threat information ('Network Data'); for that it is an independent controller, see Cloudflare's privacy policy. Cloudflare keeps these data no longer than needed to deliver and secure the site, in line with the retention periods in Cloudflare's privacy policy.

8. Security

Answers stay in your browser; HTTPS/TLS; multi-factor authentication and least privilege; no form content in logs; on our own server, IP addresses are masked, no query strings are logged and technical logs are kept for no more than 7 days. For Cloudflare, see section 7.

9. Your rights and complaints

Arts. 15–21 GDPR, via privacy@vivedis.nl; response within one month. Complaints: Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

10. How the result is produced

Fixed, predefined rules without AI. Indicative, no legal effect.

11. Language

In case of conflict, the Dutch version (vivedis.nl/privacy) prevails.

Adopted by Vivedis Assetmanagement B.V. on 23 October 2026; reviewed periodically.