Privacy and cookie statement

Last updated: 9 November 2026

FLODISQ helps organisations protect information, so we handle the information you share with us with the same care. This statement explains which personal data we process through this website, why we do so, how long we keep it and what rights you have. We process personal data in line with the EU General Data Protection Regulation (GDPR).

Who is responsible

FLODISQ is the controller for the personal data described in this statement. For any privacy question or request, contact us at info@flodisq.ai.

Which personal data we process and why

Contact form and email

When you use our contact form or email us, we process the information you provide: your name, work email address, organisation, the topic you select and the content of your message. We use this information only to answer your enquiry and, where relevant, to prepare a proposal or follow-up conversation that you asked for.

Legal basis: our legitimate interest in responding to enquiries, or taking steps at your request before entering into a contract (Article 6(1)(f) and 6(1)(b) GDPR).

Please do not include sensitive information, such as details of a security incident or vulnerability, in the contact form. Contact us first so we can agree on a secure way to share it.

Visiting the website

When you visit this website, our hosting provider automatically processes technical data that is needed to deliver the pages and keep the website secure, such as your IP address, browser type, the pages requested and the time of the request. We do not use this data to build profiles of visitors.

Legal basis: our legitimate interest in providing a working and secure website (Article 6(1)(f) GDPR).

Client platform

The Login link leads to the FLODISQ client platform at app.flodisq.ai. Personal data processed in that platform as part of an engagement is covered by the agreements we make with our clients, not by this statement.

Cookies and similar technologies

This website does not use tracking, analytics or advertising cookies, and does not show social media plugins that follow you across websites. The fonts are hosted on our own website, so no data is sent to font services when you load a page.

We only store one functional item in your browser (local storage): flodisq-cookie-consent, which remembers the choice you made in the cookie bar so we do not ask again on every page. It contains no personal data and stays until you clear your browser data.

If we decide to use optional cookies in the future, for example for website statistics, we will update this statement and only place them after you give permission in the cookie bar. You can change your choice at any time via Cookie settings, which is also available at the bottom of every page.

Who we share data with

We do not sell personal data and only share it where this is needed for the purposes above:

• Hosting and form handling. The website and the contact form are hosted by Netlify, Inc. Netlify processes data on our behalf as a processor.
• Email and office software. Our email and business applications are provided by service providers that act as processors on our behalf.
• Authorities. Where we are legally required to do so.

Some of these providers may process data outside the European Economic Area, for example in the United States. In that case we make sure appropriate safeguards are in place, such as the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.

How long we keep data

• Enquiries via the contact form or email: up to two years after our last contact, unless the enquiry leads to an assignment. In that case we keep the data for as long as needed for the assignment and to meet our legal obligations, such as the seven-year retention period for financial records.
• Technical log data at our hosting provider: for a short period only, in line with the provider's standard retention.

How we protect your data

We take appropriate technical and organisational measures to protect personal data against loss and unauthorised access. This includes encrypted connections (HTTPS) for the whole website, limiting access to the people who need it, and making agreements with our processors about security and confidentiality.

Links to other websites

This website links to external websites, such as LinkedIn and Spotify. These websites have their own privacy and cookie policies. We are not responsible for how they process personal data.

Your rights

You have the right to access, correct or delete your personal data, to restrict or object to its processing, and to receive your data in a commonly used format (data portability). Send your request to info@flodisq.ai. We respond within one month. We may ask you to confirm your identity before handling your request.

If you believe we are not handling your personal data correctly, please let us know so we can resolve it. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the data protection authority in your own country.

Changes to this statement

We may update this statement when our website or services change. The date at the top shows when it was last updated.