# Privacy Policy **Oros IT Support Limburg** (hereafter: "we", "us" or "Oros IT") values the protection of your personal data. This privacy policy explains what data we collect, why we collect it, how long we retain it and what rights you have. Oros IT Support Limburg is registered with the Dutch Chamber of Commerce (KvK) under number **98242482** and is located at **Kievitstraat 25, 6469 XX Kerkrade, the Netherlands**. --- ## 1. Who is responsible for processing? The data controller is: **Oros IT Support Limburg** Kievitstraat 25 6469 XX Kerkrade Netherlands KvK: 98242482 VAT: NL005319090B91 Email: Phone: --- ## 2. What data do we collect and why? ### 2.1 Contact form When you fill in the contact form on our website, we process: - Name - Company name (optional) - Phone number (optional) - Email address - The content of your message **Purpose:** answering your enquiry or following up on your support request. **Legal basis:** performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR), or our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR). ### 2.2 Website analytics (Google Analytics via Google Tag Manager) We use Google Analytics (via Google Tag Manager) to collect anonymous statistics about the use of our website, such as page views, session duration and visitor origin. Full IP addresses are not stored. **Purpose:** understanding how the website is used in order to improve it. **Legal basis:** consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time via the cookie settings in the footer. ### 2.3 Behavioural analytics (Microsoft Clarity) With your consent, we use Microsoft Clarity for heatmaps and session recordings. Clarity collects anonymised interaction data (mouse movements, clicks, scroll behaviour). Personally identifiable information is automatically masked. **Purpose:** improving the user experience on the website. **Legal basis:** consent (Art. 6(1)(a) GDPR). You can withdraw consent via the cookie settings in the footer. ### 2.4 Client and assignment data In the context of an assignment or support contract, we process contact details and technical information needed to perform the service. **Purpose:** performance of the contract and compliance with legal obligations. **Legal basis:** contract performance (Art. 6(1)(b) GDPR) and legal obligation (Art. 6(1)(c) GDPR). --- ## 3. How long do we retain your data? | Category | Retention period | |---|---| | Contact form data | Up to 12 months after last contact | | Client and invoice data | 7 years (Dutch tax retention obligation) | | Website analytics data | Per Google Analytics retention settings (14 months) | | Microsoft Clarity data | Per Microsoft Clarity retention policy (up to 13 months) | After the retention period, your data is deleted or anonymised. --- ## 4. Do we share your data with third parties? We only share your personal data with third parties where necessary to perform our services or where required by law. We conclude data processing agreements with parties that process data on our behalf. We never sell your data. Relevant processors: - **Google LLC** — Google Analytics and Google Tag Manager (data processing in the US under Standard Contractual Clauses) - **Microsoft Corporation** — Microsoft Clarity (data processing in the US under Standard Contractual Clauses) --- ## 5. Transfers outside the EEA Google and Microsoft process data in the United States. The transfer is based on Standard Contractual Clauses (SCCs) approved by the European Commission, supplemented by additional safeguards from the respective vendors. --- ## 6. Your rights Under the GDPR you have the following rights: - **Right of access** — you can request what personal data we hold about you. - **Right to rectification** — you can request correction of inaccurate data. - **Right to erasure** — you can request deletion of your data, unless we have a legal obligation to retain it. - **Right to restriction** — in certain cases you can request that processing be temporarily restricted. - **Right to data portability** — you can request your data in a structured, commonly used, machine-readable format. - **Right to object** — you can object to processing based on legitimate interest. - **Right to withdraw consent** — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing. To exercise your rights, contact us at . We will respond within 4 weeks. --- ## 7. Complaints If you believe we are not handling your personal data correctly, you have the right to lodge a complaint with the Dutch supervisory authority: **Autoriteit Persoonsgegevens** (Dutch Data Protection Authority) PO Box 93374 2509 AJ The Hague [www.autoriteitpersoonsgegevens.nl](https://www.autoriteitpersoonsgegevens.nl) --- ## 8. Security We take appropriate technical and organisational measures to protect your personal data against loss, unauthorised access, disclosure or misuse. The website uses an encrypted HTTPS connection. --- ## 9. Cookies For more information about our use of cookies, please see our [Cookie Policy](/en/cookie-policy/). --- ## 10. Changes to this privacy policy We may update this privacy policy from time to time. The most recent version is always available on this page. For material changes, we will notify you via the website.