1. Who we are
Bookpact.ai is operated by Bookpact.ai B.V., the controller responsible for the processing of personal data described in this statement.
- Address: Kromme-Mijdrechtstraat 110 4, 1079LD Amsterdam
- Chamber of Commerce KVK-nummer: 42075751
- Privacy contact: Bert Willems, bert.willems@bookpact.ai
2. What data we collect
We currently collect personal data in two situations:
When you visit our website. Our website platform automatically collects limited technical information needed to serve the site and keep it secure, such as your IP address, browser type, device information, and the pages you visit.
We use Plausible Analytics, an EU-hosted, privacy-friendly analytics service, to measure how our website is used. Plausible does not use cookies, does not store personal data, and does not track visitors across websites. We receive only aggregated statistics. No visitor profiles are created and no data is shared with advertisers.
When you contact us. If you complete a form on our website, we process your name, email address, and company name, along with any information you choose to include in your message. Your submission is stored by our website platform and is also transferred automatically into our customer relationship management system so that we can respond to you and manage the contact.
3. Why we process your data and on what legal basis
We only process personal data where we have a lawful basis under Article 6 GDPR:
- To respond to your enquiry — based on our legitimate interest in answering you, or on steps taken at your request before entering into an agreement.
- To operate, secure, and maintain our website — based on our legitimate interest, balanced against your rights.
- To manage our business relationships and follow up on enquiries — based on our legitimate interest in maintaining a record of who has contacted us and why, so that we can respond, follow up, and manage our commercial contacts.
4. Who we share data with
We do not sell personal data. We share data only with:
- Service providers who support our operations, under agreements that require them to protect your data. These currently include Webflow (our website platform), Hostnet (our domain and email provider), Make (our workflow automation provider, which routes form submissions to our CRM), and Pipedrive (our customer relationship management system).
- Authorities or third parties where we are legally required to do so.
Some of these providers are based outside the European Economic Area. Where personal data is transferred outside the EEA — for example to Webflow in the United States — we rely on an appropriate safeguard, such as the European Commission's Standard Contractual Clauses, to ensure your data remains protected. Our workflow automation and CRM providers store and process data on servers located within the European Union.
5. How long we keep your data
Form submissions are retained by our website platform and in our CRM for as long as needed to handle your enquiry and any follow-up, and are reviewed and deleted at the latest 24 months after our last contact with you. Technical logs held by our workflow automation provider, which may contain the contents of a submission, are automatically deleted after a short retention period set by that provider
6. Your rights
Under the GDPR, you have the right to access, rectify, or erase your personal data; to restrict or object to processing; to data portability; and to withdraw consent where processing is based on consent. To exercise any of these rights, contact us at bert.willems@bookpact.ai.
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
7. Security
We take appropriate technical and organisational measures to protect personal data against loss, misuse, and unauthorised access.
8. Changes to this statement
We may update this statement from time to time. The current version is always available on our website, with the date of the most recent update shown above.
