Privacy Policy

Who is responsible#

The controller of your personal data is Motivity Labs B.V., John M. Keynesplein 4, 1066 EP Amsterdam, The Netherlands.

For anything to do with your personal data, write to privacy@motivitylabs.eu. General enquiries go to info@motivitylabs.eu.

What we collect#

We collect only what you give us, plus the minimum a web server needs to deliver pages securely:

• Enquiry form: your name, business email, phone number (optional), company, company size, the service you are interested in, your message, and any document you choose to attach.
• Email: your address and whatever you include when you write to us directly.
• Server logs: IP address, browser and device type, the page requested, the referring page and a timestamp, recorded automatically by our hosting provider.

We do not use analytics, advertising or tracking technologies on this site, and we do not buy personal data from third parties. Please do not include special categories of data (such as health information) in an enquiry.

Why we use it, and on what legal basis#

• To answer your enquiry and take the steps you ask for before any contract — GDPR art. 6(1)(b).
• To keep ordinary business correspondence with you and the organisation you represent — our legitimate interest in running our business, GDPR art. 6(1)(f).
• To keep the site secure and working, detect abuse and diagnose faults, using server logs — our legitimate interest in the security of our systems, GDPR art. 6(1)(f).
• To meet legal obligations, such as tax and accounting record-keeping where an enquiry becomes an engagement — GDPR art. 6(1)(c).

We never sell your data, and we do not add you to marketing mailings unless you have separately asked us to. Where we rely on legitimate interests, you may object at any time (see Your rights).

How long we keep it#

• Enquiries that do not lead to an engagement: deleted 24 months after our last contact with you.
• Enquiries that lead to an engagement: kept for the life of the relationship, then for the statutory retention period for business records (seven years under Dutch tax law, AWR art. 52).
• Server logs: deleted or anonymised after no more than 90 days, unless needed to investigate a specific security incident.

Who we share it with#

Your data is available only to the people who need it to respond to you. We share it with:

• Motivity Labs group companies, where the delivery team best placed to help sits in another group office. Group companies process your data only for the purposes above.
• Service providers who host this website, run our email and deliver enquiry-form messages, acting as processors under a data processing agreement (GDPR art. 28).
• Authorities, where the law requires us to disclose it.

Transfers outside the EEA#

Motivity Labs group offices include the United States, India, Canada and the United Arab Emirates, so your enquiry may be accessed from outside the European Economic Area. Where it is, we protect it by one of the following:

• An adequacy decision by the European Commission for the destination country (for example Canada, for commercial organisations).
• For recipients in the United States, certification under the EU–U.S. Data Privacy Framework where the recipient holds it.
• Otherwise, the European Commission's Standard Contractual Clauses (Implementing Decision (EU) 2021/914), with supplementary measures where a transfer risk assessment calls for them.

You can ask privacy@motivitylabs.eu for a copy of the safeguards that apply to a transfer.

Your rights#

Under the GDPR you have the right to:

• access the personal data we hold about you (art. 15);
• have inaccurate data corrected (art. 16);
• have your data erased (art. 17);
• restrict how we process it (art. 18);
• receive it in a portable format (art. 20);
• object to processing based on our legitimate interests (art. 21);
• withdraw any consent you have given, without affecting processing that took place before (art. 7(3)).

Send requests to privacy@motivitylabs.eu. We reply within one month, as art. 12(3) requires, and may ask you to confirm your identity first. There is no charge.

You also have the right to complain to a supervisory authority. Ours is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl), but you may complain to the authority in the EU country where you live or work.

Automated decisions#

We do not make decisions about you based solely on automated processing, including profiling, within the meaning of GDPR art. 22.

Cookies#

This site sets no cookies of its own. The one exception is the YouTube video on the home page, which loads only when you press play. Our Cookie Policy explains this in full.

Security#

The site is served only over HTTPS, and access to enquiries is limited to the people who handle them. We apply technical and organisational measures appropriate to the risk, as GDPR art. 32 requires. Email sent to us is outside our control until it reaches our systems.

Children#

This site is intended for business audiences and is not directed at anyone under 16. We do not knowingly collect personal data from children.

Changes to this policy#

When this policy changes, we update the date at the top of the page. If a change materially affects how we use data you have already given us, we will tell you before it takes effect.

Contact us#

Questions about this policy or your data: privacy@motivitylabs.eu, or by post to Motivity Labs B.V., John M. Keynesplein 4, 1066 EP Amsterdam, The Netherlands.