Privacy statement

Last updated: 19 August 2026

ARP-IT B.V. (“ARP-IT”, “we”) takes the protection of your personal data seriously. This privacy statement explains which data we process, why we process it, and which rights you have under the EU General Data Protection Regulation (GDPR).

1. Who is responsible?

ARP-IT B.V.
Spinnakerplantsoen 120, 1319 DG Almere, the Netherlands
Email: info@arp-it.nl · Phone: +31 6 21 59 44 77
Chamber of Commerce (KvK): 42101263 · VAT: NL869731464B01

2. Which data do we process?

Contact form and direct contact

When you use the contact form, email, call or send a WhatsApp message, we process: your name, company name, email address, phone number (if provided) and the content of your message.

Technical data

When you visit the website, our hosting provider processes limited technical data (such as IP address, browser type and time of access) in log files, solely to keep the website secure and available.

3. Why do we process this data?

We process personal data solely to: (a) respond to and follow up on contact and advisory requests, (b) prepare and perform quotations and agreements, (c) keep the website secure and available, and (d) comply with legal obligations (such as tax retention requirements).

4. Legal basis

Processing is based on: the performance of an agreement or pre-contractual steps (art. 6(1)(b) GDPR), our legitimate interest in a secure, well functioning website and business communication (art. 6(1)(f) GDPR), your consent where requested, for example for analytics cookies (art. 6(1)(a) GDPR), and legal obligations (art. 6(1)(c) GDPR).

5. Retention periods

We keep contact requests for up to 12 months after the contact has been concluded, unless an agreement results from it. Records subject to Dutch tax retention rules are kept for 7 years. Technical log files are retained briefly by the hosting provider in accordance with its policy.

6. Sharing of data

We never sell personal data. Data is only shared with processors necessary for our services, such as our hosting and email provider OVHcloud. We conclude data processing agreements with processors. Data is not processed outside the EEA unless appropriate safeguards are in place.

7. Security

We take appropriate technical and organisational measures to protect personal data, including encrypted connections (TLS/SSL), access restrictions and careful supplier selection. Security is our profession. That applies to our own environment as well.

8. Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object to processing. You may withdraw consent at any time. Send your request to info@arp-it.nl; we respond within four weeks. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

9. Changes

We may update this privacy statement. The current version is always available on this page, with the date of the latest change at the top.