PRIVACY STATEMENT
How Atvalio handles your data
Last updated on 1 November 2026.
Who we are
Atvalio (in formation) is responsible for the data processed through atvalio.com. Send privacy questions to info@atvalio.com. Once Atvalio is registered with the Dutch Chamber of Commerce, we will add the company details here.
What data we process, and why
When you visit the website
Our hosting provider records technical data such as your IP address, browser type and time of visit. This is needed to run and secure the website, for example against abuse. The legal basis is our legitimate interest. These logs are kept briefly, according to the hosting provider’s standard periods.
Visitor numbers
On the public pages (the home page, About us and this statement) we count visitors anonymously, using Vercel Web Analytics. For each visit, the page, the site you came from, your country and region, device type, operating system and browser are recorded. No cookies are set. To link visits together, Vercel creates a code from your request that cannot be traced back to you; it is deleted after 24 hours. We only see totals, never who you are. In the app, after logging in, we count nothing. The legal basis is our legitimate interest: knowing whether the website does its job.
When you email us
We use your name, email address and message to answer your question. The legal basis is our legitimate interest. We keep the email no longer than needed to handle your question.
When you join the waiting list
On the pricing page you can leave your email address to hear when Atvalio Tenders becomes available. We keep your email address, your language, when you signed up and when you confirmed. You first get an email to confirm your address; without confirmation we send you nothing more. After confirmation you get one email at launch. The legal basis is your consent. You can unsubscribe with the link in every email; your address is then no longer used. We keep the list until launch and then delete the addresses of anyone who has not created an account within six months. To prevent misuse of the form, we keep a non-identifying code of the IP address someone signs up from, per hour.
When you have an account
To let you log in, we store your email address, an encrypted form of your password, the link with your authenticator app, your language choice, the name of your organisation and your role in it. This is needed to give you secure access. The legal basis is the agreement with you or your organisation. We keep this data for as long as your account exists.
Cookies
Atvalio only uses cookies that are needed for the site to work: one for your language choice and, when you log in, cookies for your session. We use no analytics or advertising cookies. The visitor numbers above work without cookies, through our own hosting provider. That is why we don’t ask for cookie consent.
Who else sees your data
We don’t sell your data. We work with these processors, each under a data processing agreement:
- Vercel Inc. hosts the website and the app, and counts visitor numbers. The server functions run in Frankfurt. Vercel is a US company and may also process data, such as logs, outside the EU, only with the safeguards required by the GDPR, such as the European Commission’s standard contractual clauses.
- Supabase Inc. stores account data and the waiting list in a data centre in Frankfurt. Supabase is also a US company. Any transfer outside the EU takes place only with the safeguards required by the GDPR.
- Resend (Plus Five Five, Inc.) sends the waiting list emails, from Ireland. Resend is also a US company. Any transfer outside the EU takes place only with the safeguards required by the GDPR.
If we add processors, they will be listed here before they receive any of your data.
How we protect your data
The connection is always encrypted. Logging in requires a password and a code from an authenticator app. Each customer’s data is strictly separated from other customers’ data in the database.
Your rights
You can access, correct or delete your data. You can also object, restrict processing or request your data in a common format. Email info@atvalio.com. We respond within one month. If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Changes
When we change this statement, the new version appears here, with the date at the top.