Privacy statement
Which personal data axnet processes, why and for how long.
Version 0.3Updated Adopted by axnet on
Who is responsible
axnet, a sole proprietorship registered with the Dutch Chamber of Commerce under number 98873423, is the controller of the data in this statement: from the website, from sales and from accounts in the console.
For data that customers put on their machines, volumes and backups, the customer is the controller and axnet the processor. The data processing agreement covers that data.
Which data, why and for how long
Website
- Data
- IP address, time, page and browser, in the server logs
- Purpose
- Security and fixing faults
- Legal basis
- Legitimate interest
- Kept
- For 30 days
- With
- axnet itself, on its own server in the Netherlands
Contact, notices and sales
- Data
- Name, e-mail address, phone number, company and your message; for a notice also the location and your explanation
- Purpose
- Handling your question, notice or quote; for a notice with an e-mail address, a confirmation of receipt
- Legal basis
- Legitimate interest; for notices of illegal content, a legal obligation (DSA)
- Kept
- For 12 months after the last contact; from customers, for as long as the account exists
- Via
- The forms on axnet.nl go through axnet’s own server to axnet’s mailbox at Google Workspace. The server keeps no copy of your message.
- Spam check
- Your browser does a small calculation that axnet’s server sets and checks. No cookies, no third parties. To limit abuse, the server remembers your IP address for at most an hour and, after a confirmation of receipt, your e-mail address as a hash for at most 24 hours; in memory only.
Account
- Data
- Name, e-mail address, password (as a hash only), passkeys, two-factor authentication data, roles and access
- Purpose
- Signing in and using the console
- Legal basis
- Contract
- Kept
- For as long as the account exists
Company check
- Data
- Company name, address, KvK number or VAT number
- Purpose
- Business customers only; the correct VAT
- Legal basis
- Contract; legal obligation (VAT)
- Kept
- For as long as the account exists; on invoices for 7 years
Invoices and payments
- Data
- Invoice details, payment status, IBAN (masked)
- Purpose
- Invoicing and processing payments
- Legal basis
- Contract; legal obligation (art. 52 of the Dutch General Tax Act, AWR)
- Kept
- For 7 years
Security and activity log
- Data
- IP address, sessions and actions in the console
- Purpose
- Securing the account and the platform; your own audit
- Legal basis
- Legitimate interest; contract
- Kept
- For as long as the account exists
Signing in with GitHub: GitHub then shares your name and e-mail address with axnet.
Who receives data
axnet does not sell data. These parties receive data to provide the service:
| Party | Purpose | Location | Role |
|---|---|---|---|
| Google Ireland Limited E-mail (Google Workspace) · Worldwide | E-mail (Google Workspace) | Worldwide | Processor |
| Mollie B.V. Payments · Netherlands | Payments | Netherlands | Independent¹ |
| Public registries | |||
| Kamer van Koophandel Company check at sign-up · Netherlands | Company check at sign-up | Netherlands | Registry |
| European Commission (VIES) VAT number check · EU | VAT number check | EU | Registry |
- ¹Decides on the payment data itself.
Mollie’s privacy statement applies to the payment data. A government receives data only when the law requires it.
Outside the EU
Machines, volumes and backups are stored in the Netherlands.
The website runs on axnet's own server in the Netherlands.
E-mail with axnet, including messages from the forms on this website, goes through Google Workspace (Google Ireland Limited, Dublin). Google may also process that data outside the EEA, such as in the United States.
Data goes to a country outside the EEA only with appropriate safeguards (GDPR chapter V), such as the European Commission’s standard contractual clauses.
Security
Connections to axnet.nl and the console are encrypted. Two-factor authentication is mandatory for every account. Only staff who need data for their work have access to it. See also Security.
Your rights
You have the right of access, rectification, erasure, restriction, data portability and objection (GDPR art. 15–21). You export account data yourself as JSON in the console, under Legal & data.
Send a request to privacy@axnet.nl or info@axnet.nl. axnet replies within one month.
axnet does not use profiling and takes no decisions based solely on automated processing.
Complaints
You can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), through autoriteitpersoonsgegevens.nl. Feel free to contact axnet first.
Contact
Privacy: privacy@axnet.nl · General: info@axnet.nl · 085 0043 490
Changes
axnet updates this statement when its processing changes. The date at the top gives the version.