This website is operated by registered legal entity name, trading as GAIA, registered in the Netherlands under Chamber of Commerce (KvK) number KvK number, with its registered office at registered office address, Amsterdam.
For the purposes of the General Data Protection Regulation (GDPR), we are the data controller for the personal data described in this policy. You can reach us about any privacy matter at privacy contact email.
We have appointed / not appointed a Data Protection Officer. If appointed, give their contact details here.
If you complete the contact form, we process the name, email address, company name, organization size and message you provide. We use this solely to respond to your enquiry and, where it leads to one, to discuss a possible engagement.
The legal basis is our legitimate interest in responding to people who contact us (GDPR Article 6(1)(f)), and where you are asking about our services, the steps taken at your request prior to entering a contract (Article 6(1)(b)).
Our hosting provider records standard server logs for every request: IP address, date and time, the page requested, referring page, and browser user-agent. These exist to keep the service running securely and to diagnose faults. The legal basis is our legitimate interest in the security and reliability of the site (Article 6(1)(f)).
This website uses no cookies and no analytics or advertising trackers. See our Cookie Policy for the full detail, including the one preference this site stores in your own browser.
We share personal data only with service providers who process it on our behalf, under a data processing agreement, and only as far as needed to run the site and reply to you:
We do not sell personal data, and we do not share it for advertising.
Requests to Google Fonts may be handled by servers outside the European Economic Area. Where personal data leaves the EEA, the transfer relies on the European Commission's Standard Contractual Clauses or an adequacy decision. If you would prefer the site make no third-party requests at all, the fonts can be served from our own domain — confirm whether fonts have been self-hosted.
Enquiries and related correspondence are kept for retention period, e.g. 24 months after our last contact with you, unless they become part of a client relationship, in which case the retention terms in the engagement contract apply. Server logs are kept for log retention period.
Under the GDPR you have the right to:
To exercise any of these, write to privacy contact email. We will respond within one month. If you are not satisfied with how we handle your request, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl), or with the supervisory authority where you live.
The site is served over HTTPS. We apply access controls and the security measures described in reference to internal security policy to the systems that hold enquiry data. No system is perfectly secure, but we take the protection of your data seriously and review these measures regularly.
We may update this policy as the site or our practices change. The date at the top of this page shows when it was last revised. Material changes will be signalled on this page.
Questions about this policy or about how we handle personal data can be sent to privacy contact email, or by post to registered office address, Amsterdam, the Netherlands.
