Privacy Policy

This privacy policy explains how OpenFlowHub AE B.V. ("openflowhubae", "we", "us", or "our") collects, uses, and protects your personal information when you visit our website or use our services. We are committed to protecting your privacy and ensuring transparency about our data practices.

Last updated: 1st January 2026

Data Controller Information

OpenFlowHub AE B.V. is the data controller responsible for your personal information. You can contact us using the details provided in the contact section below.

• Company: OpenFlowHub AE B.V.
• Registration Number: KvK85967431
• Address: Rozengracht 156, 1045 RK Amsterdam, Netherlands
• Email: privacy@openflowhubae.world

Data We Collect

We collect various types of information when you interact with our website and services. The data collection includes both information you provide directly and information we gather automatically through your use of our services.

Information You Provide

When you contact us, request information, or use our services, you may provide us with personal information including:

• Name and contact details (email address, phone number)
• Company information and business details
• Messages and enquiries you send to us
• Any other information you choose to provide

Information We Collect Automatically

When you visit our website, we may automatically collect certain technical information:

• IP address and browser information
• Pages visited and time spent on our site
• Referring website and search terms used
• Device information and operating system

How We Use Your Information

We use the personal data we collect for various legitimate business purposes. How we use your data depends on how you interact with our services and the legal basis for processing.

We may use your information to:

• Respond to your enquiries and provide customer support
• Deliver our financial planning services and tools
• Send you relevant information about our services
• Improve our website and service offerings
• Comply with legal obligations and protect our rights

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Legitimate interests: To operate our business and provide services
• Contract performance: To fulfil our obligations to you
• Consent: Where you have given explicit consent
• Legal obligation: To comply with applicable laws

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about our use of cookies, please see our Cookie Policy.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• With service providers who assist us in operating our business
• When required by law or to protect our legal rights
• With your explicit consent for specific purposes
• In connection with a business transfer or acquisition

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this privacy policy. The retention period depends on the type of data and the legal basis for processing. Generally, we retain data for the duration of our business relationship plus any additional period required by law.

When determining retention periods, we consider:

• The nature and sensitivity of the data
• Legal and regulatory requirements
• The purposes for which we collected the data
• Whether we can achieve those purposes through other means

Data Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

Your Rights

Under GDPR and applicable data protection laws, you have several rights regarding your personal information. These rights include the ability to access, correct, or delete your personal data, as well as other important protections.

Your rights include:

• Right of access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Request limitation of how we use your data
• Right to data portability: Request transfer of your data
• Right to object: Object to certain types of processing
• Right to withdraw consent: Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us using the details provided below.

Third-Party Services

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any third-party services you visit.

Children's Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "last updated" date.

Contact Information

If you have any questions about this privacy policy, wish to exercise your rights, or have concerns about how we handle your personal information, please contact us:

Supervisory Authority

If you believe we have not addressed your concerns appropriately, you have the right to lodge a complaint with the relevant data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).