Privacy and data protection
1. Introduction
Altena Software Development & IT Management, located in the Netherlands, respects your privacy and protects your personal data. This privacy policy explains what data we collect, what we use it for and how we secure it when you use our project management platform (“AdComPro” or “the Service”).
This policy sits alongside our terms and conditions, and anything it does not answer you can put to us through the contact page. It is written in accordance with the General Data Protection Regulation (GDPR) and Dutch privacy law.
2. Data controller
- Company: Altena Software Development & IT Management
- Location: The Netherlands
- Privacy: privacy@adcompro.app
- Everything else: support@adcompro.app
3. What data we collect
3.1 Account information
- Name and email address
- Company name and details
- Phone number (optional)
- Password (stored encrypted)
3.2 Usage data
- The projects and tasks you create
- Time entries and work descriptions
- Customer and contact information you enter
- Files and documents you upload
- Messages you send inside the platform
3.3 Technical data
- IP address and device information
- Browser type and version
- Login timestamps and access logs
- Cookie data, see the cookie policy below
3.4 Payment information
- Billing address
- VAT number, if you have one
- Invoice history
4. What we use your data for
- Delivering the service: providing and maintaining the platform
- Account management: creating and managing your user account
- Communication: service updates, answers to your questions and important notices
- Billing: sending invoices and recording what has been paid against them
- Security: detecting and preventing fraud, abuse and security incidents
- Improvement: looking at usage patterns to make the service better
- Legal obligations: complying with the law and protecting our rights
5. Legal basis for processing (GDPR)
- Performance of a contract: the processing is necessary to deliver what we agreed (Article 6(1)(b) GDPR)
- Legitimate interest: for security, fraud prevention and service improvement (Article 6(1)(f) GDPR)
- Consent: for optional features and marketing communications (Article 6(1)(a) GDPR)
- Legal obligation: for tax, accounting and other legal requirements (Article 6(1)(c) GDPR)
6. Sharing with others
We do not sell your personal data. We share it in the following cases:
6.1 Service providers
- Hosting providers, for the server infrastructure
- Email service providers
- Security and monitoring services
Every one of these parties is bound by a data processing agreement that complies with the GDPR.
6.2 Legal requirements
We may disclose your data where the law, a court order or a government request requires it, or to protect our rights and safety.
6.3 Business transfers
In a merger, acquisition or sale of assets, your data may transfer to the acquiring party.
7. Security
- Encryption: SSL/TLS for everything in transit
- Access control: role-based access, with authentication
- Monitoring: continuous monitoring and intrusion detection
- Backups: regular and encrypted
- People: staff are trained in security and bound by confidentiality
Important: we take substantial measures, but no system is completely secure. We cannot guarantee absolute protection against sophisticated attacks or unauthorised access. What that means for liability is set out in the terms and conditions.
8. Data retention
- Active accounts: we keep the data for as long as your account is active
- Cancelled accounts: most data is gone within 30 days; some is kept longer for accounting and legal reasons, up to seven years as Dutch law requires
- Backups: removed on our backup schedule, within 90 days at the latest
- Legal hold: data may be kept longer where a legal proceeding requires it
9. Your rights under the GDPR
- Access: request a copy of the personal data we hold about you
- Rectification: have inaccurate or incomplete data corrected
- Erasure: have your data deleted, the right to be forgotten
- Restriction: limit how we use your data
- Portability: receive your data in a structured, machine-readable format
- Objection: object to processing based on legitimate interest
To exercise any of these rights, email privacy@adcompro.app. We respond within 30 days.
You also have the right to lodge a complaint with the Dutch Data Protection Authority: autoriteitpersoonsgegevens.nl.
10. Transfers outside the EU
Your data is stored and processed within the European Union in principle. If data does go outside the EU, we make sure there are adequate safeguards:
- Standard contractual clauses approved by the European Commission
- Adequacy decisions for countries with an equivalent level of protection
11. Children
AdComPro is not intended for children under 16. We do not knowingly collect data from children. If you believe we have, tell us immediately at privacy@adcompro.app.
12. Changes to this policy
We may update this privacy policy from time to time. For significant changes we will notify you by email or with a clear notice on the platform. If you keep using AdComPro afterwards, the new version applies. Previous versions are available on request.
13. Cookie policy
Cookies are small text files stored on your device when you visit a website. They help a site remember your preferences and understand how it is used.
Essential cookies (always active)
Purpose: needed to make the site and the platform work, for your session, signing in and protection against CSRF attacks. This also covers the cookie that remembers which language you want to read the site in.
Duration: your session, up to one year. Legal basis: legitimate interest (Article 6(1)(f) GDPR); without these cookies the service does not work.
Analytics cookies (optional, with consent)
Purpose: understanding how visitors use the site so we can improve it. We use Google Analytics 4 (Google Ireland Ltd.) for this, configured privacy-first: IP addresses are anonymised, data is not shared with Google for advertising, and a data processing agreement with Google is in place. Measurement only starts after you give consent via the bar at the bottom of the site; without consent no cookies are set and you are not recognised. What we record:
- Pages visited and time spent per page
- Device type: desktop, phone or tablet
- Browser and operating system
- The site you came from
- An anonymised IP address, with the last part removed
- Scroll depth and where you click
Duration: the Google Analytics cookies up to two years, the analytics data itself up to fourteen months. Legal basis: consent (Article 6(1)(a) GDPR).
Marketing cookies (not in use)
We do not use cookies for advertising or for tracking visitors across other sites. If that ever changes, we will ask for your explicit consent first.
The cookies we set
| Name | Type | Duration | Purpose |
|---|---|---|---|
| acp_lang | Essential | 1 year | Remembers the language you picked in the language switcher |
| adcompro_consent | Essential | 1 year | Stores your choice from the consent bar (accept or decline) |
| XSRF-TOKEN | Essential | Session | Security token against CSRF attacks |
| laravel_session | Essential | Session | Maintains your session |
| _ga | Analytics (Google Analytics) | 2 years | Recognises unique visitors, only after consent |
| _ga_SMRB9LV9NX | Analytics (Google Analytics) | 2 years | Keeps track of the browsing session, only after consent |
Managing your cookie preferences
- In your browser: nearly every browser lets you refuse or delete cookies in its settings
- Starting over: delete the
adcompro_consentcookie (or clear all cookies for this site) and visit again; the consent bar will appear once more
Note: if you disable the essential cookies, parts of the site stop working properly. The analytics cookies are optional; without them the site works fully.
14. Your language and country
This website exists in English and in Dutch. To decide which version to show you, we look at the languages your browser sends along. If your browser mentions neither language, we look up the country that belongs to your IP address.
That lookup happens on our own server, in a file of IP ranges and country codes. Your IP address does not go to any other party for it, and the result is not stored: we use only the country code, and only at that moment. If you pick a language yourself in the language switcher, the acp_lang cookie remembers your choice and we stop looking at your IP address.
15. Contact
For questions, concerns or requests about this privacy policy or your personal data:
- Privacy: privacy@adcompro.app
- Everything else: support@adcompro.app
This privacy policy is governed by Dutch law and complies with the General Data Protection Regulation.