Privacy Notice

We take the protection of your personal data seriously. Qivalis B.V. (hereinafter referred to as “Qivalis”, “we”, “our”, “us” for the purpose of the EU General Data Protection Regulation (“GDPR”), and if not specified otherwise in this Privacy Notice, we are the “Data Controller”) is committed to data avoidance and data minimization. We treat your personal data as confidential and in accordance with the legal data protection regulations and this Privacy Notice. Please read this Privacy Notice carefully to better understand your rights in relation to your personal data, and how we collect and use it.

For the terms used (e.g. "personal data", "processing", "person responsible" and "processor") we refer to the definitions of the GDPR in Art. 4 GDPR.

I. Name and contact details of the Data Controller

II. Personal data we are processing, the purpose and legal basis for that processing and storage periods for the data
1. Website
2. Contact via email
3. Applications
4. Social Media

III. Recipients of your personal data and where it is stored
1. Data processors
2. Data storage location

IV. Rights of data subjects (your rights)

V. Disclaimer

VI. Changes and updates to this Privacy Notice

The person responsible for the processing of your personal data in the context of this website (Data Controller), if not specified otherwise, is: Qivalis B.V., Strawinskylaan 1457, 1077 XX Amsterdam, The Netherlands, Email: info@qivalis.eu

1. Website

When you visit our website (https://qivalis.eu/), the following data is processed:

Personal and additional data:
The provider of the pages collects and stores information in so-called server log-files, which your browser automatically transmits. The following data is temporarily stored by the web server when you visit the provider's website:
- Browser type/ browser version.
- Used operating system.
- IP address.
- Date and time of access.
- Referrer URL.
- Transferred amount of data.
- Message as to whether the call was successful.

Cookies:
Cookies are text files placed on your device to collect certain information. We are only using necessary cookies or “session cookies”. These cookies are used for activities that are strictly necessary to operate our website in a reliable manner, therefore, do not require you to consent.

Purposes of processing:
- Operating the website.
- Evaluating technical malfunctions.
- Website security measures.

Legal basis:
- Art. 6 para. 1 letter f GDPR (“legitimate interest”).

Storage period:
- Log-files are automatically deleted after the default settings of 52 days.

2. Contact via email

When you send us an email to info@qivalis.eu the following data is processed:

Personal data:
- Your name.
- Your email address.
- In regard to your message in your email you send us, please take the following into account:

-- We do not advise you to send us any data that is considered to be sensitive personal data in the meaning of Art. 9 GDPR (“special categories of personal data”), i.e. information on your racial or ethnic origin, sexual orientation, marital status, political affiliation, religion or any other beliefs, health, criminal records or a trade union membership.
-- If you disclose personal information about others in your message, you declare and warrant that you are authorized to do so and that you permit us to use such information in accordance with this Privacy Notice.

Purpose of processing:
- Answering your email.

Legal basis:
- Art. 6 para. 1 letter a GDPR (“consent”).
- Art. 6 para. 1 letter b GDPR (“performance of a contract”).
- Art. 6 para. 1 letter c GDPR (“legal obligation”).
- Art. 6 para. 1 letter f GDPR (“legitimate interest”).

Storage period:
After completion of the data processing, your data is generally deleted at the latest 3 years after the end of the year in which the data processing was completed. In exceptional cases, however, the data may be stored for longer. This depends on the individual case of your inquiry and the content of your message. The data will be deleted after 10 years at the latest. In the meantime, the data will be pseudonymized as far as possible.

3. Applications

With regard to data processing in connection with job applications, we refer you to our external service provider, Meyer Talent Acquisition GmbH (https://parlats.eu/) and their Privacy Notice.

4. Social Media

Our Website contains links to our social media profiles (e.g. LinkedIn and X).

You can recognize these links by the respective logos. When you click on a link, you will be redirected to the relevant social media platform.

In doing so, the provider may receive information such as your IP address and that you visited our Website. If you are logged into your social media account at that time, the provider may link your visit to your account.

The processing of personal data by these platforms is carried out solely by the respective providers. For more information, please refer to their privacy policies.

Insofar as we disclose data to other persons and companies (Data Processors) within the scope of our processing, transfer them to them or otherwise grant them access to the data, this only takes place on the following legal basis: consent Art. 6 para. 1 letter a GDPR, performance of a contract Art. 6 para. 1 letter b GDPR, a legal obligation Art. 6 para. 1 letter c GDPR, our legitimate interests Art. 6 para. 1 letter f GDPR.

1. Data processors

The following categories of third-party providers (Data Processors) are used to enable the work of our website and to communicate with you:

-  Email notification provider.
- CRM software provider.
- Cloud storage providers.

2. Data storage location

The information that we collect from you is transferred, stored, and processed within the EEA and potentially in other countries where our Data Processors are located. We will take all reasonable steps to ensure that your personal data is treated securely, with a level of protection adequate to GDPR and in accordance with this Privacy Notice. We have provided further details below regarding the steps taken to ensure adequate processing of your personal data.

Model clauses

If we transfer data to a third party located outside of the EEA which is not in a White Listed Country, as data exporters, we enter into the European Commission’s model contracts (“SCCs”) for the transfer of personal data to third countries (i.e., the standard contractual clauses pursuant to Commission Implementing Decision (EU) 2021/914 of 4 June 2021) with the relevant data importer. Prior to entering into SCCs we assess, on a case-by-case basis, as outlined in the CJEU decision in Case C‑311/18 [also known as Schrems II] on 16.07.2020, whether an adequate level of data protection, comparably to the level of data protection within the EU is given in the country where the data will be transferred to. If the appropriate level of protection is not given, additional protection provisions and measures will be contractually agreed and/or implemented by us to ensure the protection of personal data.

You have the following rights under the statutory provisions: 

- Right to withdraw consent (Art. 7 (3) GDPR).
- Right of access to information (Art. 15 GDPR).
- Right to have incorrect personal data concerning you corrected (“Right to rectification”)  (Art. 16 GDPR).
- Right to erasure ("Right to be forgotten") (Art. 17 GDPR).
- Right to restriction of processing (Art. 18 GDPR).
- Right to data portability (Art. 20 GDPR).
- Right to object against the processing of personal data concerning yourself (Art. 21 GDPR).
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent supervisory authority for Qivalis B.V. is the Autoriteit Persoonsgegevens (AP), Bezuidenhoutseweg 30, 2594 AW Den Haag, The Netherlands (www.autoriteitpersoonsgegevens.nl).

To exercise any of your rights, please email dataprotection@qivalis.eu. We will respond to your request within one month of receipt. In complex or high-volume cases, this period may be extended by a further two months; we will notify you of any extension within the initial one-month period (Art. 12(3) GDPR).

Please note that for each of the rights above, we may have valid legal reasons to refuse your request, in such instances we will let you know if that is the case.

This Privacy Notice contains links to other websites. Please note that by clicking on a link you will be redirected to another website or document. These websites can be beyond Qivalis's sphere of influence. Liability is excluded. The operators of the linked websites are solely responsible for their content. We refer you to their privacy policy.

This Privacy Notice is reviewed and revised from time to time. Further developments of our website and the implementation of new technologies to improve user experience may also require changes to this Privacy Notice. We, therefore, recommend that you re-read this Privacy Notice from time to time.

Last update of this Privacy Notice: 2026-06-10