Claevo/Legal/Privacy

Privacy policy & data handling.

How Claevo collects, uses, and protects information — for visitors to this website and for clients we work with. Written in plain language; the legal precision is in the details.

Controller
Claevo · KvK 42076185
Last updated
May 2026
Contact
team@claevo.nl

01Who we are

Claevo ("Claevo", "we", "us") is a business registered in Amsterdam, Netherlands (KvK 42076185).

For the purposes of the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the Dutch Implementation Act (UAVG), Claevo is the data controller for personal data processed through this website and in connection with prospective and active client engagements.

02What we collect

We try to collect the minimum personal data necessary to do the thing you came to us for. In practice that's:

From visitors to claevo.nl

  • Server logs: our website is hosted on Vercel. Request logs including truncated IP address, user-agent, and request path are retained by Vercel for up to 24 hours in accordance with their standard configuration and privacy policy (vercel.com/legal/privacy-policy).
  • Strictly necessary cookies: a session identifier and your cookie-consent choice. No analytics by default.
  • Contact form submissions: the information you give us — name, work email, company, role, and the description of your project.

From prospects and clients

  • Contact details of the people we correspond with at your organisation.
  • Engagement records — emails, proposals, statements of work, invoices, and meeting notes.
  • Client data shared with us under a signed engagement, processed strictly as a processor on your instructions and governed by a separate Data Processing Agreement.

We do not knowingly collect personal data from anyone under the age of 16, and we do not process special-category data unless a specific engagement requires it and a corresponding DPIA is in place.

03Why we use it

  • To respond to enquiries and to scope, propose, and deliver client engagements.
  • To administer the contractual relationship, including invoicing and statutory record-keeping.
  • To keep this website secure, available, and free of abuse.
  • To comply with our legal obligations — tax law, AML where applicable, and lawful requests from supervisory authorities.

We do not sell personal data, share it with advertising networks, profile visitors, or use contact-form submissions to add anyone to a marketing list.

04Legal basis

We process personal data on one of the following bases under Article 6(1) GDPR:

  • (b) Performance of a contract — when you ask us to scope or deliver work for you.
  • (f) Legitimate interests — when you contact us as a prospect, when we operate the website securely, and when we maintain ordinary business records. Our interest is balanced against your rights and freedoms; you may object at any time.
  • (c) Legal obligation — for statutory record retention (e.g. seven-year fiscal records under Dutch law).
  • (a) Consent — for any non-essential cookies, if and when we ever enable them. Consent is opt-in, granular, and withdrawable.

05How long we keep it

  • Server logs: retained by Vercel for up to 24 hours, then deleted automatically. We have no access to or control over this data.
  • Prospect enquiries that don't convert: 12 months from last contact, then deleted.
  • Active engagement records: for the duration of the engagement plus seven years, in line with Dutch fiscal retention obligations.
  • Client data processed under a DPA: per the DPA's terms — typically returned or deleted within 30 days of engagement end.

06Who we share with

We share personal data only with carefully selected processors who help us run the business. Every processor is bound by a written processing agreement and operates within the EU/EEA unless an adequacy decision or appropriate safeguard under Chapter V GDPR applies.

  • Email & calendaring: Microsoft 365, provided through GoDaddy. Used for business email and calendar management. Data is processed in accordance with Microsoft's and GoDaddy's applicable data protection terms.
  • Cal.com: meeting scheduling and booking links.
  • Vercel: website hosting and edge delivery (EU region).
  • Formspree: contact form submission handling.
  • AI chat: Anthropic, Inc. Messages sent through the chat widget are processed by Anthropic's API to generate responses. Data is handled in accordance with Anthropic's data processing terms (anthropic.com/privacy).
  • Professional advisors: lawyers, accountants, and auditors, bound by professional confidentiality.

We do not transfer personal data to recipients outside the EU/EEA without an appropriate safeguard under Chapter V GDPR. A current list of processors is available on request.

06bAI Chat Assistant

This website includes an AI chat assistant powered by Anthropic's Claude API. When you use the chat widget, your messages are sent to Anthropic's API to generate responses. Conversations are processed in real time and are not stored by Claevo after the session ends. Anthropic processes this data in accordance with their privacy policy (anthropic.com/privacy). Do not share sensitive personal data, passwords, or confidential business information through the chat widget.

07Your rights

Under the GDPR you have the right to:

  • Access the personal data we hold about you, and receive a copy.
  • Rectify inaccurate or incomplete data.
  • Erase data we no longer have a lawful basis to keep ("right to be forgotten").
  • Restrict or object to processing based on legitimate interests.
  • Portability — receive your data in a structured, machine-readable format.
  • Withdraw consent at any time, where consent was the basis for processing.
  • Lodge a complaint with a supervisory authority. In the Netherlands, that's the Autoriteit Persoonsgegevens in The Hague.

To exercise any of these rights, write to team@claevo.nl. We respond within 30 days; there is no charge for reasonable requests.

08Cookies

This site uses strictly necessary cookies only — a session identifier and a record of your cookie-consent choice. No tracking pixels, no third-party analytics, no advertising tags. If we ever add non-essential cookies (for example, a privacy-respecting analytics provider), you will see a consent banner first and your default state will be "off".

You can clear cookies in your browser settings at any time without affecting your ability to use the site.

09Contact

Privacy questions, rights requests, or anything else covered by this policy:

Claevo
KvK 42076185
Attn: Privacy
Amsterdam, Netherlands
team@claevo.nl

This policy may be updated from time to time. Material changes will be announced on this page; the "last updated" date at the top reflects the most recent revision.