Privacy Policy
1. Who we are
Qapital Group B.V. trading as Qapital is the data controller for personal data processed through qapital.nl and our direct correspondence channels. Our company details are in our imprint.
2. What we collect
We process the following categories of personal data:
- Identification data (name, professional title, employer)
- Contact data (business email, phone, postal address)
- Correspondence data (the content of messages you send us)
- Engagement data (notes, deliverables, and information provided to us during a project)
- Technical data (IP address, browser, device, referrer, timestamps)
3. Why we process it
We rely on the following lawful bases:
- Performance of a contract: to administer and deliver advisory engagements
- Legitimate interest: to maintain the integrity and security of our services and to communicate with professional counterparties
- Legal obligation: to comply with regulatory, tax, and anti money laundering requirements
- Consent: where you have given it, including for optional analytics or direct communication
4. Sharing
We share data with processors that support the operation of the business: hosting, email, analytics, accounting, and professional advisers. Each processor is bound by a Data Processing Agreement under Article 28 GDPR. We do not sell personal data.
5. Confidentiality of engagements
Information disclosed to us in the course of an engagement is treated as confidential. We do not publish client materials, deliverables, or outcomes without explicit written consent.
6. Retention
Engagement records are retained for the duration of the relationship and for the period required by law. Marketing data is retained until consent is withdrawn. Technical logs are retained no longer than necessary for security and audit.
7. Your rights
You may request access to your data, rectification, erasure, restriction, portability, and you may object to processing. To exercise these rights, write to privacy@qapital.nl. You may also lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.
8. International transfers
Where data is transferred outside the European Economic Area, we rely on adequacy decisions or the Standard Contractual Clauses approved by the European Commission, with supplementary measures where required.
9. Cookies and analytics
This site uses analytics only after explicit consent. Strictly necessary cookies are always set to keep the site functional.
10. Contact
For privacy questions: privacy@qapital.nl. For all other inquiries: info@qapital.nl.