Last updated:
This notice covers optiproq.com and the Demo Lab at optiproq.ai. We do not buy contact lists or sell your data. We use details you give us to answer requests and run the lab.
OptiProq B.V. decides how the personal data described here is used. Email us about privacy at the email address below.
OptiProq B.V.We receive your name, email, message and, if supplied, company. We use them to reply and discuss your request. Our legal basis is our legitimate interest in handling business enquiries. If you ask for an offer, we also take steps before a contract. You can contact us without using the form.
An account needs a business email, password and selected role. We store a password hash, email confirmation and access state, and sign-in activity. We use these to provide and secure the lab. Our bases are steps before a contract and our legitimate interest in security. Without these details we cannot create an account.
Stakeholder answers and freemium requests help us tailor the demo and follow up on your request. Buyer validator uploads may contain supplier data. We use those files only to validate them. Upload only data you are allowed to share. Our bases are your requested pre-contract steps and our legitimate interest in answering your enquiry.
We keep a sales record for external Demo Lab signups, including unconfirmed and blocked accounts. It includes contact details, access state, sign-in counts and freemium request status. We use it for business follow-up based on our legitimate interest. It does not include Stakeholder answers, bid sheets, passwords or session IDs.
Our systems and Cloudflare process technical data such as IP address, browser details and request time. This keeps the services available, stops abuse and helps us investigate errors. Our basis is our legitimate interest in security and reliability. We do not use advertising trackers.
Authorized OptiProq staff can see data needed for their work. We keep account, email and sales records on our own systems. Cloudflare delivers and protects the public site and lab. The Demo Lab booking page loads Calendly and sends your name and email to prefill it. WhatsApp and LinkedIn receive data only if you open their links.
Cloudflare and Calendly are US companies and may process data outside the European Economic Area. Their data processing terms include EU Standard Contractual Clauses for restricted transfers. See notes 2 and 3 below, or ask us for a copy. Core Demo Lab records are held on our own infrastructure.
We delete sign-in events after 180 days, Stakeholder answers and access-change records after 12 months, and validator uploads after 30 days. We remove delivered contact messages from the sending queue after 30 days. We keep account, CRM and correspondence records while they are needed for access, business follow-up or legal duties. You can ask us to review or delete them.
The lab uses session and access cookies. Cloudflare may set security cookies. The website saves your language choice in local storage. These support requested functions and security. Calendly may set its own cookies when its booking page loads. We do not use advertising cookies.
We reject common free-email domains and may park unknown business domains for review. Staff can review access. Email us if you think a rule is wrong. We do not make solely automated decisions with legal or similarly significant effects.
You may ask to see, correct, delete or restrict your data. You may ask for a portable copy where that right applies. You may object to processing based on legitimate interests, including direct marketing, at any time. Email [email protected]. We normally reply within one month. You may complain to the Dutch Data Protection Authority.
We update this notice when our processing changes. The date above shows the latest version.