Privacy statement.

elgentos B.V. ("we") handles your personal data with care. This privacy statement explains which data we collect when you visit our website or get in touch, why we do so and which rights you have.

This statement applies to elgentos.nl and elgentos.com. Our careers site werkenbijelgentos.nl has its own privacy statement.

Who is responsible for your data?

elgentos B.V. is the data controller for the data processed through this website.

• elgentos B.V.
• Hereweg 120-4, 9725 AK Groningen, the Netherlands
• Chamber of Commerce (KvK) 68056621
• info@elgentos.nl
• +31 (0)50 700 15 15

Questions about privacy? Email info@elgentos.nl and a human will reply.

Which data do we process and why?

We only process data we need to help you or to keep the website running. Below you find, per situation, what we collect, what we use it for and how long we keep it.

Contact form and email

When you fill in the contact form, we process your name, email address and message. The form reaches us as an email and we only use your data to reply. Legal basis: legitimate interest (we want to answer your question) or steps prior to entering into a contract.

Retention: as long as we are in contact and at most 2 years after the last contact.

B2B Webshop Scan

When you take the free B2B Webshop Scan, we ask for your company name, name, email address, phone number, the URL of your webshop and a few questions about your platform, sector, revenue and challenges. We use this data to calculate your score, email you the result and possibly follow up with a proposal. The result page is personal and is not indexed by search engines. Legal basis: performance of a contract (you request the scan) and legitimate interest (follow-up).

Retention: at most 2 years after the scan.

Download of Hyvä Themes - The Book

When you request the book, we store your email address and send the download link to your inbox. We do not use your email address for a newsletter. Legal basis: performance of a contract.

Retention: at most 2 years after the download.

Giveaways

When you enter a giveaway, we keep your email address until the winner is known and the prize has been shipped. After that we delete it. Legal basis: performance of a contract (the giveaway terms).

Website visits

When you visit our website, we automatically process technical data: your IP address, browser, device, the pages you view and the site you came from. We do this for security and troubleshooting. Legal basis: legitimate interest. For statistics and ad measurement we ask for your consent first. You can read more below under cookies.

We keep server logs for at most 90 days. We keep statistics in Google Analytics for at most 14 months.

Customers and suppliers

When we work together, we process the contact details of you or your colleagues to carry out the project, invoice and stay in touch. Legal basis: performance of the contract and the legal retention obligation for our financial records (7 years).

Cookies and similar technologies

We load measurement and marketing tools only if you accept them in the cookie banner. If you decline or do not choose, we do not load Google Tag Manager or these tools. You can change your choice through Cookie settings at the bottom of every page. If you accept, we load the tools through Google Tag Manager. Tag Manager itself does not set cookies, but the tools do. reCAPTCHA and our own cookies are separate from your choice. These are the tools and cookies:

• Google Analytics 4 (Google): statistics about visits and use of the site, so we know which pages work and which do not. Google Analytics does not store IP addresses. Cookies: _ga and _ga_*, at most 2 years.
• LinkedIn Insight Tag (LinkedIn): measures whether our LinkedIn ads lead to visits and requests, and allows us to show visitors ads on LinkedIn again (retargeting). LinkedIn cookies, at most 1 year.
• Leadinfo (Leadinfo B.V.): identifies, based on your IP address, which company is visiting our site. We see the company name, not who you are. Cookies: _li_id and _li_ses, at most 1 year.
• Contaktly (Contaktly): like Leadinfo, identifies based on your IP address which company is visiting our site and which pages that company views. Again, we see a company name, not a person. Contaktly also provides the chatbot on our site.
• OpenAI Ads pixel (OpenAI): measures whether ads in ChatGPT lead to visits, contact requests or book downloads. Cookie: __oppref, to attribute a conversion to a click. If you accept, a contact request or book download also sends data to OpenAI. This is your email address, name and phone number in hashed form, plus your IP address and browser data.
• Google Ads (Google): measures whether our ads on Google lead to visits and requests. Cookie: _gcl_au, at most 3 months.
• Google reCAPTCHA (Google): keeps spam and bots away from our forms. Google sets the _GRECAPTCHA cookie (at most 6 months) and analyses your browser data and interaction with the page. This tool loads only on pages with such a form, separately from your choice in the cookie banner.
• Own cookies (elgentos): XSRF-TOKEN and elgentosnl_session are needed for the site to work securely and expire after a short time. elgentos_consent remembers your choice in the cookie banner, at most 1 year.

Rather not? You have a few options:

• Click Decline in the cookie banner, or change your choice through Cookie settings at the bottom of the page.
• Set your browser to refuse or delete cookies. You can do this per website.
• Install the Google Analytics opt-out browser add-on.
• Turn off LinkedIn retargeting.
• Opt out of Leadinfo.

Who do we share your data with?

We do not sell your data. We only share it with parties that help us run the website and our services:

• Google (Tag Manager, Analytics, Ads, reCAPTCHA)
• LinkedIn (Insight Tag)
• Leadinfo and Contaktly (company identification)
• OpenAI (ad measurement)
• Twilio SendGrid (sending email from the website)
• DigitalOcean and Ploi (hosting and server management)

With parties that process data on our behalf, we sign a data processing agreement. Some of these parties process data in the United States. That transfer is based on the EU-US Data Privacy Framework or on the standard contractual clauses of the European Commission.

We also share data when the law requires us to.

How do we protect your data?

The website runs entirely over HTTPS. Form data is stored in a restricted database that only colleagues who need it can access. We keep software and servers up to date. Nothing is one hundred percent secure, but we do what can reasonably be done.

What are your rights?

You have the right to:

• access the data we hold about you;
• have incorrect data corrected;
• have your data deleted;
• restrict the processing;
• object to the processing, for example to marketing;
• have your data transferred to another party;
• withdraw your consent, where the processing is based on consent.

Email your request to info@elgentos.nl. We reply within a month. To make sure it is really you, we may ask for additional information.

Not happy with how we handle your data? Let us know and we will sort it out together. You can also file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Third-party websites

Our website links to other sites, such as GitHub, LinkedIn and partner sites. This privacy statement does not apply there. Read their own privacy statements.

Changes

We update this privacy statement when needed, for example because we start using a new tool. The current version is always on this page.

Last updated: 2 November 2026.