Privacy Policy

1. Data Controller Information

The entity responsible for the collection and processing of personal data on this website is:

Pure Ripples Diagnostics B.V.
Company Registration Number: NL-84920481-B01
Keizersgracht 421, 1016 EK Amsterdam, Netherlands
Email: [email protected]

2. Information We Collect and Process

We restrict data collection to what is strictly necessary to operate a dependable, secure, and responsive informational website.

• Contact Form Communications: When you voluntarily submit an inquiry through our diagnostic contact desk, we collect your full name, email address, inquiry subject, and the contents of your message.
• Technical Server Logs: When accessing our servers, your browser automatically transmits technical metadata, including your IP address (anonymised where possible), browser type and version, operating system, referring URL, date and time of request, and requested file paths.
• Essential Cookie State: We store a minimal client-side cookie preference flag within your local browser storage to prevent the consent banner from repeatedly interrupting your reading.

3. Lawful Bases for Processing (GDPR Article 6)

Under Regulation (EU) 2016/679 (General Data Protection Regulation), our processing activities rely on specific lawful grounds:

• Consent (Art. 6(1)(a)): When you proactively contact us via our form, you grant consent for us to respond to your specific question.
• Legitimate Interests (Art. 6(1)(f)): Processing server logs is legally justified by our legitimate interest in maintaining web server integrity, mitigating distributed denial-of-service (DDoS) attacks, and ensuring content delivery security across European internet nodes.

4. Data Processors and Third Parties

We do not sell, rent, or trade your personal information. We do not embed behavioural advertising networks, third-party social media tracking pixels, or cross-site data aggregators. Data processing is limited to our European-hosted infrastructure providers who assist in secure static website delivery under binding Data Processing Agreements (DPAs).

5. International Data Handling

Our web servers are situated within the European Economic Area (EEA). If technical communication flows route across borders, we ensure adequate protection standards compliant with EU Standard Contractual Clauses (SCCs).

6. Data Retention Policies

Inquiries submitted through our contact desk are retained only for as long as necessary to address your communication, up to a maximum of 12 months, after which they are securely purged. Automated technical server access logs are retained on rolling 30-day security cycles and automatically deleted thereafter.

7. Your Statutory Rights Under the GDPR

As an individual residing in the European Union, you have specific legal rights regarding your personal information:

• Right of Access (Art. 15): Request a copy of the personal data we hold about you.
• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete records.
• Right to Erasure / "To be Forgotten" (Art. 17): Request deletion of your contact records where no overriding legal obligation applies.
• Right to Restriction of Processing (Art. 18): Request temporary freezing of data processing.
• Right to Data Portability (Art. 20): Receive your submitted contact data in a structured, machine-readable format.
• Right to Object (Art. 21): Object to processing carried out under legitimate interest grounds.

To exercise any of these rights, contact our privacy desk directly at [email protected]. You also have the right to lodge a complaint with your national European data supervisory authority (such as the Dutch Autoriteit Persoonsgegevens).

8. Security Measures

We apply robust administrative, logical, and technical measures to protect your information, including Transport Layer Security (TLS/HTTPS) encryption in transit, strict access controls, and regular review of hosting infrastructure configurations.