Privacy Policy
At Aisuma, we attach great importance to your privacy. In this privacy statement, we explain what personal data we collect, why we do it, how we protect it and what rights you have.
Last updated: Friday, April 25, 2025
1. Who are we?
Aisuma B.V.
Peseta Street 38
2991 XT Barendrecht
Chamber of Commerce number: 97026352
Website: https://www.aisuma.ai
Email: contact@aisuma.ai
2. What information do we collect?
We can process the following personal data:
- First and last name
- E-mail address
- Phone number (if filled in)
- Company name
- Content of messages via our contact form
- Newsletter login details
- IP address and browser information
- User behavior on our website (via cookies and tracking)
- Data that is necessary for the performance of our services
- Billing and payment information (if applicable)
3. How do we collect this information?
We collect data via:
- The contact form on our website
- The newsletter subscription form
- Automatically via cookies and analysis tools (such as Google Analytics, Meta Pixel)
- E-mail, phone, or other means of communication
- Business contracts and agreements
- Publicly accessible sources (such as social media, KvK)
4. Why do we process this data?
We process your data for the following purposes:
- To contact you regarding your message
- To send newsletters (only after registration)
- For analysis of website use and improvement of our services
- For marketing purposes (such as Meta Pixel retargeting)
- For general business operations and customer management
- To be able to provide our services
- To comply with legal obligations, such as tax retention obligations
- For the security and optimization of our systems
5. On what basis?
We process personal data based on:
- Your consent (for example when subscribing to a newsletter)
- Execution of an agreement (for example, when you purchase a service from us)
- Legitimate interest (such as website optimization, marketing and security)
- Legal obligation (such as fiscal retention obligations)
6. Automated decision making
Aisuma does not use automated decision-making or profiling that makes decisions that have legal effects on or significantly affect people.
7. How long do we keep your data?
We do not keep your personal data longer than necessary for the purposes for which it was collected. The specific retention periods are as follows:
- Contact forms: up to 36 months after last contact
- Newsletter details: as long as you are subscribed plus 1 month after unsubscribing
- Usage data via cookies: see our cookie policy
- Customer data: during the term of the agreement and thereafter as long as necessary for our services
- Financial administration: 7 years (legal tax retention obligation)
- Backups and log data: up to 36 months
At the end of the storage period, your data will be deleted or anonymized.
8. Who do we share your information with?
We only share data with processors who provide services on our behalf, including:
- Webflow (website hosting)
- Make.com / n8n.io (workflow automation)
- Google (Analytics, Tag Manager)
- meta (Facebook/Instagram ads)
- Any future CRM providers
- Administrative and financial service providers (bookkeeping, accountants)
- IT service providers for maintenance and security
- Government agencies (only when required by law)
We have concluded processing agreements with all these parties (if applicable). We ensure that our processors take appropriate security measures and comply with our data protection guidelines.
8.1 Sub-processors
In some cases, our processors may use sub-processors. We require our processors to inform us about the use of sub-processors and to ensure that these sub-processors meet the same security requirements that we set for our direct processors.
9. Transfer outside the EU
Some of the tools we use (such as Google and Meta) process data outside the European Economic Area (EEA). These parties are certified under the EU-U.S. Data Privacy Framework or offer other appropriate data protection safeguards, such as:
- Standard contractual clauses approved by the European Commission
- Binding Corporate Rules
- Additional technical and organizational measures
We ensure that personal data is only transferred to countries that offer an appropriate level of protection or under conditions that offer appropriate safeguards.
10. Cookies and Tracking
Our website uses cookies and similar technologies. On your first visit, you'll have the option to set your preferences. We use the following types of cookies:
- Functional cookies (necessary for the website to work)
- Analytical cookies (to gain insight into website usage)
- Marketing cookies (for personalized ads)
You can change your cookie preferences at any time via the link in the footer of our website. For more information, please refer to us cookie policy.
11. Social media
In the future, we may include social media integrations on our website, such as buttons to Facebook, LinkedIn, Twitter/X or Instagram. These buttons can set cookies and collect data even when you're not using them. We have no control over the processing of data by social media platforms. For more information, see the privacy policies of these platforms.
12. Minors' information
Our services are not directed to people under 16 years of age. We do not knowingly collect personal information from minors. If we discover that we have collected personal information from a minor without parental consent, we will delete that information as soon as possible. If you suspect that we have collected information from a minor, please contact us at contact@aisuma.ai.
13. Your rights
You have the following rights with respect to your personal data:
- Right to view: You can request a copy of all the information we hold about you.
- Right to correction: You can have incorrect or incomplete information corrected.
- Right to deletion: You can request that your information be erased (with the exception of information that we are legally required to keep).
- Right to restriction: You can request that the processing of your data be temporarily paused.
- Right to object: You can object to certain processing operations, especially if they are based on a legitimate interest.
- Right to data portability: You can request that your data be received in a structured format or sent to another party.
- Right to withdraw consent: If we process your data based on your consent, you can withdraw this consent at any time.
To submit a request, please send an email to contact@aisuma.ai. We will respond to your request within one month. For complex or extensive requests, this period can be extended by up to two months, which will then be notified to you.
To prevent abuse, we may ask you to verify your identity. We try to keep this as simple as possible, for example by asking you to provide information that only you would know.
If you are not satisfied with how we handle your data, you have the right to file a complaint with the Data Protection Authority (Autoriteit Persoonsgegevens) (www.autoriteitpersoonsgegevens.nl).
14. Withdraw consent
You can withdraw your consent to receive our newsletter at any time by:
- Clicking on the unsubscribe link at the bottom of each newsletter
- Sending an email to contact@aisuma.ai
15. Security
We take appropriate technical and organizational measures to protect your personal data against loss, unauthorized access or unlawful use. These measures include:
- Encryption of sensitive data
- Restricted access to personal information (authorized personnel only)
- Regular security tests and updates
- Physical and digital security measures
- Awareness training for our employees
- Regular review and improvement of our security measures
16. Data breaches
In the event of a data breach that is likely to pose a risk to the rights and freedoms of data subjects, we will:
- Investigate the data breach immediately and take measures to stop it and limit the damage
- Report the data breach to the Data Protection Authority within 72 hours, if required
- Inform data subjects about the data breach if there is a high risk to their rights and freedoms
- Documenting the data breach in our internal data breach register
- Implement measures to prevent similar data breaches in the future
17. Processing register
As part of our compliance with the AVG/GDPR, we maintain an internal processing register that documents all data processing activities. This register is available to the Data Protection Authority upon request.
18. Changes to this Privacy Statement
We reserve the right to amend this privacy statement to comply with legal changes or changes in our services. Therefore, please check this page regularly for the latest version.
In case of major changes that affect the way we process your data, we will actively inform you about this via email or a clear message on our website.
19. Contact
Do you have any questions, comments or requests regarding this privacy statement or the processing of your personal data? Then contact us:
Aisuma B.V.
With regard to Privacy
Peseta Street 38
2991 XT Barendrecht
Email: contact@aisuma.ai
This privacy statement was last updated on Friday, April 25, 2025.