Privacy policy

This policy explains what personal data Astra Praxis collects through astrapraxis.com, why we hold it, how long we keep it and what you can ask us to do with it. It covers everyone who visits the site and anyone who writes to us through the intake form. Nothing here reduces your rights under the General Data Protection Regulation (GDPR) or Dutch data protection law. This version was last updated on 27 September 2026.

Astra Praxis is the controller of the personal data described here, which means it decides why and how that data is processed. The firm is registered in the Netherlands, with its registered office in Amsterdam. For any question about this policy, or about data we hold on you, write to info@astrapraxis.com.

We collect the details you give us on the intake form and a small amount of technical data about your visit. We buy no personal data and we do not build profiles of the people who read this site.

The intake form asks for your organisation’s name, your position or title, your email address and a description of the challenge you want to discuss. You may also name the person or firm who introduced you. Anything you choose to write in the description becomes part of what we hold, so please share only what you are comfortable sending by email.

If you accept analytics cookies, Google Analytics records how you use the site, including the pages you view, the time of your visit, your approximate location and the type of device and browser you use. If you decline, no analytics cookies are set. Our hosting provider also keeps short server logs, including IP addresses, to keep the site secure.

The GDPR requires a lawful basis for each use of personal data. We rely on three.

We read, answer and keep a record of intake submissions on the basis of our legitimate interest in running an advisory firm and replying to the people who approach it. You can object to this at any time. Analytics cookies are set only with your consent, which you give or refuse in the cookie banner and can withdraw from the same banner whenever you like. When an enquiry becomes an engagement, we keep the related records because Dutch law requires it.

We keep personal data only as long as it serves the purpose we collected it for, then delete it.

An intake submission that does not lead to work is deleted 12 months after our last exchange with you. Correspondence and records from an engagement are kept for seven years after the engagement ends, the period Dutch tax law sets for business records. Google Analytics data is kept for no more than 14 months. Server logs are kept only for the short period our hosting provider needs for security.

We do not sell personal data and we do not pass it to anyone for their own marketing. The form sends your submission by email to our mailbox and does not store it on the website.

We use a small number of service providers, each bound by a contract to process data only on our instructions. Hostinger hosts the website. Google Workspace runs our email, and Google Analytics measures use of the site if you consent. We may also share data with professional advisers, and with public authorities where the law requires it.

We prefer providers that process data inside the European Economic Area (EEA). Google may process data in the United States. Google LLC is certified under the EU-US Data Privacy Framework, which the European Commission has recognised as giving adequate protection, and its data processing terms include the Commission’s standard contractual clauses. For a copy of the safeguard that applies to a particular transfer, write to info@astrapraxis.com.

The site uses one cookie that it needs to work, which remembers your choice in the cookie banner. It sets analytics cookies from Google Analytics (names beginning _ga, lasting up to two years) only if you accept them. The site sets no advertising cookies. You can change your choice at any time through the cookie settings link at the foot of every page.

You have the right to see the personal data we hold about you, to have it corrected, deleted or restricted, to receive a portable copy of data you gave us, and to object to processing based on our legitimate interests. Where we rely on consent, you can withdraw it at any time without affecting what was done before. Write to info@astrapraxis.com to use any of these rights. We reply within one month, at no charge.

If you think we have handled your data badly, please tell us first so we can put it right. You also have the right to complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens in The Hague (autoriteitpersoonsgegevens.nl), whether or not you have contacted us. If you live or work elsewhere in the EEA, you may complain to your local supervisory authority instead.