Privacy Policy

Data Controller

Pravox B.V. is the data controller responsible for your personal data. We are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and applicable Dutch privacy laws.

Data Collection

The data we collect includes personal information that you provide to us directly and information that is collected automatically when you use our website and services. We collect this information to provide you with our infrastructure services and to improve your experience with Pravox.

Information You Provide:

• Name and contact information (email, phone number, address)
• Company or organisation details
• Project requirements and specifications
• Communication preferences
• Any other information you choose to provide in forms or communications

Information Collected Automatically:

• IP address and browser information
• Website usage data and analytics
• Cookies and similar tracking technologies
• Device and technical information

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for marketing communications
• Contract: To perform our services and fulfil contractual obligations
• Legitimate Interest: For business operations, website analytics, and service improvement
• Legal Obligation: To comply with applicable laws and regulations

How We Use Your Information

We explain how we use your information to provide and improve our infrastructure services. The use of your data enables us to deliver professional services, maintain communication, and ensure compliance with our contractual and legal obligations.

• Responding to enquiries and providing project quotes
• Delivering infrastructure and construction services
• Managing client relationships and project communications
• Processing payments and maintaining financial records
• Improving our website and services through analytics
• Sending relevant business communications (with your consent)
• Complying with legal and regulatory requirements
• Protecting our business interests and preventing fraud

Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share your information in the following circumstances:

• Service Providers: Trusted partners who assist with our operations (hosting, analytics, payment processing)
• Subcontractors: When necessary for project delivery, with appropriate confidentiality agreements
• Legal Requirements: When required by law, regulation, or court order
• Business Transfers: In case of merger, acquisition, or sale of business assets
• Protection: To protect our rights, property, or safety, or that of others

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy and to comply with our legal obligations. Specific retention periods include:

• Client Records: 7 years after project completion (legal requirement)
• Financial Data: 7 years for tax and accounting purposes
• Marketing Data: Until you withdraw consent or 3 years of inactivity
• Website Analytics: 26 months from collection
• General Enquiries: 2 years from last contact

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal obligations)
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for marketing communications

To exercise your rights, please contact us at privacy@pravox.world. We will respond within one month of receiving your request.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure hosting, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure.

International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA). When we transfer your data internationally, we ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or other approved mechanisms under GDPR.

Cookies and Tracking

Our website uses cookies and similar technologies to enhance your browsing experience and analyse website traffic. For detailed information about our use of cookies, please see our Cookie Policy.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services constitutes acceptance of the updated policy.

Contact Information

If you have questions about this Privacy Policy or how we handle your personal data, please contact us using the following information:

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we have not handled your personal data appropriately.

Supervisory Authority

If you have concerns about our data processing practices, you may contact the Dutch Data Protection Authority: