Privacy Policy

Last updated: September 2026

1. Controller

Elanova AI
The Netherlands
Email: contact@elanova.ai
Phone: +31 6 40747312
KVK: 42032545

Elanova AI is the data controller within the meaning of the General Data Protection Regulation (GDPR / AVG).

2. What personal data we collect

We only collect personal data that you voluntarily provide to us:

  • Contact information — name, email address, phone number, company name — when you reach out to us via email, phone, WhatsApp, or our website contact form.
  • Message content — the text of your enquiry or conversation.

We do not use cookies, tracking pixels, advertising tools or third-party analytics scripts on this website.

Anonymous visit statistics. To understand which pages are useful and how people find us, our web server (which runs on Cloudflare) counts page views without cookies and without any script in your browser. For each page view we record only:

  • the page you viewed, without any query string;
  • the website that referred you, reduced to its domain name (for example "linkedin.com"), or "direct" if there is none, plus a campaign label if the link contained one;
  • a general device type (mobile, tablet or desktop).

We do not record your IP address, your full browser details, your location, cookies or any identifier, so these statistics cannot be linked to you or combined into a profile. Automated traffic is excluded. If your browser sends a Global Privacy Control or Do Not Track signal, we do not count your visit at all.

Our hosting infrastructure (Cloudflare) automatically records server access logs containing IP addresses, browser user-agent strings, HTTP request paths, and timestamps. These logs are retained by Cloudflare for security, performance, and bot-mitigation purposes and are governed by Cloudflare's Privacy Policy. Apart from the anonymous visit statistics described above, we do not export, analyse or further process these logs ourselves.

3. Purpose and legal basis

Purpose Legal basis (GDPR Art. 6)
Responding to your enquiry Legitimate interest (Art. 6(1)(f))
Entering into or performing a contract Performance of a contract (Art. 6(1)(b))
Complying with legal obligations (e.g. tax records) Legal obligation (Art. 6(1)(c))
Anonymous visit statistics to improve the website Legitimate interest (Art. 6(1)(f)). Our interest is understanding which content is useful; because no identifiers are stored, the impact on your privacy is minimal.

4. Data sharing

We do not sell your data. We may share personal data with:

  • Hosting provider — Cloudflare, Inc. (to deliver this website). Cloudflare processes data under its Privacy Policy and is certified under the EU-U.S. Data Privacy Framework. Cloudflare also stores the anonymous visit statistics on our behalf, as our processor.
  • Email provider — Google LLC (Gmail) — contact form submissions are forwarded via Cloudflare Email Routing to our Gmail inbox so that we can respond to you. Google may process your name, email address, and message content as part of this delivery. Google LLC is certified under the EU–US Data Privacy Framework. See the Google Privacy Policy.

5. International data transfers

Cloudflare, Inc. and Google LLC are headquartered in the United States. When your personal data is processed by these providers it may be transferred to and stored in the US. Such transfers are safeguarded by:

  • The EU–US Data Privacy Framework — both Cloudflare and Google are certified DPF participants
  • Standard Contractual Clauses (SCCs) as adopted by the European Commission (where additionally applicable)

You can verify Cloudflare's DPF certification at dataprivacyframework.gov.

6. Data retention

We retain your contact details and correspondence for as long as necessary to handle your enquiry or maintain our business relationship. Financial records are kept for the legally required period (7 years under Dutch tax law). After these periods, data is deleted.

Anonymous visit statistics are kept by Cloudflare for three months and then deleted automatically.

7. Your rights

Under the GDPR you have the right to:

  • Access — request a copy of your personal data
  • Rectification — correct inaccurate data
  • Erasure — request deletion of your data
  • Restriction — limit how we process your data
  • Data portability — receive your data in a machine-readable format
  • Object — object to processing based on legitimate interest. If your browser sends a Global Privacy Control or Do Not Track signal, your visits are automatically left out of our visit statistics.

To exercise any of these rights, email us at contact@elanova.ai. We will respond within 30 days.

You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): autoriteitpersoonsgegevens.nl.

8. Cookies

This website does not use cookies for analytics or tracking. Our visit statistics are cookieless (see section 2). A strictly-necessary security cookie may be set by our hosting provider (Cloudflare). See our Cookie Policy for details.

9. Security

We take appropriate technical and organisational measures to protect your personal data, including HTTPS encryption, security headers, and access controls.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top indicates the most recent revision.