Privacy Policy
How we collect, use, and protect your personal data.
Effective Date: March 2026
This Privacy Policy explains how AmsterdamColocation.com collects, uses, and protects your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch law.
1. Data Controller
AmsterdamColocation.com is the data controller for personal data collected through this website and our services.
- Email: legal@amsterdamcolocation.com
2. Data We Collect
We collect personal data in the following situations:
a) Website visitors
- Technical data: IP address, browser type, operating system, pages visited, referring URL
- Analytics data: Collected via Matomo (self-hosted) and Google Analytics (via Google Tag Manager) — only after you consent via our cookie banner
- reCAPTCHA data: IP address and interaction data sent to Google for bot detection when using our contact form
b) Contact form submissions
- Name, email address, phone number, company name, message content, product interest
c) Customers (service users)
- Contact information: name, email, phone, company name
- Account information: login credentials, billing details
- Communication data: support tickets, emails, correspondence
- Service usage data: power consumption, bandwidth usage, access logs
3. Purpose, Legal Basis & Retention
| Processing Activity | Legal Basis (GDPR) | Retention |
|---|---|---|
| Website analytics (Matomo, GA) | Consent (Art. 6(1)(a)) | 26 months (Matomo), 14 months (GA) |
| Contact form processing | Legitimate interest (Art. 6(1)(f)) | 1 year after last contact |
| reCAPTCHA bot protection | Legitimate interest (Art. 6(1)(f)) | Per Google's retention policy |
| Service delivery & billing | Contract performance (Art. 6(1)(b)) | Duration of contract + 7 years (Dutch fiscal law) |
| Legal compliance (KYC, tax) | Legal obligation (Art. 6(1)(c)) | As required by law (typically 7 years) |
| Security & abuse prevention | Legitimate interest (Art. 6(1)(f)) | 6 months |
4. Third Parties & Data Processors
We share personal data with the following categories of processors:
| Processor | Purpose | Location |
|---|---|---|
| Matomo (self-hosted) | Website analytics | Netherlands (our own servers) |
| Google LLC (Analytics, GTM, reCAPTCHA) | Analytics, tag management, spam protection | United States* |
| Payment processor | Invoice payment processing | EU |
| NorthC (datacenter operator) | Physical facility access management | Netherlands |
* Google processes data under the EU-US Data Privacy Framework. We have assessed that appropriate safeguards are in place for international transfers in accordance with GDPR Chapter V.
We ensure that all processors have signed a Data Processing Agreement (DPA) in accordance with GDPR Article 28.
5. International Data Transfers
Matomo analytics data is processed exclusively on our self-hosted European servers and does not leave the EU. Google services (Analytics, reCAPTCHA, GTM) may process data in the United States under the EU-US Data Privacy Framework adequacy decision. No other international transfers take place.
6. Your Rights
Under the GDPR, you have the following rights:
- Access (Art. 15): Request a copy of your personal data
- Rectification (Art. 16): Correct inaccurate personal data
- Erasure (Art. 17): Request deletion of your personal data
- Restriction (Art. 18): Restrict processing of your data
- Portability (Art. 20): Receive your data in a structured, machine-readable format
- Object (Art. 21): Object to processing based on legitimate interests
- Withdraw consent: Where processing is based on consent, you may withdraw it at any time (e.g., via the cookie settings in our footer)
To exercise these rights, contact us at legal@amsterdamcolocation.com. We will respond within 30 days.
7. Right to Complain
If you believe we are not handling your personal data correctly, you have the right to lodge a complaint with the Dutch Data Protection Authority:
Autoriteit Persoonsgegevens
Postbus 93374, 2509 AJ Den Haag
autoriteitpersoonsgegevens.nl
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including encrypted connections (TLS), access controls, regular security updates, and physical security at our datacenter facility.
9. Children
Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children.
10. Changes
We may update this Privacy Policy from time to time. Material changes will be communicated via our website or email. The effective date at the top indicates when this policy was last revised.
AmsterdamColocation.com is registered in the Netherlands.