Privacy Policy
Last updated: 10 May 2025
1. Who are we?
SpineTech
Braspenninglaan 10
5237 NK 's-Hertogenbosch
The Netherlands
Email: [email protected]
SpineTech is the data controller for the personal data collected through this website.
2. What data do we collect?
We only collect data you provide to us directly:
- Contact form — name, email address, company name and the content of your message.
- Knowledge base sign-up — business email address.
- Analytical cookies — anonymised visitor statistics (no personal data).
We do not collect special categories of personal data (such as health data or financial account numbers).
3. Why do we process your data?
| Purpose | Legal basis |
|---|---|
| Responding to your enquiry or message | Legitimate interest / performance of contract |
| Sending the free knowledge base | Consent |
| Improving our website and services | Legitimate interest |
| Compliance with legal obligations | Legal obligation |
4. How long do we retain your data?
- Contact form messages — up to 2 years after the enquiry is resolved.
- Knowledge base subscriptions — for as long as you remain subscribed; deleted within 30 days after unsubscribing.
- Legally required records — up to 7 years.
5. Do we share your data?
SpineTech never sells your data to third parties. We work with the following processors, with whom we have a data processing agreement:
- Email hosting and communication services (European infrastructure)
- Analytics tools (anonymised data)
All data is stored on European servers. No data is transferred outside the EEA unless legally required.
6. Your rights (GDPR)
Under the General Data Protection Regulation (GDPR) you have the following rights:
- Access — you can request which personal data we hold about you.
- Rectification — you can request correction of inaccurate data.
- Erasure — you can request deletion of your data ('right to be forgotten').
- Restriction — you can request restriction of processing in certain situations.
- Objection — you can object to processing based on legitimate interest.
- Data portability — you can request your data in a machine-readable format.
- Withdrawal of consent — where processing is based on consent, you may withdraw it at any time.
Send your request to [email protected]. We will respond within 30 days.
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
7. Cookies
We use only functional and analytical cookies. Analytical cookies are processed anonymously and do not require consent. We do not use third-party tracking or advertising cookies.
8. Security
SpineTech implements appropriate technical and organisational measures to protect your personal data against loss, misuse or unauthorised access. Our systems run on European infrastructure with encrypted connections (HTTPS).
9. Changes
We reserve the right to update this privacy policy. Changes will be published on this page with an updated date. In the event of significant changes, active knowledge base subscribers will receive an email notification.
10. Contact
Questions about this privacy policy? Contact us at [email protected] or via the contact form.