Privacy statement

Who we are

SEBA Connect B.V. (Koningsweg 40-05, 3762 EC Soest, Chamber of Commerce (KvK) 42141910) is responsible for the processing of personal data as described in this statement. Questions about privacy? Email info@sebaconnect.nl.

What this website measures

On every visit, Cloudflare Web Analytics counts how often pages are viewed and how fast they load. For this, your browser loads a small script from Cloudflare. That script stores nothing in your browser, does not recognise you on a later visit and does not follow you across other websites. Cloudflare sees your IP address, as on every visit, but does not use it to recognise you. We only see totals: visits per page, the website you came from, the country and the type of device and browser. We do not ask for consent for this. The legal basis is our legitimate interest (Article 6(1)(f) GDPR): knowing which pages are read and whether the site is fast enough, with as little data as possible.

In addition, we measure with Google Tag Manager from the moment you arrive, for statistics and for marketing. A banner tells you so on your first visit. If you do not want that, you switch it off there with Reject, or per type separately. We then load nothing more for it and do not build a profile of you.

For this, your browser loads Google Tag Manager from Google Ireland Limited. Through Tag Manager we place measurement code on the site, for example to see which pages are visited and which ads generate enquiries. In doing so, Google receives your IP address and browser data and, depending on the measurement code, data about your visit. Google may process data outside the European Union; for this purpose Google participates in the EU-US Data Privacy Framework. Exactly which cookies are placed, by whom and for how long, is set out in the cookie statement.

While statistics are on, Tag Manager also loads Microsoft Clarity from Microsoft Ireland Operations Limited. Clarity records how visitors use the pages, such as clicks, scrolling and mouse movements, and turns that into recordings and heatmaps, so we can see where the site is unclear. Microsoft receives your IP address and browser data and may process data outside the European Union; for this, Microsoft participates in the EU-US Data Privacy Framework.

We load Tag Manager and the Google tag via our own domain (www.sebaconnect.nl/3rnz/). On that route we do not pass your cookies or your IP address on to Google, only your country and region. Part of the measurement does go directly from your browser to Google.

The legal basis is our legitimate interest (Article 6(1)(f) GDPR): knowing how the site is used and which ads bring in enquiries. You can always object to this: with Reject in the banner, or with Cookie settings at the bottom of every page. After that, measurement stops for whatever you switched off.

The website runs on Cloudflare. On every visit, Cloudflare processes technical data, such as your IP address, the time and the page requested, to keep the site fast, secure and available. That is our legitimate interest (Article 6(1)(f) GDPR): without that data a website cannot be secured. We do not use it to identify or track visitors.

If you use the email check, your browser requests the DNS records of the domain you enter directly from the Cloudflare DNS service. Cloudflare sees your IP address and that domain name. We do not see the domain name, unless you send us the result yourself.

If you contact us

Through the contact form you send us your name and email address and, if you fill them in, also your phone number, company name, your contact preference and your message. The form sends that data over a secure connection to our own enquiry server (reachable via form.dulger.nl, through Cloudflare), which runs on Microsoft Azure. That is where we record your enquiry, and we also receive it as an email in our mailbox info@sebaconnect.nl, in our Microsoft 365 environment. If sending fails, we offer you the option of sending your enquiry by email; that email also arrives in our Microsoft 365 environment.

We use this data only to answer your question and to arrange any follow-up (such as a consultation or a quote). The legal basis is that you ask us to do so, prior to a possible agreement (Article 6(1)(b) GDPR); the checkbox in the form confirms that you are aware of this. We need your name, email address and question in order to reply; the other fields are voluntary. We keep correspondence for as long as necessary for handling it and for any collaboration.

If you use the AI assistant

On this website you can ask an AI assistant questions. What you type in the window, together with the conversation so far, goes over a secure connection to the assistant on our website (a function at Cloudflare) and from there to Anthropic, the maker of the AI model, to create the answer. We remove email addresses, phone numbers and account numbers before sending. Please avoid sharing personal data in the window.

We do not store the conversation. It stays only in your browser, in this tab, and is gone when you close the tab or clear the conversation. For the assistant we only keep counts, without content: how many questions were asked and how much text the model read and wrote, for the costs. According to its terms, Anthropic does not use this data to train models and deletes it within 30 days by default, unless it is needed for longer to prevent misuse or because the law requires it.

If you pass your question on to a member of our team, your questions appear in the request form. You see and edit them first; only when you send them do we receive them, and then what is stated above about contacting us applies. The legal basis for the assistant is our legitimate interest in answering questions about our services quickly (Article 6(1)(f) GDPR); you only use it when you ask a question yourself.

If you become a client

To provide our services, we process the data needed for that purpose: contact and billing details, and the data belonging to the services you use (for example domain details or user accounts in your Microsoft 365 environment). In doing so, the following applies: we process no more than necessary, secure access carefully and make agreements about the processing in the contract, including a data processing agreement where applicable. The legal basis is the performance of the contract (Article 6(1)(b) GDPR). We keep our records, including invoices, for seven years because the law requires it (tax retention obligation; Article 6(1)(c) GDPR).

Sharing with third parties

We do not sell data and only share it with parties we need, or if the law requires it. These are:

• Cloudflare: hosting and security of this website, the connection to the contact form and counting visits (Web Analytics);
• Microsoft: email and Microsoft 365, the server (Azure) on which our enquiry and client system runs, and Clarity, as long as you do not switch statistics off;
• Google: only the measurement on this site, as long as you do not switch it off (see above);
• Anthropic: the AI model behind the assistant on this website, only for what you type in the window yourself;
• for clients: the suppliers of the services you use, such as a registrar for your domain name.

We conclude data processing agreements with parties that process personal data on our behalf. Cloudflare, Microsoft and Google are American companies or have an American parent company, so data may be processed outside the European Union. This takes place on the basis of the EU-US Data Privacy Framework, in which these companies participate, and the standard contractual clauses of the European Commission.

Anthropic is an American company. For the AI assistant, the transfer is based on the European Commission's standard contractual clauses in Anthropic's data processing agreement.

Your rights

You have the right to access, rectify and erase your personal data, to restrict processing and to data portability (your data in a common format). You can object to processing based on our legitimate interest, and withdraw consent you have given at any time; whatever lawfully happened before that remains lawful. To do so, email info@sebaconnect.nl; we respond within one month. If we cannot resolve the matter together, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

We do not make decisions about you that are based solely on automated processing.

Changes

If anything changes in how this website or our services handle data (for example if new measurement code is added), we will update this statement before that change takes effect.

Last updated: 23 October 2026.