Full Privacy Statement
Last updated: May 2026
1. Data Controller
The controller responsible for processing your personal data is:
2Scale Alliances
[PLACEHOLDER — Street address]
[PLACEHOLDER — Postcode, City], Netherlands
Chamber of Commerce (KvK): [PLACEHOLDER]
VAT: [PLACEHOLDER]
privacy@2scalealliances.com
2. What data we collect
2.1 Client & prospect relationship management
Categories: name, business email address, phone number, job title, organisation, LinkedIn profile, conversation notes.
2.2 Alliance Check (intake tool)
Categories: name, business email address, phone number, answers to intake questions, AI-generated summary.
2.3 Newsletter
Categories: business email address, first name, language preference.
3. Who we share your data with
We only engage third-party processors where necessary for the services described above. All processors have a Data Processing Agreement (DPA) in place. For transfers outside the EU/EEA, we rely on the EU-U.S. Data Privacy Framework or Standard Contractual Clauses (SCCs, Art. 46 GDPR).
(Descriptions in Dutch — original language of this register)
| Party | Service | Country | Outside EU? | Transfer basis |
|---|---|---|---|---|
| Anthropic PBC | AI-Advisor in de Alliance Check (vraag-en-antwoord-flow) | Verenigde Staten | Yes | EU-U.S. Data Privacy Framework / SCCs (Art. 46 GDPR) |
| Cloud86 B.V. | SMTP-relay voor uitgaande mail (digest, password-reset) | Nederland | No | Within EU/EEA |
| GitHub Inc. | Versiebeheer (private repository) — alleen code, geen klantdata | Verenigde Staten (Microsoft) | Yes | EU-U.S. Data Privacy Framework / SCCs (Art. 46 GDPR) |
| MailerLite | Newsletter-platform — versturen + abonnee-beheer | Litouwen (EU) | No | Within EU/EEA |
| Synology Inc. | Self-hosted NAS-hardware (DSM, Docker-runtime) | Taiwan (hardware) / Nederland (deployment-locatie) | No | Within EU/EEA |
| Vercel Inc. | Hosting van de publieke 2SA-website + Alliance Check-formulier | Verenigde Staten | Yes | EU-U.S. Data Privacy Framework / SCCs (Art. 46 GDPR) |
4. Retention periods
- Client data: duration of the relationship + 5 years.
- Unprocessed leads: 12 months from last contact.
- Newsletter subscribers: until unsubscribe + 6 months.
- Invoice data: 7 years (statutory fiscal retention obligation).
5. Your rights
Under the GDPR you have the right to: access, rectification, erasure, restriction of processing, data portability, and the right to object. Send your request to privacy@2scalealliances.com. We will respond within one month. Please include a copy of a valid identity document so we can verify your identity.
6. Complaints
If you believe we have not handled your data correctly, you have the right to lodge a complaint with a supervisory authority. For EU/Netherlands residents: Autoriteit Persoonsgegevens (Tel. 070-8888 500). For UK residents: Information Commissioner's Office (ICO).
7. Changes
We may update this privacy statement from time to time. Last updated: May 2026.