Privacy statement

Who we are

XiltriX International B.V. is the controller for the personal data described in this statement. You can reach us at info@xiltrix.com or by telephone on +31 (0)73 521 22 29.

For any question about this statement or about your personal data, write to info@xiltrix.com with "Privacy" in the subject line.

What this statement covers

This statement covers our website, the forms and gated downloads on it, our email correspondence with prospects, customers and partners, and the partner portal.

Monitoring data that customers process in the XiltriX system under a contract is governed by that contract and, where applicable, by a data processing agreement. In that context we act as a processor, not as a controller.

Data we collect

We collect three kinds of data.

• Data you give us: name, business email, organisation, department, role, telephone number, region and the content of your message when you use a contact form, request a meeting, download a gated document or subscribe to updates.
• Data we collect automatically: IP address, device and browser type, language, referring page, pages visited and timestamps. This is standard web log and analytics data.
• Account data: if you use the partner portal, we process your login details and the activity needed to operate and secure the account.

Why we use your data, and on what legal basis

• To answer your question, prepare a meeting or send a document you asked for. Legal basis: performance of a contract or steps taken at your request, or our legitimate interest in responding to business enquiries.
• To provide, secure and improve the website and the portal. Legal basis: our legitimate interest in a reliable and safe service.
• To send occasional updates about laboratory monitoring to business contacts. Legal basis: consent, or legitimate interest where an existing relationship exists. Every message contains an unsubscribe link.
• To measure how the website is used. Legal basis: your consent, given through the cookie banner.
• To comply with legal obligations, for example administrative and tax retention duties. Legal basis: legal obligation.

Cookies and similar technologies

We use cookies and comparable techniques in five categories: necessary, functional, analytics, performance and advertisement. Necessary cookies are always active because the site cannot work without them; they store your consent choice and keep sessions secure.

All other categories stay off until you switch them on. Analytics and performance cookies only load after you accept them. You can change or withdraw your choice at any time through the link below or the "Cookie preferences" link in the footer.

Email and marketing

When you request a document, we send it to the email address you gave us and we may follow up once to ask whether it was useful.

We do not sell or rent contact details, and we do not share them with third parties for their own marketing. You can unsubscribe from any mailing with one click, or by emailing info@xiltrix.com.

Who we share data with

We share personal data only with service providers that help us run the website and our business, and only on our instructions under a data processing agreement. These include hosting and cloud infrastructure, email delivery, analytics, and customer relationship management.

We may also share data where we are legally required to do so, or where it is necessary to establish or defend a legal claim.

International transfers

We prefer providers that process data within the European Economic Area. Where a provider processes data outside the EEA, we rely on an adequacy decision or on the European Commission's standard contractual clauses, with additional safeguards where these are needed.

How long we keep data

• Enquiries and download requests: up to 24 months after the last contact, unless a customer relationship starts.
• Customer and supplier records: for the term of the relationship and the statutory retention periods that follow it.
• Website analytics: up to 14 months.
• Server and security logs: up to 12 months.

How we protect data

We apply technical and organisational measures appropriate to the risk, including encryption in transit, access control on a need-to-know basis, logging, and regular review of our suppliers.

No online service can promise absolute security. If a data breach occurs that is likely to affect your rights, we will notify the supervisory authority and, where required, you.

Your rights

Under the GDPR you can ask us to:

• give you access to the personal data we hold about you;
• correct data that is inaccurate or incomplete;
• erase data where we no longer have a valid reason to keep it;
• restrict or object to processing based on legitimate interest;
• provide your data in a portable format;
• withdraw consent at any time, without affecting processing that already took place.

Send your request to info@xiltrix.com. We answer within one month. You also have the right to lodge a complaint with your national supervisory authority; in the Netherlands this is the Autoriteit Persoonsgegevens.

Children

This website is aimed at professionals. We do not knowingly collect personal data from children under 16.

Changes to this statement

We update this statement when our services or the law change. The date at the top shows when it was last revised. Material changes are announced on this page.

Contact

XiltriX International B.V., info@xiltrix.com, +31 (0)73 521 22 29. Write to us with "Privacy" in the subject line and we will route your question to the right person.