Privacy policy.

Last updated: 5 November 2026

1. Who we are

Cirvanta B.V. (“Cirvanta”, “we”) is an engineering consultancy registered in the Netherlands, with an office in Cape Town, South Africa. We are the controller for the personal data described in this policy.

Cirvanta B.V.
Wibautstraat 137 H, Delphi H4.01
1097 DN Amsterdam, the Netherlands
Chamber of Commerce (KvK) number: 75818566
Email: info@cirvanta.nl

2. What personal data we collect

When you fill in a form on our website (the contact form, a capability statement download, or a partner’s contact page), we collect the details you enter:

• name, company and business email address
• phone number (optional)
• the service you are interested in, and any message or project description you add
• which capability statement you downloaded

When you visit our website, our hosting platform processes technical data such as your IP address, browser type and the pages you visit, to deliver and secure the site. If you accept optional cookies, we also record which of our campaign links brought you to the site (see our cookie policy).

Business contacts: we may also hold business contact details that you shared with us directly, for example at a conference or meeting, or that are publicly available in a professional context, such as on LinkedIn.

3. Why we use it, and on what legal basis

• To answer your enquiry and send you what you asked for, such as a capability statement: to take steps at your request, and our legitimate interest in responding to business enquiries.
• To follow up with relevant information about our services: our legitimate interest in developing business relationships. You can object at any time and we will stop.
• To manage our business relationships in our customer relationship management (CRM) system: our legitimate interest.
• To understand which campaigns bring visitors to our site: your consent, given through the cookie banner.
• To comply with legal obligations, such as tax and accounting rules.

4. How long we keep it

Enquiries and document downloads that do not develop into a business opportunity are removed from our CRM after eight weeks without activity, and then deleted. Contact details of clients and other business relationships are kept for as long as needed for the purposes above, and no longer than two years after our last contact, unless we have an ongoing business relationship or a legal obligation to keep them longer. Job applications are deleted four weeks after the recruitment process ends, unless you agree that we may keep them for up to one year.

5. Who we share it with

We do not sell personal data. We share it only with service providers who process it on our behalf, such as Odoo S.A., which hosts our website and CRM, and our email provider, under data processing agreements. Where a provider processes data outside the European Economic Area, we make sure appropriate safeguards are in place, such as the European Commission’s standard contractual clauses.

6. Security

We take appropriate technical and organisational measures to protect personal data against loss and unauthorised access, including access controls and secure (HTTPS) connections.

7. Your rights

You have the right to access, correct or delete your personal data, to restrict or object to its use (including for direct marketing), to data portability, and to withdraw your consent at any time. To exercise these rights, email info@cirvanta.nl. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8. Changes

We may update this policy from time to time. The latest version is always on this page, with the date it was last updated.