Last updated: January 1, 2026
Personal data is processed via the website https://straops.com/ (including its subpages). StraOps places great value on protecting your privacy and handles personal data in compliance with the General Data Protection Regulation (GDPR) and applicable telecommunications and data privacy laws.
In this Privacy Policy, we explain what personal data we collect, for what purposes, on what legal grounds, and what rights you have regarding your data.
1. Who is the Data Controller?
StraOps is the data controller responsible for processing personal data through this website.
Company details:
- Trade / Company name: StraOps
- Website: https://straops.com/
- Chamber of Commerce (KvK) number: 97557919
- Contact email for privacy matters: info@straops.com
2. Which personal data do we process?
Depending on how you interact with our website and services, we may process the following categories of personal data:
- Technical data and website usage:
- IP address (anonymized or pseudonymized where applicable);
- Browser and device information (user agent, screen resolution, operating system);
- Visited pages/URLs, date, time stamp, and referring website (referrer);
- Cookie identifiers and consent preferences.
- Communication and contact details:
- First and last name;
- Email address;
- Phone number (if provided);
- Company name and job title (if applicable);
- Content of your message, inquiry, or quote request.
- Customer and account details (if applicable):
- Account login credentials (securely hashed);
- Billing and payment details;
- Transaction history and usage of our services.
3. Purposes and legal bases for processing
We process personal data strictly in accordance with the legal grounds set out in Article 6 of the GDPR:
| Purpose | Data categories | GDPR legal basis (Art. 6(1) GDPR) |
|---|---|---|
| Technical operation and security of the website and server (server logs, DDoS/abuse prevention). | IP address, browser data, timestamps, page visits. | Legitimate interest (Art. 6(1)(f)): ensuring the integrity and security of our IT infrastructure. |
| Handling inquiries and contact requests submitted via forms or email. | Name, email address, phone number, message content. | Performance of a contract / pre-contractual steps (Art. 6(1)(b)) or Legitimate interest (Art. 6(1)(f)). |
| Delivering our services and account management. | Account credentials, billing details, contact info. | Performance of a contract (Art. 6(1)(b)). |
| Analytical insights to improve website performance (privacy-friendly or consent-based). | Anonymized/pseudonymized browsing data. | Consent (Art. 6(1)(a)) or Legitimate interest (Art. 6(1)(f), if strictly privacy-friendly and without tracking). |
| Marketing, newsletters, and non-essential cookies/pixels. | Email address, advertising IDs, interaction data. | Explicit consent (Art. 6(1)(a)). |
| Compliance with legal obligations (e.g., statutory tax/bookkeeping retention rules). | Invoices, transaction and accounting records. | Legal obligation (Art. 6(1)(c)). |
4. Cookies and tracking technologies
StraOps uses cookies and similar technologies (such as HTML5 local storage). When you first visit our website, you are presented with a cookie banner (Consent Management Platform) allowing you to grant or withhold consent per category.
- Strictly Necessary / Functional cookies: Essential for the basic functioning of the website (e.g., PHP session cookies, security features, remembering consent preferences). These are always active based on our legitimate interest.
- Analytical cookies: Used to measure how visitors use our website. Where these cookies have minimal to no privacy impact, data is anonymized; otherwise, we ask for your explicit consent in advance.
- Marketing / Tracking cookies: Used for retargeting, personalized advertising, or social media integration. These are only deployed after you have given your active, affirmative consent.
You can modify or withdraw your cookie preferences at any time via your browser settings.
5. Retention periods
We do not store your personal data longer than is strictly necessary to realize the purposes for which it was collected:
- Web server log files: Stored for a maximum of 14 days, unless a security incident requires further investigation.
- Inquiries / emails: Retained for up to 6 months after the resolution of your inquiry, unless an ongoing business relationship arises.
- Customer and financial records: Retained for 7 years in accordance with statutory tax and accounting retention requirements.
- Cookie consent logs: Retained for a maximum of 6 months, after which consent will be requested again.
6. Sharing data with third parties (Processors)
StraOps does not sell your personal data to third parties for commercial purposes. Data is only shared with carefully selected service providers (processors) necessary for delivering our services:
- Hosting and cloud infrastructure providers: For hosting the web server, website files, and databases;
- Email and communication providers: For sending and receiving electronic messages;
- Accounting and billing software: For invoicing and administrative compliance;
- Supervisory authorities or law enforcement: Strictly when required by law or a valid court order.
We enter into a Data Processing Agreement (DPA) compliant with Article 28 GDPR with every party processing data on our behalf, ensuring strict confidentiality and robust security measures.
7. Transfers outside the European Economic Area (EEA)
We strive to process your data primarily within the European Economic Area (EEA). If data is transferred to service providers outside the EEA (such as cloud services hosted in the United States), we ensure an adequate level of data protection by:
- Working exclusively with organizations certified under the EU-US Data Privacy Framework; or
- Utilizing the European Commission’s current Standard Contractual Clauses (SCCs), supplemented where necessary by technical safeguards (such as end-to-end encryption).
8. Automated decision-making and AI systems
StraOps does not engage in automated individual decision-making or profiling that produces legal effects concerning you or similarly significantly affects you (as described in Article 22 GDPR).
9. Data security
StraOps implements appropriate technical and organizational measures to protect personal data against loss, unauthorized access, alteration, or unlawful processing. These measures include:
- Enforcing TLS/SSL encryption (HTTPS) across all web traffic;
- Securing PHP and database environments with regular patch and software maintenance;
- Role-based access controls (need-to-know principle) and two-factor authentication (2FA) for administrative access;
- Regular data backups and routine vulnerability monitoring.
10. Your privacy rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access: You have the right to request a copy of the personal data we hold about you.
- Right to rectification: You may ask us to correct or complete inaccurate or outdated information.
- Right to erasure (“right to be forgotten”): You can request the deletion of your personal data, provided there are no overriding legal obligations to retain it.
- Right to restriction of processing: You can request that we temporarily freeze the processing of your data under certain circumstances.
- Right to data portability: You have the right to receive your data in a structured, commonly used, and machine-readable format or have it transmitted directly to another controller.
- Right to object: You have the right to object to processing based on our legitimate interests or for direct marketing purposes.
- Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.
To exercise any of these rights, please contact us at info@straops.com. We will respond to your request as soon as possible, and in any event within one month.
11. Lodging a complaint with a supervisory authority
If you have concerns about how we handle your personal data, please contact us so we can resolve the matter together. You also have the right to lodge a complaint with a data protection supervisory authority:
- Netherlands: Autoriteit Persoonsgegevens (www.autoriteitpersoonsgegevens.nl)
- Or the competent data protection authority in the EU Member State of your habitual residence or place of work.
12. Changes to this Privacy Policy
StraOps reserves the right to update this Privacy Policy to reflect changes in our services, technological advancements, or applicable legal requirements. The most current version will always be available on our website. We recommend checking this page periodically.