Privacy Policy

1. Who we are

KotyTech is operated by:

For privacy-related questions, you can contact KotyTech at: mkotlar@kotytech.co

2. What personal data we collect

KotyTech currently collects personal data only through the Start an MVP form on the website.

The form may collect the following information:

• Name
• Email address
• Company name
• Project type
• Project description
• Budget range
• Timeline
• Technical requirements
• Message or additional project information

KotyTech does not currently collect through the website:

• Phone numbers
• Home addresses
• File uploads
• User account data
• Payment details
• Newsletter subscriptions
• Website comments

Technical/security logs may include technical data such as IP address, browser type, request time, visited pages, and security events.

3. Why we use your personal data

KotyTech uses your personal data for the following purposes:

• To review your MVP/project request
• To contact you about your project
• To prepare a possible offer or proposal
• To answer your questions
• To keep the website secure and working properly
• To maintain business administration if you become a client

4. Legal basis for processing

KotyTech processes personal data based on one or more of the following legal bases:

• Pre-contractual steps: when you submit a project request and KotyTech reviews it before a possible agreement.
• Legitimate interest: to respond to business inquiries, protect the website, and maintain normal business communication.
• Legal obligation: for invoices, tax records, and administration where required by Dutch law.

5. How your data is stored

MVP form submissions are sent to KotyTech by email.

KotyTech currently does not store MVP form submissions in a website database.

Services that may be involved in processing or delivering website, email, or technical data include:

• Hetzner: hosting/server infrastructure
• Google Workspace / Gmail: email communication
• Resend: transactional email delivery
• GoDaddy: domain-related services
• Cloudflare: DNS, security, and traffic protection
• GitHub: private code repository and deployment-related project work

KotyTech uses these services to operate the website, receive project requests, send/receive email, and protect the website.

6. International processing

KotyTech is based in the Netherlands. Some service providers used by KotyTech may be based outside the Netherlands or outside the European Economic Area, or may use infrastructure in multiple regions.

Where applicable, KotyTech relies on the safeguards provided by those service providers, such as contractual protections and data transfer mechanisms required under privacy law.

7. Cookies and tracking

KotyTech does not use:

• Google Analytics
• Google Tag Manager
• Meta/Facebook Pixel
• Hotjar
• TikTok Pixel
• LinkedIn Insight Tag
• Marketing cookies
• Tracking cookies
• Newsletter tracking
• Advertising cookies

KotyTech may use strictly necessary technical features or security-related technologies to keep the website working and secure.

Because KotyTech does not use analytics, advertising, or tracking cookies, the website does not currently require a cookie consent banner.

8. AI tools

Before an MVP agreement is signed, KotyTech does not use third-party AI tools to process submitted MVP form data.

After an MVP agreement is signed, any use of AI tools for project work, planning, development, or automation will be discussed as part of the project agreement where relevant.

9. How long we keep personal data

KotyTech keeps personal data only as long as needed for the purpose for which it was collected, unless a longer retention period is legally required.

Current retention periods:

10. Security

KotyTech takes reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction.

These measures may include:

• Secure hosting infrastructure
• HTTPS where applicable
• Limited access to business email and systems
• Use of reputable service providers
• Security monitoring and technical logs
• Private code repositories
• Access controls for administrative systems

No method of transmission or storage is completely secure.

11. Sharing personal data

KotyTech does not sell personal data.

KotyTech only shares personal data when necessary for:

• Operating the website
• Receiving and replying to project requests
• Email delivery
• Hosting and security
• Legal, tax, or administrative obligations
• Providing agreed services after a project agreement is signed

Service providers may only process data as needed to provide their services.

12. Your privacy rights

Under the GDPR, you have rights regarding your personal data, including:

• The right to access your personal data
• The right to correct inaccurate data
• The right to request deletion of your data
• The right to restrict processing
• The right to object to processing
• The right to data portability, where applicable
• The right to withdraw consent, where processing is based on consent

To use your rights, contact KotyTech at: mkotlar@kotytech.co

KotyTech may ask you to verify your identity before handling your request.

13. Complaints

If you believe KotyTech has not handled your personal data properly, please contact: mkotlar@kotytech.co

You also have the right to file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

14. Changes to this Privacy Policy

KotyTech may update this Privacy Policy from time to time. The latest version will always be available on the website.