Privacy Policy

2. Information we collect

We collect:

• Data you provide: name, company, email, phone, job title, and anything else you share via contact or booking forms or direct email.
• Technical data: IP address, user-agent, referrer, and standard server logs (via Cloudflare) needed to serve and secure the site.
• Usage data (with your consent): pages viewed, interactions, and campaign attribution collected through Google Tag Manager and the analytics / marketing tags loaded inside it.
• B2B visitor identification and form enrichment (with your consent): RB2B may associate your visit with business contact information (for example name, role, company) derived from your IP, and Apollo.io may enrich forms or tie activity to business profiles, only if you have granted marketing consent.

3. Purposes and legal bases

• Respond to your enquiry — performance of a contract or pre-contract steps (GDPR Art. 6(1)(b)).
• Operate and secure the site (including hosting, caching, and abuse prevention on Cloudflare) — our legitimate interest in running a safe, functional website (Art. 6(1)(f)).
• Measure site usage via analytics tags loaded through Google Tag Manager — your consent (Art. 6(1)(a)) and Article 11.7a of the Dutch Telecommunicatiewet.
• Marketing and B2B outreach (RB2B, Apollo.io, advertising pixels) — your consent (Art. 6(1)(a)) and Article 11.7a.
• Comply with legal obligations — as required by law.

You can withdraw consent at any time from the "Cookie settings" link in the footer or by clicking here. Withdrawal does not affect processing that has already taken place.

4. Cookies and similar technologies

We use strictly necessary cookies to run the site (including a consent cookie to remember your choice). Analytics and marketing cookies only run after you opt in. A full list — names, providers, purposes, categories, and lifetimes — is maintained on the Cookie Policy page.

We also load Google Tag Manager with Google Consent Mode v2 defaults set to "denied"; tags inside the container only execute for the consent categories you have granted.

5. Processors and third parties

We share data only with the processors listed below, each under a data processing agreement:

• Cloudflare, Inc. — hosting, CDN, DNS, DDoS protection, edge logs. Necessary for operating the site.
• Google Ireland Ltd. (Google Tag Manager) — tag orchestration and, via tags we configure inside it, analytics and advertising measurement. Consent required for analytics/marketing tags.
• RB2B, Inc. — B2B visitor identification. Consent required (marketing category).
• Apollo.io — inbound form enrichment and related marketing tools on our site. Consent required (marketing category).
• Cal.com, Inc. — meeting booking embedded on the contact page; loaded only if you interact with the scheduler.

Some of these providers are based outside the EEA. Transfers rely on the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, supplementary measures.

We do not sell personal data.

6. Retention

• Enquiry content — kept for the duration of the relationship plus a reasonable follow-up window, then deleted or archived in line with Dutch commercial-law obligations.
• Server / edge logs — short rolling windows as configured by our processors (typically days to weeks).
• Consent record — kept as long as your preferences remain valid (stored in a first-party cookie and on your device).
• Analytics / marketing data — retained per the provider's configured lifetime; see the Cookie Policy table.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, or object to processing of your personal data, to data portability, and to withdraw consent as easily as you gave it. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). To exercise any of these rights, email hello@aster.pro.

8. Changes to this policy

We may update this policy from time to time. Material changes will be signalled on this page with a new "Last updated" date; if the changes affect cookies or processors, we will re-request consent.