Effective date: 4 August 2026

1. Who is responsible for your personal data?

The controller responsible for the processing of personal data described in this Privacy Policy is:

unamas.io
Dutch sole proprietorship registered in the Netherlands
Chamber of Commerce number: 96815671
VAT identification number: NL005231920B85
Email: info@unamas.io
Website: unamas.io

unamas.io has not appointed a data protection officer because this is not currently legally required for our activities.

2. Scope of this Privacy Policy

This Privacy Policy applies to personal data processed in connection with:

• visits to the unamas.io website

• contact forms, emails, calls and meetings

• enquiries, quotations and prospective projects

• client projects and ongoing services

• suppliers, partners and contractors

• customer relationship management

• relevant business-development and prospective business contacts

3. Personal data we process

3.1 Website usage and technical information

When you visit our website, technical information may be processed, including:

• IP address

• browser and device information

• pages visited

• date and time of access

• technical and security logs

We process this information to provide the website, maintain its security, identify technical problems and protect our systems.

Legal basis: our legitimate interests in operating and securing our website, Article 6(1)(f) GDPR.

3.2 Contact forms, emails, calls and meetings

When you contact us, we may process:

• your name

• email address

• telephone number

• company and professional role

• message content

• meeting and appointment information

• subsequent correspondence

We use this information to respond to your enquiry, organise meetings, prepare proposals and take steps relating to a possible project or contract.

Legal basis: Article 6(1)(b) GDPR where the processing is necessary for pre-contractual steps or a contract, and Article 6(1)(f) GDPR for general business communication.

3.3 Clients, projects and business administration

When we provide services, we may process:

• client and representative contact details

• contracts, proposals and project requirements

• project files and communications

• invoice and payment information

• support and service history

We process this information to deliver our services, manage projects, communicate with clients, invoice our work and meet accounting, tax and other legal obligations.

Legal basis: Article 6(1)(b), Article 6(1)(c) and Article 6(1)(f) GDPR.

3.4 Cookies and analytics

The website may use technically necessary storage or similar technologies required for the website to function.

Optional analytics technologies, including Google Analytics where enabled, are activated only after the user provides consent through the cookie-consent mechanism.

Legal basis for optional analytics: consent under Article 6(1)(a) GDPR. Consent can be withdrawn at any time through the available cookie settings.

3.5 CRM and relevant business contacts

We use a customer relationship management system to organise enquiries, client relationships, communications and relevant business opportunities.

For professional and prospective business contacts, we may process:

• name and professional role

• business email address and telephone number

• company details

• publicly available professional information

• the source and date of the information

• correspondence and meeting notes

• relevant services or business needs

• outreach and relationship status

• objections and do-not-contact records

The purposes are to assess whether our services may be genuinely relevant to a business, manage permitted business communications, document relationships and ensure that people or companies who object are not contacted again.

Legal basis for the processing of professional contact data: our legitimate interests under Article 6(1)(f) GDPR, following an assessment of necessity, proportionality and the reasonable expectations of the person concerned.

This legal basis does not by itself authorise unsolicited electronic marketing. unamas.io only uses email, telephone or other communication channels where the selected channel is permitted under the applicable national rules.

You may object to the processing of your personal data for direct-marketing purposes at any time by emailing info@unamas.io. Once an objection is received, we will stop processing the data for direct marketing and retain only the minimum suppression information required to prevent accidental further contact.

4. Sources of professional contact information

Where personal data was not obtained directly from you, it may originate from:

• your employer’s or business’s website

• official company registers

• public business directories

• publicly available professional profiles

• referrals or introductions

• previous correspondence, meetings or business relationships

We do not purchase indiscriminate consumer mailing lists.

Where required by Article 14 GDPR, we provide the applicable privacy information at the time of first communication or within the legally required period.

5. Who receives personal data?

We do not sell or rent personal data.

Data may be processed by service providers that help us operate our business, including providers for:

• website hosting and website forms, including Framer

• website security and infrastructure, including Cloudflare

• business email and productivity tools, including Google Workspace

• analytics, where consent has been provided

• customer relationship management, including HubSpot

• accounting, administration and project management

• technical support and professional services

These providers may process data only for the agreed purposes and subject to applicable contractual and confidentiality obligations.

Data may also be disclosed where required by law, to protect legal rights or to establish, exercise or defend legal claims.

6. International data transfers

Some service providers may process personal data outside the European Economic Area.

Where applicable, transfers are protected through an adequacy decision, the European Commission’s Standard Contractual Clauses or another legally recognised transfer mechanism.

7. How long we retain personal data

We retain personal data only for as long as it is reasonably necessary for the purpose for which it was collected.

In general:

• enquiry and prospective business-contact information is reviewed and normally deleted or anonymised no later than 24 months after the last meaningful interaction, unless there is an ongoing reason to retain it

• client, contract and project information is retained for the duration of the relationship and afterwards where required for legal, contractual or dispute-related purposes

• financial and tax records are normally retained for at least seven years where required by Dutch law

• when a person or business objects to further contact, we retain only the minimum suppression record needed to respect that request

• technical and analytics data is retained according to the applicable security need and the configured retention settings of the relevant service

8. Your rights

Depending on the circumstances, you have the right to:

• request access to your personal data

• request correction of inaccurate data

• request deletion of your data

• request restriction of processing

• object to processing based on legitimate interests

• object at any time to processing for direct marketing

• withdraw consent at any time where processing is based on consent

• request data portability where applicable

• lodge a complaint with a competent supervisory authority

The supervisory authority responsible for unamas.io is the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Requests can be submitted to info@unamas.io.

We may request reasonable information to verify the identity of the person making a request.

9. Automated decision-making

unamas.io does not use personal data to make decisions based solely on automated processing that produce legal or similarly significant effects.

10. Security

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or misuse.

No system can guarantee absolute security, but we regularly review our tools, access controls and working practices.

11. Changes to this Privacy Policy

We may update this Privacy Policy when our services, tools or legal obligations change.

The current version and effective date will always be published on this website.

12. Contact

For questions, requests or objections concerning personal data, contact:

info@unamas.io