Privacy statement
Which data we process, why, and what your rights are.
Who we are
This privacy statement belongs to Mova XL, trading as Viva67, Stadhouderslaan 12D, 6171 KL Stein, the Netherlands (not a visiting address). Mova XL is registered with the Dutch Chamber of Commerce under number 42106567. We are responsible for the processing of personal data as described in this statement.
Do you have a question about your data or do you want to exercise one of your rights? Email info@viva67.com or call +31 858002423 on working days between 10:00 and 17:00.
This statement is about the data we process ourselves: of visitors to this website, of people who use the chat or the form, and of our clients. When we process data of our clients' customers, we do so on their behalf. Our data processing agreement applies to that.
Which data we process
We only process data that is necessary. Depending on how you are in contact with us, this concerns:
- Contact details: your name, email address, phone number and, if you mention it, the name of your company.
- Messages: what you write in the contact form or the chat, and our answers.
- Appointment details: the date and time of an introduction or the free automation check.
- Approximate location: the city and country where you roughly are, derived from your IP address. We do not see your exact address.
- Technical data: your IP address, the type of browser and the time of your visit, which our hosting provider needs to show and secure the website.
- Client data: if you are a client, also your invoicing details, the arrangements we have made and our correspondence.
We do not ask for special categories of personal data, such as data about health or religion. Please do not share these in the chat or the form either.
What we use your data for
We use your data for these purposes, each with a legal basis from the General Data Protection Regulation (GDPR):
- Answering your question that you ask via the chat, the form, email or phone. Legal basis: the steps needed before we enter into an agreement, or our legitimate interest in responding to your question.
- Following up your request, for example with a reminder if you have not yet responded to a proposal. Legal basis: our legitimate interest. If you no longer want messages, we stop immediately.
- Scheduling an appointment for an introduction or the free automation check. Legal basis: the steps towards an agreement.
- Providing and invoicing our services if you are a client. Legal basis: the performance of the agreement.
- Informing clients about changes, such as a price change, including via a newsletter. Legal basis: the agreement and our legitimate interest. You can always unsubscribe from the newsletter.
- Keeping our accounts. Legal basis: a legal obligation, such as the tax retention obligation.
- Securing the website and our systems against misuse. Legal basis: our legitimate interest.
We do not sell your data, and we do not use it for advertising or to train AI models.
The AI chat
The chat on this website is answered by an AI assistant, based on the language model Claude by Anthropic, which we use via OpenRouter. This is also shown in the chat itself, so that you know you are talking to AI. An employee of Viva67 can read along and take over the conversation.
Your messages are sent to the AI model to draft an answer, and are stored in our CRM so that we can follow up your question. The AI model does not make decisions about you. More about how we use AI responsibly can be found on the page Security and AI.
Who receives your data
For our services we work with a number of carefully selected parties. They only process your data for us and according to our arrangements:
- Vercel (United States): hosting of our CRM, the chat and the processing of the form.
- Google Firebase and Cloud Firestore: the database and login, with storage in the Netherlands (region europe-west4).
- OpenRouter (United States), with the AI model Claude by Anthropic (United States): drafting answers in the chat and messages.
- Resend: sending emails, via the EU region (Ireland).
- Upstash (QStash): scheduling follow-up messages, in the EU region (Frankfurt).
- Hostinger: our mailbox.
- ipapi.co: converting an IP address into a city and country.
- GitLab: hosting of this website.
- VOIPZeker: our business telephony, if you call us.
We may also share data with our accountant, or if the law requires us to, for example at the request of the Dutch Tax Administration.
Fonts
The fonts of this website are stored on our own website. No data is sent to Google or other font services for this when you visit.
Data outside Europe
A few of these parties are based in the United States. If your data goes there, this only happens on the basis of the EU-US Data Privacy Framework (if the party is certified under it) or the standard contractual clauses of the European Commission. Where possible, we choose a European region, such as for our database, email and follow-up messages.
How long we keep your data
We do not keep your data longer than necessary:
- Questions, chat conversations and requests without follow-up: up to 24 months after the last contact.
- Client data: as long as you are a client and for 24 months after that, so that we can answer questions about the cooperation.
- Invoices and accounts: 7 years, because Dutch tax law requires this.
- Technical data at the hosting provider: as briefly as the hosting provider keeps it.
After that we delete the data, or make it anonymous.
Cookies
This website does not place any cookies itself and does not use analytics or advertising software. What does happen technically when you visit the site is explained in our cookie statement.
How we secure your data
We take appropriate measures to protect your data. The website, the chat and the CRM only work via an encrypted connection (HTTPS). The database is stored encrypted, and the CRM can only be reached with a personal account. More about this can be found on the page Security and AI.
Your rights
You have the following rights regarding your personal data:
- Access: you may know which data we hold about you.
- Rectification: if your data is incorrect, we correct it.
- Erasure: you can ask us to delete your data, unless we are legally required to keep it.
- Restriction: you can ask us to temporarily restrict the use of your data.
- Portability: you can receive your data in a common file format.
- Objection: you can object to the use of your data based on our legitimate interest, such as follow-up messages.
- Withdrawing consent: if you have given consent for something, you can always withdraw it.
Send your request to info@viva67.com. We respond within one month. To protect your data, we may ask you to prove who you are.
Filing a complaint
If you are not satisfied with how we handle your data, please let us know first. We are happy to look for a solution together. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Children
Our services are intended for businesses and organisations. We do not knowingly process data of children under the age of 16. If you think this has happened anyway, please contact us and we will delete that data.
Changes to this statement
We update this privacy statement when our services or the rules change, for example when we start using a new party. The current version is always on this page, with the date at the bottom. In the case of important changes, we inform our clients in advance.