Privacy notice — Softron B.V. — Gig-a-tronic / Gigatron
How Softron B.V. processes personal data for the Gigatron marketing site and the Gig-a-tronic application, including cookies.
This notice explains how Softron B.V. processes personal data in connection with (a) the Gigatron / Gig-a-tronic marketing site and (b) the Gig-a-tronic application. Practices differ by surface.
Effective date: 20 September 2026
1. Controller
Softron B.V. (“we”), Chamber of Commerce (KvK) 42001589, registered office: Peperstraat 2, 1011 TL Amsterdam, the Netherlands.
Privacy questions and GDPR requests: privacy@gigatron.nl.
We have not appointed a Data Protection Officer (DPO), unless that later becomes legally required.
2. Scope
- Marketing site (including gigatron.nl): informational; no product accounts on this host.
- Gig-a-tronic application (separate host): accounts, tenant content, billing contacts where applicable. Sign-in from the site goes to that application.
3. Marketing site — data we process
CategoryTechnical server logs
ExamplesIP address, user agent, timestamp, URL
PurposeDeliver, secure, troubleshoot
Legal basisLegitimate interests (Art. 6(1)(f) GDPR): availability and security of the site
CategoryCorrespondence
ExamplesName, email, organisation, approximate hours per month, message — via email
PurposeRespond to requests
Legal basisLegitimate interests or pre-contractual steps (Art. 6(1)(f) or (b)), depending on the request
CategoryLanguage preference
ExamplesLocale via cookie NEXT_LOCALE
PurposeShow the site in NL or EN
Legal basisLegitimate interests / strictly necessary for the service requested (language)
| Category | Examples | Purpose | Legal basis |
|---|---|---|---|
| Technical server logs | IP address, user agent, timestamp, URL | Deliver, secure, troubleshoot | Legitimate interests (Art. 6(1)(f) GDPR): availability and security of the site |
| Correspondence | Name, email, organisation, approximate hours per month, message — via email | Respond to requests | Legitimate interests or pre-contractual steps (Art. 6(1)(f) or (b)), depending on the request |
| Language preference | Locale via cookie NEXT_LOCALE | Show the site in NL or EN | Legitimate interests / strictly necessary for the service requested (language) |
We do not load third-party analytics or advertising cookies or scripts on the marketing site.
5. Gig-a-tronic application — data
Depending on use and your agreement, we may process: account data (name, email, company), roles, usage and technical logs, support correspondence, billing contacts, and content the organisation enters (e.g. planning, clients, staff, documents).
- For tenant / customer content, the customer organisation is typically the controller and Softron the processor, under a data processing agreement (DPA) where required (on request / as a schedule to the Order).
- For our own account administration, Softron billing, security, and in-contract product improvement, Softron may be (joint) controller. Details follow from the agreement / DPA.
Purpose (app)Delivering the service to the customer organisation
Legal basis (direction)Contract (Art. 6(1)(b)) and/or processing on the customer’s behalf
Purpose (app)Security, abuse prevention, logs
Legal basis (direction)Legitimate interests (f) and/or legal obligation
Purpose (app)Support
Legal basis (direction)Contract / legitimate interests
Purpose (app)Billing and administration
Legal basis (direction)Contract / legal obligation (admin)
Purpose (app)Consent-based processing (if ever)
Legal basis (direction)Consent (a), withdrawable
| Purpose (app) | Legal basis (direction) |
|---|---|
| Delivering the service to the customer organisation | Contract (Art. 6(1)(b)) and/or processing on the customer’s behalf |
| Security, abuse prevention, logs | Legitimate interests (f) and/or legal obligation |
| Support | Contract / legitimate interests |
| Billing and administration | Contract / legal obligation (admin) |
| Consent-based processing (if ever) | Consent (a), withdrawable |
6. Sharing with third parties / subprocessors
We do not sell personal data.
We use service providers for hosting and delivery, including cloud infrastructure (currently Microsoft Azure for the marketing site). For email/support we may use email infrastructure.
Transfers outside the EEA only with appropriate safeguards, such as EU Standard Contractual Clauses (SCCs), where applicable.
7. Retention
CategoryMarketing site server logs
RetentionMax. 90 days, unless longer needed for security investigation
CategoryContact email
RetentionUp to 2 years after last message, or shorter after handling on request
CategoryApp account data
RetentionTerm of the agreement + up to 90 days after end for wind-down, unless law requires longer
CategoryInvoice / admin data
RetentionStatutory retention (NL: typically 7 years)
CategoryTenant content
RetentionPer customer instruction / DPA; after the post-termination export window, delete or anonymise per DPA
CategoryBackups
RetentionRotating; deletion follows the backup cycle after primary deletion
| Category | Retention |
|---|---|
| Marketing site server logs | Max. 90 days, unless longer needed for security investigation |
| Contact email | Up to 2 years after last message, or shorter after handling on request |
| App account data | Term of the agreement + up to 90 days after end for wind-down, unless law requires longer |
| Invoice / admin data | Statutory retention (NL: typically 7 years) |
| Tenant content | Per customer instruction / DPA; after the post-termination export window, delete or anonymise per DPA |
| Backups | Rotating; deletion follows the backup cycle after primary deletion |
8. Rights
Under the GDPR (where applicable) you may request access, rectification, erasure, restriction, portability, and objection, and withdraw consent. Send requests to privacy@gigatron.nl with enough detail for us to identify you.
You may lodge a complaint with the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl) or, if you live in another EU Member State, with your local supervisory authority.
For tenant data in the app: preferably send requests first to your organisation (controller); we support that organisation as processor.
9. Security
Appropriate technical and organisational measures, including access control, encryption in transit, and monitoring. No transmission or storage is fully risk-free.
10. Changes
We will signal material changes by updating the effective date on this page. Analytics or other non-essential cookies: update this text and any required consent first.
11. Contact
Softron B.V., KvK 42001589, Peperstraat 2, 1011 TL Amsterdam, the Netherlands — privacy@gigatron.nl