Privacy statement
Last updated: 5 October 2026
Daropa.solutions values your privacy. This is also at the heart of what we do: working with data that stays in Europe, under European law. In this privacy statement, you can read which personal data we process when you visit daropa.solutions, contact us or become a customer, why we do this and what rights you have. We comply with the General Data Protection Regulation (GDPR).
1. Who is responsible?
Daropa Solutions is the data controller for the processing described in this privacy statement.
Daropa Solutions (trading as Daropa.solutions)Kerkewal 1
8401 CG Gorredijk
Company registration number: 81403534
VAT number: NL003563834B72
E-mail: info@daropa.solutions
Phone: 0513 241 500
Data in your workplace. For files, e-mail and other data that your organisation stores in the Daropa Workplace, your organisation is the data controller and we are the processor. For this, we enter into a separate data processing agreement. This privacy statement does not cover that.
2. What data do we process?
If you fill in the contact form or e-mail or call us
- your name and (optionally) the name of your organisation;
- your e-mail address and (optionally) your phone number;
- the package or demo you’re interested in, and your message;
- the IP address you use to submit the form, only for spam protection (see Article 4).
If you become a customer
- name, role and contact details of contact persons and administrators;
- organisation and invoice details, such as address, Chamber of Commerce number, VAT number and payment details;
- correspondence and support requests;
- data required to create accounts, such as the name and e-mail address of users.
When you visit the website
Our hosting provider logs technical data such as IP address, time and requested page in server logs. These are necessary for security and the proper functioning of the website. We do not use analytics or advertising services and do not load fonts or scripts from external parties such as Google. You can read more about cookies in the cookie statement.
We do not ask for special personal data. Therefore, do not enter this in the message field either.
3. Why do we process this data?
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to your question, scheduling a conversation or demo and sending you a quotation | Steps prior to an agreement and legitimate interest (Art. 6(1)(b) and (f)) |
| Delivering, managing and supporting the Service, including creating accounts | Performance of the agreement (Art. 6(1)(b)) |
| Invoicing and administration | Performance of the agreement and legal obligation (Art. 6(1)(b) and (c)) |
| Informing you about maintenance, disruptions and changes to the Service | Performance of the agreement (Art. 6(1)(b)) |
| Security of the website and preventing spam and misuse | Legitimate interest (Art. 6(1)(f)) |
We do not send newsletters or advertisements without your consent.
4. How long do we retain your data?
- Contact requests without an agreement: up to 12 months after the last contact.
- Customer data: for the duration of the agreement, and thereafter as long as necessary for settlement.
- Invoices and administration: 7 years, due to the statutory retention obligation.
- IP address for the form: for spam control, we store it only in an irretrievable (hashed) form, and no longer than 1 hour.
- Server logs: according to the retention period of our hosting provider, usually no more than a few weeks.
5. With whom do we share your data?
We never sell your data. We only share it when necessary:
- with our hosting and e-mail provider, who processes the website, the form and our e-mail for us;
- with Mistral AI (Paris, France), the European AI company behind our chat assistant, for the questions you ask in the chat (see below);
- with our accountant or accounting software, for invoicing;
- if the law requires us to do so.
With parties that process data on our behalf, we enter into a data processing agreement. All these parties operate within the European Union. We do not transfer your data to countries outside the European Economic Area.
Chat assistant on the website
On our website, in the customer portal, in the Daropa Academy and in the demo environment (nc-demo.daropa.solutions), you can ask questions to a digital assistant. Your question and the previous conversation, along with information from our website, are sent to Mistral AI’s language model. This generates the answer. Mistral AI processes this within the European Union, does not use the conversations to train its models and stores them only briefly (up to 30 days) to prevent misuse.
If you are logged in to the customer portal or the Academy, the assistant will also have access to the portal manual or lesson content, and in the portal, the names of your active modules and your organisation name; no invoices, tickets or other account details. Daropa does not store the conversations themselves. The conversation is only stored in your own browser (sessionStorage) and disappears when you close the tab. To limit misuse, we keep track of how many questions have been asked per IP address (only as an encrypted code) for one hour. Do not share sensitive personal data in the chat. If you choose Send this conversation to us, we will receive your name, email address, phone number (if provided) and the conversation by email, and we will handle it as a regular contact request. The chat does not use cookies.
6. How do we secure your data?
We take appropriate measures to protect your data against loss and unauthorised use. The website only works via an encrypted connection (https), access to data is limited to those who need it, and we keep our systems up to date.
7. Your rights
You have the right to:
- access your data;
- have incorrect data corrected;
- have your data deleted if we no longer need it or are no longer allowed to retain it;
- restrict processing;
- object to processing based on legitimate interest;
- receive your data in a common format (data portability);
- withdraw given consent.
Send your request to info@daropa.solutions. We will respond within a month. To prevent misuse, we may ask you to identify yourself.
8. Filing a complaint
If you are not satisfied with how we handle your data, let us know first so we can look for a solution together. You also always have the right to file a complaint with the Dutch Data Protection Authority.
9. Changes
We may amend this privacy statement, for example if our services or the law change. The most current version is always available on this page, with the date of the last amendment at the top.