Privacy policy | LinkraFlow

Last updated: 12 September 2026.

Who is responsible?

Linkra is responsible for processing personal data through the public website linkraflow.com and for contact enquiries submitted through this website. Linkra is registered with the Dutch Chamber of Commerce under number 42046494. You can contact us at contact@linkra.nl or +31 6 83 34 92 00.

What does this policy cover?

This policy covers the public linkraflow.com website, including its English pages, and contact enquiries and quotations arising from it. It does not cover data we process through integrations on behalf of customers or the separate login environment. Those are covered by the relevant agreements and privacy information.

Contact and quotations

When you use the form, we receive your name, email address, organisation if provided, and message. We also process the submission time and a technical request identifier. If you contact us directly, we process the information you provide, such as your telephone number and correspondence. We use this data to respond, assess your enquiry and prepare a conversation or quotation. Your name, email address and message are required to handle a form enquiry. Providing your organisation is optional.

For steps towards a contract with you, the legal basis is performing a contract or taking steps at your request. For general enquiries and contact with employees of organisations, we rely on our legitimate interest in responding to enquiries and normal business communication, taking your privacy interests into account. A contact enquiry does not subscribe you to newsletters or advertising campaigns.

Website enquiries are received at contact@linkra.nl and handled through Microsoft 365.

Website operation and security

The hosting service may record technical data such as your IP address, timestamps, requested pages, browser information and errors. To protect the form, we process a derived, pseudonymised value of the IP address and timestamps. We use this to limit abuse and investigate technical problems. The legal basis is our legitimate interest in a secure, functioning website.

Statistics and your consent

We load Google Analytics 4 only with your consent. We measure visits, page views, traffic sources and interactions such as clicks, scrolling, language choices and opening screenshots. For the form, we measure when input starts and a submission is confirmed. The legal basis is consent.

We do not send names, email addresses, organisations or message content to Analytics. We do not use Google Signals, remarketing, advertising profiles, heatmaps or session recordings. The statistics use pseudonymous identifiers and are not the same as fully anonymous data.

You can withdraw consent at any time using at the bottom of the website. Processing before withdrawal remains lawful. Withdrawal stops new measurements but does not automatically delete previously collected data. Your privacy preference is stored in your browser for 180 days to respect your choice.

Who do we share data with?

We use mijn.host for website hosting, Microsoft services for handling contact enquiries and business email, and Google Ireland Limited for Analytics after consent. Service providers receive only the data needed for their task. We do not sell your data. Where required, we enter into data processing agreements. Data may be provided to competent authorities when required by law.

Processing outside the EEA

Microsoft and Google are international service providers. Data may be processed or accessible outside the European Economic Area, including in the United States. Transfers require appropriate safeguards, such as an applicable adequacy decision or the European Commission’s standard contractual clauses. You can contact contact@linkra.nl to request information about the safeguards applicable to your data and obtain a copy.

How long do we keep data?

For enquiries through LinkraFlow, we apply the periods below. These may differ from the general periods for linkra.nl. We retain only what is necessary for the relevant purpose.

Contact enquiries without follow-up: up to 6 months after the last substantive contact.
Quotations and substantive negotiations without an engagement: up to 12 months after closure, where retention is necessary.
Hosting logs at mijn.host: up to 12 months, insofar as needed for security, incident investigation and hosting operations.
Azure form workflow run history: a retention period of 90 days from the start of the run. Technical cleanup may take up to a further 7 days.
Other technical form data used to prevent abuse: up to 30 days.
Backups containing this data: up to 90 days, after which they expire according to the backup cycle. After restoration, we reapply previous deletions.
GA4 user and event data: 2 months, without extension on new activity. Aggregated standard reports may remain available longer.
Analytics cookies and your stored privacy preference: up to 180 days.

If an enquiry leads to an engagement, necessary customer and contract data are subject to the agreements and retention periods for that relationship. We generally retain basic tax records for 7 years as legally required. This does not mean all messages are kept for 7 years. In the event of a specific dispute, security incident or legal obligation, we retain only the necessary data longer, for as long as that need exists.

Security and sensitive information

We use HTTPS and restrict access to those who need the data. Form processing validates input and limits repeated requests. Do not send passwords, access keys, identity documents or sensitive personal data about yourself or others through the form or ordinary email. If such data is necessary for an engagement, we agree on a secure method of exchange in advance.

Your rights and questions

You can request access to, correction or deletion of your personal data, or restriction of processing. You can object to processing based on legitimate interest and, where applicable, request data portability. You can always withdraw consent. These rights are subject to the GDPR’s conditions. For example, a legal retention obligation may limit deletion.

Send your request to contact@linkra.nl. We normally respond within one month. If a permitted extension is needed because of complexity or the number of requests, we explain why within that month and state the additional time required, up to two further months. We request additional identification only when necessary. Do not send a copy of your identity document without being asked.

We do not use this website to make solely automated decisions that have legal or similarly significant effects on you.

Changes

We update this policy when our processing changes. The date at the top shows when it was last updated.