Privacy statement

Who we are

The Only Constant B.V., Surinameplein 1 HS, 1058 GL Amsterdam. Chamber of Commerce (KVK) 91800528, VAT NL865775230B01.

Questions about your data: maarten@theonlyconstant.nl.

Which data we process, and why

If you use one of our tools

This site offers three free tools: the AI First Aid, the AI Readiness Scan and the AI Act Check. What you enter there, we process in order to give you the result.

What you fill in yourself: your name, email address, company name and role, insofar as a tool asks for them and you provide them. Only the email address is needed to send you the result; the rest is optional.

What you type in the conversation: the AI First Aid and the AI Readiness Scan work through a conversation. What you write there about your organisation and your question, we store, together with the assessment that follows from it. Do not share confidential business information or other people's data in it.

The AI Act Check works differently: it is a questionnaire with fixed choices, without free text. Of that, we keep your answers and the outcome.

What for: to send you the requested report or advice, and to contact you if you ask us to. After the AI Act Check we only approach you if you ticked the box for that; we record that consent. If you use the AI First Aid or the AI Readiness Scan and leave your details, we may approach you about our services on the basis of our legitimate interest. You can always object to this; one email suffices.

Legal basis: performance of your request, your consent in the case of the AI Act Check, and our legitimate interest in business services (GDPR art. 6(1)(a), (b) and (f)).

If you email or call us

Then we process your contact details and the content of your message, to answer your question and to follow up on the contact.

If you visit the site

We measure how the site is used with Google Analytics, so that we know which pages work and which do not, and where visitors get stuck. For that we set cookies, but only if you consent to it. If you decline, we do not measure your visit.

You can change or withdraw your choice at any time via the cookie settings at the bottom of the site. Cookies that are strictly necessary for the site to work are always set; those do not collect data about your behaviour.

Maps and the appointment calendar

Our contact page shows a Google Maps map, and the booking page shows a Google calendar. These load from Google rather than from us: the moment they appear, Google receives your IP address, information about your browser, and the page you came from. They do not set cookies.

We only load the map if you have accepted cookies, or if you click to load it yourself. The calendar on the booking page loads straight away, because it is the service itself: you come to that page to make an appointment.

Who we share your data with

We do not sell your data and do not share it with third parties for their own purposes. To make our site and tools work, we use the following service providers, who process your data exclusively on our instructions:

We have a data processing agreement with all of these parties. Where data is processed outside the European Economic Area, this happens on the basis of the standard contractual clauses of the European Commission.

We do not use your data to train AI models, and under our agreements with them our suppliers may not do so either.

How long we keep your data

We keep data from the tools for at most two years after your last contact with us, unless a client relationship follows from it. In that case the retention periods of that engagement apply, and for the administration the statutory period of seven years.

If you ask for deletion, we do it sooner.

Your rights

You have the right to access your data, to have it corrected or to have it deleted. You can also object to the processing or ask for your data to be transferred. Send an email to maarten@theonlyconstant.nl; we respond within a month.

If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Security

We take appropriate measures to protect your data: encrypted connections, access only for those who work on it, and accounts with two-factor authentication. If you suspect something is going wrong with your data, please let us know.

Changes

We update this statement when our way of working changes. The date at the top indicates when that last happened.