We don't collect
your data.
No cookies. No analytics. No third-party trackers. No pixel. No fingerprinting. Your visit to this website is completely private — the way the internet should work.
What this site does not do
Most company websites track every click. We chose a different approach.
No cookies
We don't set any cookies — not for tracking, not for analytics, not for anything. Your browser stays clean.
No analytics or tracking
No Google Analytics. No Hotjar. No Meta Pixel. We don't monitor your behavior on this site in any way.
No third-party data sharing
Your visit is not reported to any third party. No ad networks, no data brokers, no social media platforms receive information about you.
No fingerprinting
We don't use browser fingerprinting, device identification, or any technique to identify or re-identify visitors.
The only data we receive
When you fill out our contact form, you voluntarily share your name, email, company name, and message. That's it. This information is delivered to us via Netlify Forms and used solely to respond to your inquiry.
What we do with it
We use your contact details to respond to your message and, if relevant, to discuss potential commercial partnerships. Nothing else.
How long we keep it
Contact form submissions are retained for a maximum of 2 years. You can request deletion at any time by emailing info@ortraco.com.
Who has access
Only the Ortraco team. We do not sell, share, or transfer your data to any third party. Netlify processes the form submission as our data processor under GDPR-compliant terms.
Legal basis for processing
The limited personal data we process is handled on the following legal bases under Article 6 of the GDPR:
Contact form submissions: Processing is based on your consent (Art. 6(1)(a) GDPR) — you choose to submit your information — and our legitimate interest (Art. 6(1)(f) GDPR) in responding to business inquiries.
Pre-contractual communication: If your inquiry leads to a potential business engagement, processing is necessary for the performance of a contract or to take steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
Legal obligations: We may retain certain data to comply with legal obligations such as tax and accounting requirements under Dutch law (Art. 6(1)(c) GDPR).
Hosting & sub-processors
This website is hosted on Netlify, Inc. (headquartered in the United States). Netlify processes form submissions on our behalf as a data processor. The transfer of data to the United States is safeguarded by the EU-U.S. Data Privacy Framework and Standard Contractual Clauses (SCCs) in accordance with Article 46(2)(c) GDPR.
Netlify's infrastructure may log technical information such as IP addresses for security and operational purposes. These server logs are managed by Netlify under their own privacy policy and data processing agreement. We do not access, store, or process these server logs.
Security measures
We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction. This website is served over HTTPS with TLS encryption. Access to contact form submissions is restricted to authorised Ortraco personnel only. We do not store personal data in publicly accessible systems.
Your rights under GDPR
Even though we collect minimal data, you have full rights under the General Data Protection Regulation (EU) 2016/679 and the Dutch Uitvoeringswet AVG (UAVG). Specifically, you have the right to:
Access (Art. 15) — request a copy of the personal data we hold about you.
Rectification (Art. 16) — request correction of inaccurate or incomplete data.
Erasure (Art. 17) — request deletion of your personal data ("right to be forgotten").
Restriction (Art. 18) — request that we limit how we process your data.
Data portability (Art. 20) — request your data in a structured, machine-readable format.
Objection (Art. 21) — object to processing based on legitimate interest.
Withdraw consent (Art. 7(3)) — withdraw your consent at any time, without affecting the lawfulness of processing prior to withdrawal.
To exercise any of these rights, contact us at info@ortraco.com. We will respond within one month, as required by Art. 12(3) GDPR.
Supervisory authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), Bezuidenhoutseweg 30, 2594 AV Den Haag, The Netherlands — autoriteitpersoonsgegevens.nl.
Children's data
This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe that we have inadvertently collected data from a minor, please contact us and we will delete it promptly.
Data Controller
Ortraco B.V. has not appointed a Data Protection Officer (DPO) as this is not required given the nature and scale of our data processing activities. For all privacy-related inquiries, please contact us at the email address above.
Changes to this policy
We may update this privacy commitment from time to time to reflect changes in our practices or applicable law. Any changes will be posted on this page with an updated "last updated" date. We recommend reviewing this page periodically.
Last updated: April 2025.
Why we chose this approach
We believe privacy should be the default, not an afterthought buried in a 20-page policy. Our clients trust us with sensitive commercial relationships — the least we can do is respect their privacy online. This page exists not because the law requires it, but because we want you to know exactly where you stand.