Legal

Privacy policy

How SFI Data collects, uses and protects your data.

Scope

SFI Data B.V. (“SFI Data”, “we”, “us”, or “our”) is committed to protecting the privacy and personal data of users accessing our dashboard and services (the “Platform”). This Privacy Policy explains how we collect, use, share, and protect information.

Data we collect

Personal data

  • Name, job title, and contact information (e.g., email, phone number)
  • Login credentials (email and hashed password)
  • Company or institutional affiliation
  • Usage logs and activity (e.g., login times, pages visited)

Technical data

  • IP address, browser type, device type, and operating system
  • Log files, cookies, and analytics data (e.g., via Google Analytics or Matomo)

How we use your data

  • Provide access to and operate the Platform
  • Customize user experience and content
  • Communicate service-related information
  • Monitor usage patterns
  • Comply with legal obligations

Data sharing

We do not sell personal data. Data may be shared with service providers, affiliates, or as required by law.

Cookies and tracking

Cookies help maintain session state and gather usage analytics. Users can manage cookie settings through their browser.

Data retention

Data is retained as long as necessary for contract fulfillment, compliance, and legitimate business purposes.

Security

Technical and organizational measures include encryption, access controls, and regular system monitoring.

Your rights under GDPR

You have the right to access, correct, delete, restrict, or object to processing. You may also lodge complaints with the Dutch DPA.

International transfers

Data stored primarily within the EEA. Transfers outside the EEA follow standard legal safeguards.

Changes to this policy

We may update this policy. Material changes will be communicated via email or platform notification.

Compliance with DORA

Operational resilience measures

  • Penetration testing
  • Incident response
  • Business continuity
  • Secure development

Subcontractor and data processor oversight

Third parties must comply with GDPR and DORA, under data processing agreements.

Incident reporting support

Affected clients will be notified promptly to meet DORA reporting obligations.

Data integrity and audit trails

Logs and tracking support DORA Article 10.

Service level clarity

Upon request, we provide SLAs and related documentation to clients.

Contact us

Address
Sarphatipark 116-4, Amsterdam, The Netherlands, 1073 ED
Company
SFI Data B.V., Amsterdam, The Netherlands

Last updated: May 2026