Privacy notice
How Terravek handles personal data, and how to exercise your rights.
This notice explains what personal data Terravek Systems N.V. collects as a controller — that is, about visitors to this website, candidates, suppliers and business contacts. Where we process personal data on behalf of a customer we act as a processor, and the customer's own notice applies.
Who we are
Terravek Systems N.V., Zuidpoortlaan 118, 2628 XK Delft, Netherlands. KvK 27381164. The Data Protection Officer is Marijke Ottevanger, reachable at dpo@terravek.com and independently of management.
What we collect and why
| Who | What | Why | Lawful basis | Kept for |
|---|---|---|---|---|
| Website visitors | Server log: IP address, user agent, page requested, timestamp | Security, fault diagnosis, abuse prevention | Legitimate interests | 30 days |
| Website visitors (with consent) | Page view, referrer host, viewport — no cookie, no identifier | Understanding which pages are useful | Consent | 14 months, aggregated |
| Enquirers | Name, organisation, e-mail, telephone, message | Answering your enquiry | Legitimate interests / steps prior to contract | 24 months |
| Newsletter subscribers | E-mail address, confirmation timestamp | Sending the quarterly you asked for | Consent (double opt-in) | Until you unsubscribe |
| Candidates | Application, CV, interview notes, right-to-work evidence | Assessing your application | Steps prior to contract / consent for the talent pool | 12 months after decision |
| Customer & supplier contacts | Name, role, business contact details | Performing the contract | Contract / legitimate interests | 7 years after contract end |
| Visitors to our offices | Name, organisation, host, arrival and departure time | Physical security and evacuation | Legitimate interests / legal obligation | 90 days |
| Security researchers | Name or handle, contact details, report content | Handling and crediting your report | Legitimate interests | 3 years |
What we do not do
- We do not sell personal data, and we do not share it with data brokers or advertising networks.
- We do not add contact-form submissions to a marketing list. If you write to ask a question, you get an answer, not a newsletter.
- We do not use third-party advertising or social-media tracking pixels on this site. There are none to block.
- We do not embed maps, fonts or videos that would contact a third party before you have consented. That is why the office pages link to a map rather than embedding one.
Earth observation and personal data
This is the question we are asked most and it deserves a direct answer. Terravek does not operate at resolutions where individual people are identifiable, and does not build models whose purpose is to infer the behaviour of identifiable individuals from land use. Imagery of land can nevertheless relate to a person — a field belongs to a farmer, a roof belongs to a household — and our position on where that becomes personal data is set out in the research ethics page and reviewed annually.
Where data is held
In the EU. Corporate systems run in Microsoft 365 with EU data residency; ORBIS Cloud runs in eu-nl-1 (Amsterdam) and eu-de-1 (Frankfurt). Some support and engineering staff in Singapore and Denver may access data in the course of their work; that access is role-based, logged and requires a ticket reference, and customers can disable out-of-region support access — see data residency. Transfers outside the EEA rely on the European Commission's standard contractual clauses. Our sub-processors.
Your rights
You may ask us for a copy of your data, to correct it, to delete it, to restrict or object to processing, or to receive it in a portable form. Where we rely on consent you may withdraw it at any time. To exercise a right, write to privacy@terravek.com. We acknowledge within five working days and respond within one month. We will not charge you and we will not make it difficult. How to make a request.
If we process your data on behalf of one of our customers, we will tell you promptly and, where we can, tell you who to approach instead.
Complaints
Please raise it with the Data Protection Officer first — dpo@terravek.com — because we would rather fix it. You also have the right to complain to the Autoriteit Persoonsgegevens in the Netherlands, or to the supervisory authority where you live or work.
Changes
This notice was last substantively revised on 11 February 2026. Material changes are announced on this page and, for newsletter subscribers, by e-mail before they take effect.
Last revised 11 February 2026. Questions: legal@terravek.com