Privacy Statement

Last updated: 5 November 2026

1. Who we are

Lykeion B.V., a private limited company based in The Hague, the Netherlands, is the controller for the processing of personal data described in this statement.

You can contact us about privacy matters at info@lykeion.nl or on +31 10 340 0723. We have not appointed a data protection officer, as we are not required to do so.

2. What we process, why, and on what basis

When you visit this website

Our web server automatically records technical information about each request in its log files: your IP address, the date and time of the request, the page requested, the referring page and the type of browser and device you use.

We use this information to deliver the website, to keep it secure and to detect and prevent misuse. We use the approximate country associated with your IP address to make the website available only to visitors in the European Economic Area, Switzerland, the United Kingdom and the United States. We also prepare a weekly visitor report showing the approximate country and city and, where available, the organisation or network associated with the IP address. These are estimates and do not reliably identify an individual visitor or their employer. The report does not contain IP addresses. Location and network are looked up in databases held on our own server (DB-IP Lite, db-ip.com, licensed under CC BY 4.0), so your IP address is not sent to anyone else for this purpose.

The legal basis is our legitimate interest in operating a secure and reliable website, in limiting where it is available and in understanding, in general terms, who visits it (Article 6(1)(f) GDPR). We do not use this information to identify individual visitors, to build profiles or to take automated decisions about you.

When you contact us

If you contact us by email or telephone, we process your name, your contact details and the content of your message, so that we can respond and follow up.

The legal basis is our legitimate interest in answering enquiries and, where you ask us to take steps before entering into an agreement, the performance of those steps (Article 6(1)(b) and (f) GDPR). Providing this information is voluntary, but without your contact details we cannot reply.

3. Cookies and third-party content

This website does not use cookies, browser-based analytics, advertising trackers or embedded social media content. Fonts, images and all other content are served from our own hosting, so your browser does not connect to other parties when you visit. We analyse server logs only as described in section 2.

4. Who receives your data

Cloud86 B.V. in the Netherlands hosts this website, and Microsoft provides our email service through Microsoft 365. For the processing carried out on our behalf to provide these services, they act as processors under their respective data processing agreements. Microsoft also acts as an independent controller for certain business operations connected with providing its services, as explained in its Data Protection Addendum. Where necessary, we share personal data with our professional advisers, such as accountants and lawyers, who are bound by confidentiality, and with public authorities where the law requires us to do so.

We do not sell, rent or trade personal data.

5. Transfers outside the European Economic Area

This website is hosted in the Netherlands. Microsoft’s EU Data Boundary commitments for our email service cover storage and processing in the EU and EFTA, including Switzerland, which benefits from a European Commission adequacy decision. These commitments have limited exceptions: personal data may be accessed from or transferred to countries outside this area, including the United States. Microsoft’s Data Protection Addendum provides for the European Commission’s standard contractual clauses for international transfers. Microsoft Corporation also participates in the EU–US Data Privacy Framework, which is covered by a European Commission adequacy decision for transfers within its scope. You can consult the applicable safeguards in Microsoft’s Data Protection Addendum or request a copy by contacting us at info@lykeion.nl.

6. How long we keep your data

We keep server log files for no longer than 90 days. The weekly visitor reports do not contain IP addresses; we keep them, including copies sent by email, for no longer than 90 days and then delete them.

We keep correspondence for as long as we need it to deal with your enquiry and any follow-up, and longer only where Dutch law requires us to keep business records.

7. Security

We take appropriate technical and organisational measures to protect personal data against loss and unauthorised access. This website is served only over an encrypted connection, and access to log files and correspondence is restricted to those who need it.

8. Your rights

Depending on the circumstances and the applicable legal conditions, you may request access to your personal data, its rectification or erasure, or the restriction of its processing, and you may object to processing based on our legitimate interests. Where we process personal data you have provided by automated means on the basis of consent or a contract, you may also have the right to data portability.

To exercise these rights, email info@lykeion.nl. We will respond within one month and may ask you to confirm your identity first.

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

9. Changes to this statement

We may update this statement from time to time, for example when we change how the website works. The date at the top shows when it was last revised.