Privacy statement

1. Who we are

Structivy is developed and run by Tremoot B.V., Hogeweyselaan 215F, 1382 JL Weesp, the Netherlands, registered with the Dutch Chamber of Commerce under number 85752304.

Tremoot has appointed a Data Protection Officer (DPO), who independently oversees how we handle personal data. For questions about privacy, e-mail contact@tremoot.com.

2. Our role: controller or processor

For the structivy.com website and the contact form, Tremoot is the controller. We decide why and how that data is processed.

In the Structivy platform, an installation or service company records data about its customers, their locations and installations, and about its own staff. That company is the controller for this data. Tremoot processes it as a processor, on the company's instructions and under the data processing agreement we conclude with it.

Are you a customer of a company that uses Structivy? Then send questions about your data and requests to exercise your rights to that company. If such a request reaches us, we do not handle it ourselves: we pass it on to the company and help it deal with it.

3. The website

The website sets no cookies and uses no advertising or tracking services.

On every visit our hosting and firewall process technical data, such as your IP address, the type of browser and the page requested. This is needed to keep the website secure and available.

For visitor statistics, the website uses Cloudflare Web Analytics. It counts how many people visit the website, which pages they view and through which website or campaign they arrive. It sets no cookies, stores nothing in your browser, does not keep your IP address and does not follow you across other websites. We only see totals, never who viewed a page. Because these statistics have little or no effect on your privacy, we do not ask for your consent. The legal basis for the visitor statistics is our legitimate interest in knowing how the website is found and used.

The fonts come from our own server. No data goes to a font service.

The contact form is protected with Cloudflare Turnstile. Cloudflare receives your IP address and information about your browser, to establish that a person is filling in the form.

4. The contact form

You can use the contact form to request a demonstration or ask a question. For that we ask for your name, organisation, e-mail address and message, and your phone number if you wish.

We use this data only to answer your question. The legal basis is our legitimate interest in responding to it.

The website does not store your message. It is sent as an e-mail to contact@tremoot.com through the e-mail service SendGrid. We keep that e-mail under our e-mail retention policy, for one to two years.

We count how often the contact form is sent and how that ended, for instance sent or refused by the bot check. That count does not include who sent the form or what it said.

5. The platform

About the staff of companies that work with Structivy, we process:

• account and contact details, such as name, e-mail address, job title and roles;
• sign-in data, through Microsoft Entra External ID;
• data about technicians' work, such as work orders, hours, activities and certifications;
• the location when a work order is started and finished, if the company has set this up: from the device's GPS if the technician allows it in the browser, and otherwise an approximate location (city, region and country) based on the IP address;
• usage and audit data: who did what and when, for security and accountability;
• technical data, such as IP address and browser.

About customers, we process the data the company records in Structivy, such as names and contact details, addresses of locations, data about installations, work orders, service contracts and signatures on service reports. We do so only as a processor, for the purposes the company determines, such as customer management, planning, maintenance and the records the F-gas Regulation requires. We never use this data for our own purposes, and we do not sell or share it. The data is stored within the European Union.

When a company switches on AI features, the data they need is processed by Microsoft Azure AI Foundry within the European Union. That data is not used to train AI models.

6. Suppliers

To deliver Structivy, we work with the following parties:

We have agreed security and confidentiality terms with suppliers that process personal data for us. From the RDW the platform only retrieves public vehicle data; the registration number is sent to do so.

7. Data outside the European Union

Most data stays within the European Union. SendGrid, ipapi.co and Cloudflare process data in the United States. That transfer is covered by appropriate safeguards, such as an adequacy decision of the European Commission or standard contractual clauses.

8. Security

Tremoot is certified for ISO 27001 and NEN 7510 and takes appropriate technical and organisational measures to protect personal data. These include encryption in transit and at rest, multi-factor authentication, access by role, recording who does what, monitoring, backups whose restore is tested every year, and a strict separation between test and production data.

If a data breach poses a risk to the people concerned, we report it to the Dutch Data Protection Authority within 72 hours. If it concerns data in the platform, we inform the company without undue delay and help it with the report and with informing the people concerned.

Report a vulnerability

9. Retention

We keep personal data no longer than needed for the purpose it was collected for, unless a legal obligation requires a longer period.

• Security logs of the website and the platform: twelve months.
• E-mail, including messages from the contact form: one to two years.
• Data in the platform: as long as the company decides and the agreement runs.
• Database backups: at least thirty days.

When the agreement with a company ends, we return, delete or anonymise the data, as the company chooses, unless a legal retention obligation prevents it.

10. Your rights

You have the right to access your data, to have it corrected or deleted, to have its processing restricted, to object, and to have your data transferred. Where we asked for your consent, you can always withdraw it.

For data from the website and the contact form, send your request by e-mail to contact@tremoot.com, or in writing to our address. We first check that the request comes from you, and we handle it within one month. If a request is complex, that period can be extended by at most two months; we will tell you in advance.

For data in the platform, contact the company that uses Structivy.

If you disagree with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority.

11. Changes

We may change this privacy statement. The date of the current version is shown at the top of this page.