1. Home
  2. Privacy

Privacy

Privacy statement.

How we handle your data and cookies.

Last updated: 24 October 2026.

PANGAEA Digital Agency handles your personal data with care. This privacy statement explains what data we process when you visit our website, contact us or work with us, why we do so and what rights you have. We comply with the General Data Protection Regulation (GDPR).

Who are we?

PANGAEA Digital Agency BV, Regulusweg 5, 2516 AC The Hague, Chamber of Commerce (KvK) 24256964, is responsible for processing the personal data described in this statement. Questions about privacy? Contact hello@pangaea.nl or +31 88 612 34 56.

What data do we process and why?

  • Contact and inspiration session. When you fill in a form, email or call us, we process your name, company name, email address, phone number and your message. We use them to answer your question and schedule the inspiration session. Legal basis: your request and our legitimate interest in responding.

  • AI Digital Advisor. When you ask the AI Digital Advisor on our site a question, we store the conversation, the page you asked it on and a random code for your browser, so the conversation continues on the next page. We review conversations to improve the Advisor and to help you further if you ask us to. Please do not include sensitive data in your question. Legal basis: our legitimate interest in helping you quickly and well.

  • Clients and business contacts. When we work together, we process the business contact details of you and your colleagues, and whatever is needed for the project, invoicing and our accounts. Legal basis: the contract and legal obligations (such as the tax retention requirement).

  • Newsletter. If you sign up, we occasionally send you news and inspiration. You can unsubscribe at any time using the link at the bottom of every email. Legal basis: your consent.

  • Applying for a job. If you apply to work with us, we use your CV, cover letter and contact details for your application only. Legal basis: your request to be employed.

  • Website visits. Our servers record technical data such as your IP address, browser and the pages you request, to keep the site secure and fast and to prevent abuse. Legal basis: our legitimate interest.

Cookies and analytics

We use functional cookies and local storage that the site needs to work, for example to remember your cookie choice and your conversation with the AI Digital Advisor. No consent is needed for these.

For statistics and marketing (such as Google Analytics via Google Tag Manager) we only set cookies once you give your consent in the cookie banner. You can change your choice at any time in the cookie settings. Without consent, Google only measures without cookies and without recognising you (Consent Mode).

Who do we share your data with?

We never sell your data. We only share it with parties that help us deliver our services, and only as far as necessary:

  • hosting and storage for our website and our platform (data centres in the European Union);

  • sending email (confirmations and newsletters);

  • the AI service behind the AI Digital Advisor (Anthropic), which processes your question to write an answer;

  • Google, for statistics and advertising, only with your consent;

  • our accountant and the Dutch Tax Administration, where the law requires it.

We have agreements with these parties about the security and use of your data. Where data is processed outside the European Economic Area, this is done with the safeguards the GDPR requires, such as the European Commission's standard contractual clauses.

How long do we keep your data?

We keep your data no longer than necessary:

  • questions via forms, email and phone: up to two years after our last contact;

  • conversations with the AI Digital Advisor: up to two years;

  • job applications: four weeks after the procedure ends, or one year if you consent to that;

  • client and invoice data: seven years, because of the tax retention requirement;

  • newsletter: until you unsubscribe.

Do we process data for our clients?

When we build and manage a website, webshop or portal for a client, we process the data of their visitors and customers on that client's behalf. The client is then the controller and we are the processor; the arrangements are set out in a data processing agreement. If you have questions about your data in such a webshop, please contact the webshop itself.

Security

We take appropriate technical and organisational measures to protect your data against loss and unlawful use, such as encrypted connections (https), access only for those who need it, sign-in with a one-time code and daily backups.

Your rights

You have the right to access your data, to have it corrected or deleted, to object to its use, to have its processing restricted and to receive your data in a file you can take with you. If you gave consent, you can always withdraw it.

Send your request to hello@pangaea.nl. We respond within one month. To make sure the request comes from you, we may ask you to verify your identity.

A complaint?

If you are not happy with how we handle your data, please let us know first so we can find a solution together. You also have the right to lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

Changes

We may update this privacy statement, for example when our services or the law change. The latest version is always on this page.