Controller: Dashly B.V., Visschersbuurt 23A, 3356 AE Papendrecht, the Netherlands, Chamber of Commerce (KvK) number 95219307.
Privacy contact: sales@dashly.nl. Website: dashly.nl. Effective date: 25 October 2026.
This statement explains which personal data we receive through this website, what we use it for, who we share it with, how long we keep it and which rights you have. Section 9 covers the data that organisations connect in the Dashly platform.
§1Who we are
This website belongs to Dashly B.V., located at Visschersbuurt 23A, 3356 AE Papendrecht, the Netherlands and registered with the Dutch Chamber of Commerce under number 95219307. For the personal data you share with us through the website, we are the controller within the meaning of the General Data Protection Regulation (GDPR).
Questions about this statement or about your data can be emailed to sales@dashly.nl. You can also write to us at the address above.
§2What data we receive through the website
We ask for no more than we need. Personal data reaches us through this website in three ways:
- Booking a demo. On the demo page you enter your name, work email address, organisation and phone number, and choose a time. That data and the time you choose go into HubSpot, the system in which we keep our calendar and our contact with organisations.
- Contact by email. If you email us, we receive your name, your email address and what you write to us.
- Your visit to the website. Like every web server, our hosting records technical data in log files: your IP address, the time, the page you request and your type of browser. Cookies are covered in section 7.
You do not create an account on the website, and we do not ask for special categories of personal data, such as health data, or for your citizen service number (BSN). Please do not include them in a message to us either.
§3Purposes and legal bases
We only use your data for the purposes below, each with a legal basis from Article 6 GDPR:
| Purpose | Data | Legal basis |
|---|---|---|
| Scheduling your demo, preparing the call and following up afterwards | Data from the demo form and the time you chose | Taking steps at your request before a possible contract (Art. 6(1)(b)); for the follow-up, our legitimate interest (Art. 6(1)(f)) |
| Answering your question or email | Name, email address and your message | Legitimate interest: responding to people who contact us (Art. 6(1)(f)) |
| Keeping the website secure and working, detecting misuse and faults | Server logs | Legitimate interest (Art. 6(1)(f)) |
| Seeing how the website is used, only when this is switched on (section 7) | Google Analytics data | Consent (Art. 6(1)(a)), which you can withdraw at any time |
| Our records, if you become a customer | Name, contact and billing details | Contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interest, we have weighed that our interest outweighs the impact on your privacy, and we limit the use to what is needed for it. You can always object (section 8). We do not sell your data, and we do not take decisions about you based solely on automated processing.
§4Retention periods
We keep your data no longer than needed for the purpose we received it for. In practice:
- Demo requests and email: for as long as our contact continues. If you become a customer, your data becomes part of the customer relationship. If we do not end up working together, we delete it once we no longer need it for the contact.
- Records: data on invoices and in our accounts is kept for seven years, as Dutch tax law requires.
- Server logs: briefly, only for as long as needed for security and for fixing faults.
- Cookies: see the periods in section 7.
Would you like us to delete your data sooner? You can ask at any time: see section 8 and the Data deletion page.
§5Recipients and processors
We only share your data with parties that help us run the website and our contact with you. They process the data on our behalf, following our instructions and under a data processing agreement:
| Party | What for | Where |
|---|---|---|
| Hetzner Online GmbH | Hosting this website, including the server logs | Servers in the EU |
| HubSpot | Our calendar and contact management: your demo request, the time you chose and our contact with you | European data centre (see section 5a) |
| Microsoft (Microsoft 365) | Our email | See section 5a |
| Google (Google Analytics) | Statistics on how the website is used, only when switched on and with your consent (section 7) | See section 5a |
Beyond that, we only give data to others when the law requires us to, for example on an order from a regulator or a court.
§5aTransfers outside the EU
Our hosting is in the EU, and HubSpot stores the data of our account in a European data centre. HubSpot, Microsoft and Google are American companies or part of an American group. As a result, data may still be processed outside the European Economic Area (EEA), for example for support or security by the parent company.
Where that happens, it is only with the safeguards the GDPR requires: on the basis of the EU-U.S. Data Privacy Framework or of the European Commission's standard contractual clauses in that party's data processing agreement.
§6Security
We take appropriate technical and organisational measures to protect your data against loss and unauthorised use. The website only works over an encrypted connection (https). Only staff who need your data for their work can access it, and we only work with processors whose security is in order.
If something does go wrong, we act as the GDPR requires: where necessary we report a data breach to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) within 72 hours, and we tell you if the breach poses a high risk to you.
§7Cookies
A cookie is a small file that a website stores in your browser. This website uses as few as possible:
| Cookie | From | What for | Retention |
|---|---|---|---|
NEXT_LOCALE | Dashly | Remembers which language you view the site in. Strictly necessary, so no consent needed. | Until you close your browser |
dashly_consent | Dashly | Remembers your choice in the cookie banner, also if you decline. Only when there is a banner (see below). Strictly necessary. | 6 months |
_ga and _ga_… | Google Analytics: which pages are visited, where visitors come from and on which device. Only with your consent. | Up to 2 years |
Analytics cookies only with consent. If we use Google Analytics, you see a cookie banner on your first visit. Google Analytics only loads once you click Accept there; before that we set no Google cookies and load no Google scripts. Advertising signals are switched off. If Google Analytics is switched off, no banner appears and we only set the language cookie.
Changing your choice. When there is a banner, every page also has Cookie settings at the bottom. It opens the banner again. If you withdraw your consent, we remove the Google Analytics cookies from your browser.
HubSpot's calendar. If you use HubSpot's own calendar, on the demo page or through the link to HubSpot, HubSpot's cookie rules apply there.
We use no advertising cookies and no buttons or pixels from social networks. Fonts are served from our own server.
§8Your rights
You have these rights over your personal data:
- Access: knowing what data we hold about you and what we do with it.
- Rectification: having incorrect or incomplete data corrected.
- Erasure: having your data deleted, unless we are legally required to keep it.
- Restriction: having the use of your data paused, for example while we assess a request.
- Objection: objecting to use based on legitimate interest.
- Portability: receiving the data you gave us yourself in a common file format.
- Withdrawing consent: for anything you consented to, such as analytics cookies (via Cookie settings).
Send a request to sales@dashly.nl. We respond within one month. If a request is complex, that period may be extended by two months; we will tell you so within the first month. Sometimes we first ask you to show who you are, so that we do not give data to the wrong person.
If you disagree with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl). We would like to hear from you first, so that we can try to resolve it together.
§9The Dashly platform
This statement is about the website. Organisations that are customers connect their own systems in the Dashly platform, such as their ATS, planning, payroll and accounting. These contain personal data too, for example of candidates and employees.
For that data the customer is the controller and Dashly is a processor: we only process it on the customer's instructions. The arrangements are set out in the data processing agreement, which comes as standard with every contract. Each customer's data is held in its own shielded Google Cloud environment.
Are you a candidate or employee of an organisation that uses Dashly? Then please send your question or request to that organisation; we help them with it. How an organisation stops a connection or has data deleted is explained on the Data deletion page.
§10Changes
We update this statement when our website, our services or the law change. The date of the last update is shown at the top. If an important change affects you and we have your contact details, we will let you know.