ASK-Solutions

Who is responsible?

Data controller: IRADIS Foundation / ASK-Solutions
Visiting address: Tugelastraat 55, 2021TB Haarlem, The Netherlands
Postal address: Postbus 9633, 2003 LP Haarlem, The Netherlands
E-mail: info@ask-solutions.nl
Telephone: +31 (0)23 369 0 269 (weekdays 9:00 - 17:00)

Which data do we process?

• Server log data (when you visit): IP address, date/time, requested pages/files, browser/OS (user-agent), referrer URL and error messages. This data is technically necessary for operation, security and diagnosis.
• Contact form (if you fill it in): name, company name, e-mail address, address, telephone number and your question/message. We also process technical data sent along with your submission (e.g., timestamp and IP address) for security and abuse prevention.

What do we use this data for (purposes and legal bases)?

• Providing, securing and improving the website (server logs): resolving issues, detecting/preventing abuse, and keeping the website stable (legal basis: legitimate interests).
• Handling messages (contact form): answering questions, processing comments/corrections, and handling requests for (press) information (legal basis: legitimate interests; and where applicable: steps taken at your request prior to a possible collaboration/contract). The GDPR provides multiple legal bases; consent is not always required.

Please do not send special categories of personal data via the contact form (for example medical data). If such information is nevertheless needed, we prefer to align first by e-mail or telephone.

No webshop, no quotes or invoices on this website

This main website has no webshop and no quotation functionality. The “shop” page contains images with links to Spring.com. Donations can be made via a link to PayPal. When you click such links you leave our website. The relevant provider then processes your data under its own privacy policy; via this website we do not receive any shopping-cart or payment data back.

Self-support portal (subdomain)

There is a self-support portal on a subdomain (account.ask-solutions.nl) intended for other services of the foundation. The main website only contains a link to that portal. The support portal uses one technical session cookie and has its own (cookie/privacy) explanation.

With whom do we share data?

We do not sell or rent your data. We do use service providers that process personal data on our behalf:

• Hosting provider: our web server runs at A2 Hosting, Inc. (USA). Server logs are recorded on this server. The contact form is processed by the web server and forwarded as an e-mail to our e-mail provider (no separate “contact form database” is kept on this website).
• E-mail provider: contact form messages are received by e-mail via Soverin (EU).
• Technical management: administrators who maintain systems on behalf of ASK-Solutions (with appropriate agreements on confidentiality and security).

With parties that process data on our behalf we enter into data processing agreements (including security and confidentiality).

Transfers outside the EEA (A2 Hosting, Inc.)

Because A2 Hosting, Inc. is established in the United States, there may be a transfer (or remote access) of limited personal data, such as server logs. Transfers to the US are subject to specific GDPR rules.

Where there is a transfer to the US, we rely on appropriate safeguards such as the EU-U.S. Data Privacy Framework (DPF) and/or Standard Contractual Clauses (SCC). The DPF is recognised via a European adequacy decision.

A2 Hosting, Inc. is listed as an active participant in the EU-U.S. Data Privacy Framework (DPF).

YouTube videos (privacy-enhanced / no-cookie)

On some pages we show YouTube videos via youtube-nocookie.com (privacy-enhanced mode).

When you load or play the video player, YouTube/Google may process technical data (such as IP address) in order to deliver and secure the player.

Cookies

The main ASK-Solutions website does not place cookies.

Server log files

When you visit our website, server log data is recorded. This is technical data such as the date and time of access, requested pages/files, browser and system characteristics (user-agent), referrer (reduced to hostname) and IP address. We use these log data for technical operation, security, error analysis, and to prevent and investigate abuse (legal basis: legitimate interests).

We keep raw server logs for a maximum of 90 days. After that we delete the raw log data. For long-term trend analysis we keep only aggregated daily statistics, without IP addresses or other directly identifying identifiers, such as:

• number of unique visitors per day (as a total number),
• average visit duration per day (as a total number),
• per referrer hostname (canonical) the number of occurrences.

We use these aggregated statistics to improve the website and they are not intended to identify individual visitors.

Retention periods

We do not keep personal data longer than necessary for the purpose for which we received it. The retention period therefore depends on the type of message and whether a (long-term) relationship or file results from it. We also apply periodic review moments to clean up or restrict data.

• Noise and spam: we delete as quickly as possible (or immediately after review).
• One-off questions, comments and minor corrections that do not lead to a relationship or case file: we keep until handled and then for a maximum of 12 months.
• Relationship files (e.g., first contact that leads to a long-term relationship, supplier relationships, or requests where agreements/consent matter such as providing logos, vector files or hi-res photos): we keep as long as necessary for the relationship, continuity and accountability. If inactive, we review these files periodically (once every 5 years) and delete or restrict data that is no longer needed.
• Server log data: raw logs for a maximum of 90 days; after that only aggregated daily statistics are kept (see “Server log files”).

Security

We take appropriate technical and organisational measures to secure personal data. The website uses TLS/SSL (https) for encrypted transfer.

Your rights

You have the right of access, rectification, erasure, restriction of processing and to object. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, “AP”).

If you ask us to delete data, we assess what is possible on a case-by-case basis. In some situations we can erase data. In other situations we may or must keep (part of) the data, for example to be able to demonstrate agreements/consent or to handle a case file carefully. In that case we restrict the use of and access to those data as much as possible.

Contact

Questions about privacy or a request regarding your data? E-mail info@ask-solutions.nl or call +31(0)23-369 0 269.

Last updated: February 16th, 2026.