Privacy Policy

Last updated: April 1, 2026 — Effective: April 15, 2026

ByteReview Digital B.V. ("ByteReview," "we," "our," or "us") is committed to protecting the privacy and personal data of our readers, subscribers, and website visitors. This Privacy Policy explains how we collect, process, store, and share personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Dutch Algemene Verordening Gegevensbescherming ("AVG"), as well as other applicable data protection legislation.

1. Personal Data We Collect

We collect personal data only when it is necessary for the purposes described in this policy. The categories of personal data we may process include:

1.1 Data You Provide Directly

• Contact information: Name, email address, and any additional details you provide when you fill out our contact form, subscribe to our newsletter, or send us correspondence.
• Account data: If you register for a ByteReview account, we process your chosen username, email address, and hashed password.
• Comments and feedback: Any content you submit through comment forms or feedback mechanisms on our website.

1.2 Data Collected Automatically

• Technical data: IP address (anonymised after 30 days), browser type and version, operating system, screen resolution, and device type.
• Usage data: Pages visited, time spent on pages, referral source, click patterns, and scroll depth.
• Cookie data: Information collected through strictly necessary, analytics, and preference cookies as described in our Cookie Policy below.

2. Legal Bases for Processing

We process personal data on the following legal bases as defined in Article 6(1) of the GDPR:

• Consent (Art. 6(1)(a)): For newsletter subscriptions, non-essential cookies, and marketing communications. You may withdraw consent at any time.
• Legitimate interest (Art. 6(1)(f)): For website analytics (using anonymised data), fraud prevention, and improving our editorial content. We have conducted a legitimate interest assessment for each of these purposes.
• Contract performance (Art. 6(1)(b)): For processing data necessary to provide services you have requested, such as account creation or contact form responses.
• Legal obligation (Art. 6(1)(c)): Where we are required to retain data for tax, accounting, or regulatory compliance purposes.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

• To deliver and improve our editorial content and website experience.
• To respond to your enquiries submitted through our contact form.
• To send newsletters and editorial updates, where you have opted in.
• To analyse website traffic patterns and optimise content performance using aggregated, anonymised analytics data.
• To detect and prevent abuse, spam, or unauthorised access to our systems.
• To comply with legal obligations, including tax reporting and regulatory requirements.

4. Cookie Policy

ByteReview uses cookies and similar tracking technologies on our website. We categorise cookies as follows:

• Strictly necessary cookies: Required for the website to function correctly (session management, security tokens). These do not require consent under GDPR.
• Analytics cookies: Used to understand how visitors interact with our website. We use a self-hosted analytics solution that anonymises IP addresses and does not share data with third parties. These cookies are set only after you provide consent.
• Preference cookies: Store your choices such as language preference, dark/light mode, and cookie consent status. Set only with consent.

We do not use third-party advertising cookies or tracking pixels. We do not participate in real-time bidding or programmatic advertising networks.

5. Data Sharing and Third Parties

ByteReview does not sell, rent, or trade personal data to third parties. We may share data with the following categories of recipients:

• Infrastructure providers: Our website is hosted on servers located within the European Economic Area. Our hosting provider processes data as a data processor under a Data Processing Agreement (DPA) compliant with Article 28 GDPR.
• Email service providers: Newsletter delivery is handled by a processor with servers in the EEA, under a standard DPA.
• Legal authorities: We may disclose personal data to law enforcement or regulatory bodies where required by applicable law or valid legal process.

6. International Data Transfers

ByteReview processes and stores personal data exclusively within the European Economic Area (EEA). In the event that any data transfer outside the EEA becomes necessary, we will ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or a valid adequacy decision under Article 45 GDPR.

7. Data Retention

• Website analytics data: Anonymised and retained for 26 months.
• Newsletter subscriber data: Retained until you unsubscribe or request deletion.
• Contact form submissions: Retained for 12 months after resolution of the enquiry, then deleted.
• Account data: Retained for the duration of the account plus 30 days after deletion request.
• Financial records: Retained for 7 years as required by Dutch tax law (Algemene wet inzake rijksbelastingen).

8. Your Rights Under GDPR/AVG

As a data subject, you have the following rights under the GDPR and the Dutch AVG:

• Right of access (Art. 15): You may request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): You may request correction of inaccurate or incomplete personal data.
• Right to erasure (Art. 17): You may request deletion of your personal data, subject to legal retention obligations.
• Right to restrict processing (Art. 18): You may request that we limit the processing of your data in certain circumstances.
• Right to data portability (Art. 20): You may request your data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21): You may object to processing based on legitimate interests at any time.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days as required by the GDPR. If you are unsatisfied with our response, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), located at Bezuidenhoutseweg 30, 2594 AV Den Haag, Netherlands.

9. Data Security

ByteReview implements appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• TLS encryption for all data in transit.
• Encryption at rest for stored personal data.
• Access controls with role-based permissions and multi-factor authentication for staff.
• Regular security assessments and penetration testing of our infrastructure.
• Staff training on data protection and information security practices.

10. Children's Privacy

ByteReview's services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child under 16 without verifiable parental consent, we will take steps to delete that data promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices or applicable law. When we make material changes, we will notify you by posting a prominent notice on our website and updating the "Last updated" date at the top of this policy. We encourage you to review this policy periodically.

12. Contact Information

For any questions about this Privacy Policy or our data protection practices, please contact:

ByteReview Digital B.V.
Attn: Data Protection Officer
Keizersgracht 520
1017 EK Amsterdam, Netherlands
Email: [email protected]
Phone: +31 20 555 0198