1. Who we are

This site is operated by Incubane B.V., a Workday consultancy and product company based in the Netherlands. We are the data controller for personal data collected through this site. You can reach us at info@incubane.com.

Registered address: Lange Viestraat 2B, 3511 BK Utrecht, the Netherlands.

2. What we collect, and why

We collect three categories of personal data on this site.

  • Information you give us directly. When you fill in the contact form, request a library asset, or register for an account, we collect your name, work email, company, and any free-text you share with us. We use this to reply to your message, send you the artifact you requested, and remember you on return visits.
  • Usage data. If you accept analytics cookies, we collect anonymous statistics about which pages people visit, which artifacts get downloaded, and which buttons get clicked. We use this to make the site more useful. We do not link this data to your identity.
  • Cookies and similar technologies. Essential cookies keep the site working (for example, your theme preference). Analytics and marketing cookies only run if you opt in via the banner. See our Cookie policy for the full list.

3. Our legal basis

  • Legitimate interest for replying to your enquiries and operating the website.
  • Consent for analytics cookies, marketing cookies, and newsletter sign-ups. You can withdraw consent at any time.
  • Contractual necessity when you are an active customer or supplier of Incubane.

4. Who we share data with

We do not sell your data, ever. We share it only with the small number of service providers we use to run our business, listed on the Trust & security page. These providers are bound by data processing agreements and only process data on our instructions.

All processing happens inside the EU or under an adequacy decision. We do not transfer your data outside the EEA without one.

5. How long we keep your data

  • Contact form messages: 24 months after our last reply, then deleted.
  • Library account profiles: until you ask us to delete them.
  • Analytics data: 18 months, anonymised by default.
  • Customer engagement data: as required by the engagement contract and tax law (typically 7 years).

6. Your rights under GDPR

You have the right to:

  • Access the personal data we hold about you.
  • Ask us to correct anything that is wrong.
  • Ask us to delete your data ("the right to be forgotten").
  • Object to processing or ask us to restrict it.
  • Receive your data in a portable format.
  • Withdraw consent for cookies or newsletters at any time.

To exercise any of these rights, email info@incubane.com. We respond within one calendar month.

If you are not satisfied with how we handle your request, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

7. Security

We protect personal data with the controls described on our Trust & security page. In short: EU-only processing, time-boxed least-privilege access, MFA without exceptions, and an incident response plan with a target acknowledgement of one business day.

8. Changes to this policy

When we change this policy, we update the date at the top and, for material changes, we send a notice to registered library users.

9. Contact

Questions, requests, or complaints: info@incubane.com.