Privacy Policy

1. Who we are

Big Bytes B.V. (trading under the name The Next App) is responsible for the processing of personal data as described in this privacy policy.

2. What data we collect

We only collect personal data when you actively choose to provide it, namely by filling in the contact form on our website. The following data may be collected:

• Name — to address you personally
• Email address — to reply to your message
• Phone number — optional, for callback requests
• Company name — optional, for business context
• Message content — your question or project description
• Technical data — IP address, browser, referring page, and possibly a Google Click ID (gclid) for measuring advertising results

3. How we use your data

We use your data solely for the following purposes:

• Responding to your contact request or question
• Providing a quotation where applicable
• Measuring the effectiveness of our advertising campaigns (based on gclid)
• Improving our website and services

We do not send newsletters and do not add you to a marketing list without your explicit consent.

4. Legal basis

We process your personal data on the basis of the following GDPR grounds:

• Consent (Art. 6(1)(a) GDPR) — by completing and submitting the contact form you consent to processing for the purpose of responding to your request.
• Legitimate interest (Art. 6(1)(f) GDPR) — for analysing website traffic and advertising performance, to the extent that this does not disproportionately infringe your privacy.

5. Sharing with third parties

We never sell your data to third parties. We may share data with:

• Our internal analytics tool (analytics-api.thenextapp.nl) — contact form data is sent to this self-hosted environment for storage and follow-up
• Google LLC — via Google Ads and Analytics, technical data (such as gclid and IP address) may be shared. Google processes this data in accordance with their own privacy policy.
• Processors — parties that process data on behalf of The Next App (e.g. hosting providers), with whom a data processing agreement has been concluded.

All processors are established within the European Economic Area (EEA) or appropriate safeguards have been put in place in accordance with GDPR.

6. Retention period

We do not retain personal data longer than necessary:

• Contact form data: maximum 2 years after the last contact, unless an ongoing business relationship arises
• Technical log data: maximum 90 days
• Accounting data (if an invoice is issued): 7 years based on the statutory retention obligation

7. Security

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse. Our website uses HTTPS encryption. Contact form data is transmitted via a secure connection to our own analytics server.

8. Your rights

Under GDPR you have the following rights:

• Access — you can request what data we hold about you
• Rectification — you can have incorrect data corrected
• Erasure — you can request deletion of your data ("right to be forgotten")
• Restriction — you can request that processing be restricted
• Objection — you can object to processing based on legitimate interest
• Portability — you can request your data in a commonly used format

Send your request to info@thenextapp.nl. We will respond within 4 weeks. If you have a complaint about the processing of your personal data, you can submit it to the Dutch Data Protection Authority.

9. Cookies

We use the following cookies:

We do not place tracking cookies from social media or other advertising networks without your consent.

10. Contact

Do you have questions about this privacy policy or about the processing of your data? Please contact us:

info@thenextapp.nl — +31 10 307 6100

We are available on weekdays from 09:00–17:30 (CET).