Privacy Policy
Last updated: January 2, 2026
This Privacy Policy explains how The OS B.V. (“The OS”, “we”, “us”, or “our”) collects, uses, and protects your personal data when you visit our website at https://os.agency (the “Website”). We are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
Data Controller
The data controller responsible for your personal data is:
The OS B.V. Amsterdam, Netherlands Email: hello@os.agency
What Data We Collect
Information You Provide
When you contact us through our Website, we may collect:
- Contact information: Name, email address, company name
- Communication content: Messages you send us through our contact form
- Business information: Details about your business needs and requirements
Information Collected Automatically
When you visit our Website, we automatically collect certain information through cookies and similar technologies:
- Usage data: Pages visited, time spent on pages, click patterns, referring URLs
- Device information: Browser type, operating system, device type, screen resolution
- Technical data: IP address (anonymized where possible), language preferences
How We Use Your Data
We process your personal data for the following purposes and legal bases:
| Purpose | Legal Basis (GDPR Art. 6) |
|---|---|
| Responding to your inquiries | Legitimate interest / Contract performance |
| Providing our services | Contract performance |
| Improving our Website | Legitimate interest |
| Analytics and performance monitoring | Consent (via cookie banner) |
| Marketing communications | Consent |
| Legal compliance | Legal obligation |
Cookies and Tracking Technologies
We use cookies to enhance your experience on our Website. Our cookie consent banner allows you to manage your preferences.
Essential Cookies
These cookies are necessary for the Website to function and cannot be disabled:
- Cookie consent preferences: Remembers your cookie choices
- Security cookies: Protect against cross-site request forgery
Analytics Cookies (Optional)
With your consent, we use Google Analytics (via Google Tag Manager) to understand how visitors interact with our Website:
- Google Analytics: Collects anonymized usage statistics
- Google Tag Manager: Manages our analytics and marketing tags
You can withdraw your consent at any time by clicking the cookie settings link in our footer or clearing your browser cookies.
Data Sharing
We may share your personal data with:
- Service providers: Companies that help us operate our business (hosting, email services, CRM systems)
- Analytics providers: Google Analytics for website analytics (with your consent)
- Professional advisors: Lawyers, accountants, and auditors when necessary
- Legal authorities: When required by law or to protect our rights
We do not sell your personal data to third parties.
International Data Transfers
Some of our service providers may be located outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions by the European Commission
- Binding Corporate Rules
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
| Data Type | Retention Period |
|---|---|
| Contact form submissions | 2 years after last contact |
| Analytics data | 14 months |
| Cookie consent records | 1 year |
| Client project data | Duration of engagement + 7 years |
Your Rights Under GDPR
Under the GDPR, you have the following rights regarding your personal data:
- Right of access: Request a copy of your personal data
- Right to rectification: Request correction of inaccurate data
- Right to erasure: Request deletion of your data (“right to be forgotten”)
- Right to restriction: Request limited processing of your data
- Right to data portability: Receive your data in a portable format
- Right to object: Object to processing based on legitimate interests
- Right to withdraw consent: Withdraw consent at any time for consent-based processing
To exercise any of these rights, please contact us at hello@os.agency. We will respond to your request within 30 days.
Children’s Privacy
Our Website is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- SSL/TLS encryption for data in transit
- Secure hosting infrastructure
- Access controls and authentication
- Regular security assessments
Third-Party Links
Our Website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any website you visit.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the “Last updated” date.
Complaints
If you have concerns about how we handle your personal data, you have the right to lodge a complaint with a supervisory authority. In the Netherlands, this is:
Autoriteit Persoonsgegevens (Dutch Data Protection Authority) Website: https://autoriteitpersoonsgegevens.nl
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
- Email: hello@os.agency
- Website: https://os.agency/contact