At MirAdvisory, we handle your personal data with care and only to the extent necessary. This policy explains how your data is processed when you visit our website, contact us or book a call. We process your data in accordance with the EU General Data Protection Regulation (GDPR). For visitors from Türkiye, we also respect your rights under Turkish Personal Data Protection Law No. 6698 (KVKK).
1. Controller
MirAdvisory · 3065 HB Rotterdam, the Netherlands
Chamber of Commerce (KvK): 97174440 · VAT: NL005253127B21 · Email: info@miradvisory.com
2. What data we process, and why
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact form | Name, company, email, phone (optional), topic, message | Responding to your enquiry | Steps prior to entering into a contract at your request (GDPR Art. 6(1)(b)) and legitimate interest (Art. 6(1)(f)) |
| Booking a call | Name, email, selected date and time, any note you add | Scheduling the call and sending reminders | Steps prior to entering into a contract at your request (Art. 6(1)(b)) |
| Email correspondence | Information you share in your emails | Handling your enquiry | Pre-contractual steps and legitimate interest |
| Website use | Anonymous, aggregated visitor statistics (no personal data, no cookies) | Improving the website | Legitimate interest (Art. 6(1)(f)) |
| Technical logs | IP address, browser details, time of access (server logs) | Security and operation of the website | Legitimate interest (Art. 6(1)(f)) |
We do not add your details to marketing lists, sell them, or share them with third parties for advertising.
3. Cookies
Our website does not use advertising or tracking cookies. Visitor statistics are measured with a cookieless tool, without identifying individuals. Only technical information needed for the website to function (such as your language preference) may be stored. For this reason, we do not show a cookie consent banner.
4. Where your data is stored
All data is stored in the Netherlands or elsewhere in the European Union. We have data processing agreements in place with the providers we use:
- Hosting: Hetzner Online GmbH, Germany (EU)
- Form emails: Brevo, EU data centre
- Call booking: Cal.com, hosted on our own EU server (Hetzner)
- Visitor statistics: Umami, hosted on our own EU server (Hetzner)
- Mailboxes (info@ and ayhan@miradvisory.com): Zoho Mail, EU data centre
5. Retention periods
- Contact form submissions and email correspondence: up to 2 years after your enquiry has been closed; if a business relationship follows, for the statutory retention periods
- Call bookings: up to 1 year after the call
- Server logs: up to 30 days
6. Your rights
Under the GDPR and the KVKK, you have the right to:
- access your data and request a copy
- have inaccurate data corrected
- have your data erased
- restrict processing
- receive your data in a portable format
- object to processing based on legitimate interest
You can send your request to info@miradvisory.com; we respond within one month.
You have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens. If you live in Türkiye, you can also apply to the Personal Data Protection Authority (KVKK Kurulu).
7. Security
We take technical and organisational measures to protect your data against unauthorised access, loss and misuse, including encrypted connections (HTTPS), access controls and trusted EU-based providers.
8. Changes
We may update this policy when needed. The current version is always published on this page.