Privacy Policy

I INTRODUCTION AND SCOPE

Aiosyn B.V., a private company with limited liability, with its registered office and official address at (6525 EC) Nijmegen at the Toernooiveld 300, registered with the Dutch Chambers of Commerce under number 83481435 (Aiosyn, we, us, or our) understands and respects your privacy.

This privacy- and cookie policy of Aiosyn (the Privacy Policy) is applicable to all visitors of the website https://www.aiosyn.com/ (the Website) according to the norms of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the GDPR).

With this Privacy Policy Aiosyn aims to inform you about the processing of your personal data when visiting the Website and/or otherwise communicating with Aiosyn, this Privacy Policy inter alia informs you about what personal data is collected, how it is processed, how long it is stored and what your rights are.

II PRIVACY

Legal basis for processing

Under the GDPR Aiosyn may only process personal data if there is a legal basis for such processing. The legal basis are:

1. Consent;
2. performance of an agreement;
3. legal duty; and
4. legitimate interest of Aiosyn or a third party.

Legitimate interests includes but is not limited to: advertising, marketing, security, auditing, fraud detection, (crime) prevention, (market) research and analysis and improvement of our services, internal management, legal affairs and business management. We indicated below the specific ground(s) that apply to a specific processing of personal data.

What data do we collect and for which purpose?

We collect your contact details to inform you

To answer your requests when you have contacted us for commercial enquiries, complaints and/or other questions, to share relevant business updates including product updates, publications and events with you, to authenticate your identity in case you contact us by electronic means or otherwise and to process and keep you informed about your job application we may process your contact details such as your (first) name, the organisation you work for, phone number and (email)address and address. We only process this data in order to provide you with the asked information or for processing your job application. Legal basis 1. or 4. applies.

For the aforementioned purpose and based on the same legal basis we may also collect other information you actively provided us with, for instance by submitting a contact form through the Website, or sending an email. This refers to any additional details you may include in the respective message.

We collect your usage data to improve our Website

To develop and improve our communication methods and the functionality of the Website and to improve our products, services and the Website, the following data is collected upon each visit to the Website: the page you visited, the website from which you accessed the Website, your device type (PC, laptop, tablet, smartphone), your browser and operating system, and the country the request originates from, which is derived from your IP address. Each page view is reported separately. Nothing is stored on or read from your device for this, and we receive no identifier that would let us link these reports to you or to each other, on a later visit or on another website, and we do not record which third-party websites you visit through the Website. We see the results as totals only, without IP addresses.

Separately from this, Cloudflare processes the technical details of every request to the Website, including your full IP address, because it hosts and delivers the Website and protects it against attacks and abuse. Legal basis 4. applies.

How long do we keep your personal data?

Aiosyn will not retain your personal data longer than necessary. All personal data is deleted as soon as it is no longer required for the purpose it was collected. We are guided by this Privacy Policy, internal Aiosyn record retention schedules, and applicable legal obligations. More details regarding the storage of product support enquiries and commercial requests are included in the “Enquiries” section of this privacy policy.

Who else might receive it?

• Your personal data is only processed by persons working for and on behalf of Aiosyn for the purposes described above.
• When Aiosyn hires trusted third-party service providers for the processing and/or storing of your personal data, they only process such information based on our instructions.
• The data collected by Aiosyn will not be shared with any other third party without your prior consent.
• In case of a request of a legislative authority, Aiosyn may be required to share your personal information with such party by law.

For the Website itself we use one such service provider: Cloudflare, Inc., which hosts and delivers the Website, protects our forms against automated abuse, delivers form submissions to our inbox and provides the cookieless website statistics described under “Cookies” below. Cloudflare processes this data on our instructions, under its data processing addendum and, where personal data is processed outside the European Economic Area, the European Commission’s standard contractual clauses.

Third-party links

The Website may contain links to and from third-party websites. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their use of visitor data. Please read their own privacy policies before submitting any personal information.

Enquiries

Product support

When product support enquiries are sent, these are directly submitted to Aiosyn by means of the Jira Service Management software platform. Jira Service Management collects and processes personal data only where it has legal bases for doing so under applicable laws. Exchanged messages may be stored within the software platform for a period as long as required to fulfill post market surveillance requirements to medical devices, which can be as long as up to 10 years. In case you would like to have such information removed sooner, please let us know via https://support.aiosyn.com/ or contact@aiosyn.com.

Commercial requests

When you send Aiosyn a commercial request (e.g. to use our products, to partner up with Aiosyn, or any other form of interest in our solutions or in working with us) through a form on the Website, your submission (name, email address and other relevant information you provide) is delivered as an email to Aiosyn’s own inbox by Cloudflare Email Service. The Website stores nothing itself. Your details may subsequently be recorded in our customer relationship management system in order to follow up on your request. We keep your message no longer than we need it to handle your request and any follow-up to it. If you would like it removed, please send a written request to Aiosyn via contact@aiosyn.com.

Business updates

Your contact details are recorded in our system and, if you have expressed interest in receiving email marketing communications, it may be used to send you relevant business updates, including product updates, publications and events. You can unsubscribe from these communications at any time.

III Cookies

What are cookies?

Cookies are small files that a website asks your browser to store on your device, and that your browser sends back on later visits. Local storage, fingerprinting and similar techniques do the same thing by other means: they store information on your device, or read information from it.

Please note that we are not informed of your identity when you visit our Website and we do not store personal data in cookies other than the information listed under ”What data do we collect and for which purpose?”.

Cookie policy

The Website places no cookies of its own and uses no local storage or fingerprinting. It sets no statistics, advertising or tracking cookies, and it embeds no third-party content that would set them, which is why it does not ask you for cookie consent.

To monitor the effective use of the Website and maintain it in line with user expectations, we use Cloudflare Web Analytics. It measures page views without storing anything on your device and without any identifier that would allow you to be recognised on a later visit or on another website. We see aggregated totals only. Legal basis 4. applies.

Cloudflare may place strictly necessary cookies in order to deliver the Website and to distinguish human visitors from bots. These are listed, with their names and retention periods, in our Cookie Policy. You can limit cookies from Aiosyn´s Website by amending your browser’s privacy settings.

IV General

Your rights

According to the GDPR, you have certain rights regarding the personal data collected and processed by us. These rights enable you to retain control over the information concerning you, preventing unlawfulness or inaccuracy, and ensure transparency and trust between you and us. More detailed you are entitled to:

A. Right to access

You may request a confirmation of whether personal data that concerns you is processed by us. If such processing occurs, you have the right to access the personal data, as well as obtain some additional information. Such additional information includes the purposes for which the personal data is processed, the categories and recipients of the personal data, and the planned duration of storage. You also have the right to request information on whether your personal information is sent to a third country or international organization.

B. Right to rectification

You have the right to rectification and/or completion of your personal data, provided that the information concerning you is incorrect or incomplete. The rectification must be made without delay.

C. Right to erasure

In some circumstances you may request the immediate erasure of your personal information. Those circumstances include:

• The personal data is no longer required for the purposes for which it was collected or otherwise processed.
• You object to the processing of your personal data under certain rules of applicable data protection law.
• The processing is for direct marketing purposes.
• The personal information concerning you has been illegally processed.

There are some exclusions of the right to erasure, including where processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, or for the establishment, exercise or defense of legal claims.

D. Right to limit processing

Under the following circumstances, you can request a limit to the processing of your personal information:

• You contest the correctness of your personal data.
• The processing is illegal and you request a limitation of the use of your personal information, refusing erasure.
• We no longer require your personal data for the purposes of processing, but you require it to establish, exercise, or defend legal claims.
• You have submitted the objection to processing, pending the verification of that objection.

Where processing of your personal information has been limited, this data, except for its storage, may only be processed with your consent or for the establishment, exercise or defense of legal claims, or to protect the rights of another natural or legal person, or for reasons of important public interest. If processing was restricted according to the above circumstances, you will be informed before the restriction is applied.

E. Right to object

You have the right to submit at any time objection to processing of your personal information on grounds relating to your particular situation, but only to the extent that the legal basis for the processing is that the processing is necessary for: the performance of a task executed in the public interest or in the exercise of any official authority vested in us; or the purposes of the legitimate interests pursued by us or by a third party. If you object under these conditions, we will no longer process your personal data, unless we can provide evidence of compelling reasons for the processing that prevail over your interests, rights, and freedoms, or the processing is for the establishment, exercise or defense of legal claims.

F. Right to data transferability

You have the right to receive your personal information from us in a structured, standard, and machine-readable format. You also have the right to ensure that your personal data is transferred directly from us to another responsible party, when this is technically feasible. The right of data transferability does not apply in the following circumstances:

• Where it would adversely affect the freedom and rights of others.
• For processing personal information that is required to perform a task that is in the public interest or in the practice of public authority conferred to the responsible party.

G. Right to complain to a supervisory authority

You have the right to lodge a complaint with a supervisory authority (for the Netherlands this is the Dutch Authority for the Protection of Personal Data (In Dutch: Autoriteit Persoonsgegevens)) if you consider that our processing of your personal data infringes data protection laws. You may do so in the member state of your habitual residence or employment or the place of the alleged infringement. The supervisory authority shall inform you of the status and results of the complaint.

H. Right to withdraw consent

To the extent that the legal basis for our processing of your personal data is consent, you have the right to withdraw your declaration of consent at any time. The withdrawal does not affect the legality of the processing managed on the basis of the consent up to the date of the withdrawal.

For a complete description of the rights listed above, please read the relevant laws and guidance from your regulatory authorities.

Changes to this Privacy Policy

Aiosyn may modify this Privacy Policy periodically to reflect changes in the way we collect and use personal data or modifications in privacy-related laws and regulations. These updates may be done without notice by updating this posting. We advise you to check our Website from time to time to review the current version.

Governing law

This Privacy Policy shall be governed by and interpreted in accordance with the laws of The Netherlands. Disputes occurring in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the Dutch courts.

Contact

If you have any questions for us regarding this Privacy Policy, the use of our Website, the use of our services or else, please contact us via email contact@aiosyn.com or regular mail by using the following contact details:

Aiosyn B.V.
Attn: Wouter Bulten
Toernooiveld 300
6525 EC Nijmegen
The Netherlands
Chamber of Commerce number: 83481435

Version

This Privacy Policy was last amended on August 24, 2026.