geoFluxus B.V.
Last updated: November 2025
geoFluxus B.V. (“geoFluxus”, “we”, “our”, “us”) operates the website www.geofluxus.com and provides access to the geoFluxus Waste Data Intelligence Platform available at https://prod-afvalprofiel.geofluxus.com (“Platform”).
We are committed to protecting your privacy and processing personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable laws.This Privacy & Cookie Statement explains how we handle personal data when you visit our website, communicate with us, or use our Platform.
1. Roles Under GDPR
Depending on the context, geoFluxus processes personal data in two different roles:
1.1. geoFluxus as Data Controller (Website & Communications)We act as Data Controller when we process personal data in relation to:Visits to our websiteContact form submissionsSales and marketing communicationsJob applicationsCookies and analytics on our websiteGeneral business correspondence
1.2. geoFluxus as Data Processor (Platform Services)When providing Platform services to our clients (organizations using geoFluxus to manage waste data), we act as a Data Processor.
Our clients are the Data Controllers and determine:What data is uploadedThe purposes of data processingAccess and retention policiesWe process this data solely on their instructions and under a Data Processing Agreement (DPA).
2. Personal Data We Process
2.1. Website or direct contact
NameEmail addressPhone number (if provided)Contents of your message
2.2. Platform user accounts (Processor role)
NameEmail addressRole and permissionsAuthentication dataUser activity logs (e.g., uploads, changes, login timestamps)
2.3. Uploaded client data (Processor role)
Files uploaded by clients may occasionally contain names of individuals (e.g., hauler contact names).
Clients remain responsible for ensuring lawful disclosure of this data.
2.4. Job applicants
Name, address, place of residenceEmail address and phone numberCV, cover letter, salary expectationsReferences and any other information you providePublicly available information from social media (if relevant)
2.5. Analytics data
Using PostHog, we collect:IP address (anonymised)Device and browser informationPages visitedClick and navigation behaviorNo third-party marketing trackers are used.
3. Legal Bases for Processing
We process personal data on one or more of the following legal grounds:
- Performance of a contract When creating Platform accounts, providing support, or responding to contact requests.
- Legitimate interest For website analytics, improving our services, ensuring system functionality, and handling job applications.
- Consent When legally required, for example if we retain an applicant’s information for longer than 6 weeks.
- Legal obligation For example, maintaining data required for tax or accounting rules.
4. Purposes of Data
Processing Purpose Categories of Data Legal Basis
Providing access to the PlatformAccount data, logsContractSupporting clients as part of the serviceAccount data, communicationContractResponding to contact requestsContact details, message contentContractOperating and improving the websiteAnalytics dataLegitimate interestJob application processingApplicant informationLegitimate interest / consentBusiness administrationContact details, correspondenceLegal obligation / legitimate interest
5. Retention Periods
We retain personal data only as long as necessary for the purposes described above or as required by law.
Platform data: retained according to the contract with each client (controller-defined).
Website contact requests: up to 2 years after last contact.
Job applications: Up to 6 weeks after a position is filled.Up to 1 year only with your consent.
Analytics data: kept for limited periods as configured in PostHog.
Administrative records: as required by statutory obligations.
6. Sharing of Personal Data
We share personal data only when necessary and only with trusted service providers who act under written agreements.
6.1. Categories of processors
Cloud hosting providers (AWS – EU regions)File storage (Dropbox Business – EU storage configured)Email and productivity (Google Workspace – some processing in the US)Analytics provider (PostHog – EU first, but infrastructure may vary by region)Document processing (Google Document AI – US processing)These parties process data solely on our instructions.
6.2. Third-country transfers
Some service providers process data outside the EEA (for example, Google Document AI and Google Workspace).When this occurs, we ensure appropriate safeguards, including:EU Commission Standard Contractual Clauses (SCCs)Data Processing AgreementsEncryption and minimisation where appropriate
7. Cookies and Similar Technologies
We use cookies and similar technologies to understand how visitors use our website and to improve its performance.
7.1. Cookies used
We only use PostHog for privacy-friendly website analytics.
Cookie/ToolPurposeTypeRetentionPostHogAnalytics (user navigation, interaction patterns)First-partySession or limited durationWe do not use:Marketing or advertising cookiesThird-party tracking cookiesSocial media tracking pixels
7.2. Managing cookiesYou can configure your browser to refuse cookies or delete existing cookies.
Some parts of the website may not function correctly without necessary cookies.
8. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of access
- Right to rectification
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to object
- Right to data portability
- Right to withdraw consent (where applicable)
To exercise any of these rights, please contact us at privacy@geofluxus.com.
We may request proof of identity to ensure your data is not shared unlawfully.We will respond within one month, extendable by two months if necessary.
9. Contact Information
Legal Address (Registered Office)
geoFluxus B.V.
Slaghekstraat 36-A
3074LM Rotterdam
The Netherlands
Operational Office (Visiting Address)
Stationsplein 45 (unit 53)
3013 AK Rotterdam
The Netherlands
General Contact
info@geofluxus.com
Privacy Contact
privacy@geofluxus.com
10. Changes to This Statement
We may update this Privacy & Cookie Statement when our services or processing activities change.
The most recent version will always be published on our website with an updated revision date.
