Your project information is serious. So is your privacy.

1. Who controls your information

Design Dynamics Engineering B.V. is the controller for personal data collected through the Plexus marketing website and demo-request form.

Until a dedicated public privacy email is published, privacy requests may be sent to this postal address. The email contact must be configured before public launch.

2. Information we collect

Information you provide

• Your name, work email address, company, and any optional message submitted when requesting a demo.
• Information you provide in later correspondence about the requested demonstration or commercial discussion.

Technical and campaign information

• The landing-page path and UTM campaign fields associated with a demo request.
• Short-lived, pseudonymized security events used to rate-limit abuse. Raw IP addresses are not stored in the demo-request record.
• Minimal page and interaction analytics if Vercel Analytics is enabled in the deployed environment.

Please do not submit confidential project information, special-category personal data, or engineering source files through the public demo form.

3. Why we use it

• To respond to your request, arrange a demonstration, and take steps toward a possible business relationship.
• To secure the form, prevent spam and abuse, and diagnose delivery failures.
• To understand which public content and campaigns lead to legitimate inquiries and improve the website.
• To establish, exercise, or defend legal claims and meet applicable legal obligations where necessary.

Depending on the activity, processing is based on steps requested before entering a contract, our legitimate interests in responding to business inquiries and securing the service, or a legal obligation. We do not use demo-request data for solely automated decisions that produce legal or similarly significant effects.

4. Service providers and transfers

The website may use service providers for hosting, database storage, bot protection, analytics, and email delivery. The intended production services are Vercel, Supabase, Cloudflare Turnstile, and Resend. The final enabled providers, locations, and transfer safeguards must be verified and documented before launch.

Plexus product deployments can support selectable AI providers. AI providers are not selected by this public form, and project processing is governed separately through the applicable customer agreement, deployment configuration, and subprocessor information.

Where personal data is transferred outside the European Economic Area, we use an applicable legal transfer mechanism and additional safeguards where required.

5. Retention

Demo-request information is retained while we respond to the inquiry and for a limited follow-up period appropriate to the business discussion. We then delete or anonymize it unless continued retention is required for a contract, legal obligation, security investigation, or legal claim. A specific review and deletion schedule must be approved before launch.

Transient rate-limit events are retained only long enough to operate and audit the abuse-control window and are routinely pruned.

6. Your rights

Subject to applicable law, you may ask for access, correction, deletion, restriction, portability, or object to certain processing. Where processing depends on consent, you may withdraw it without affecting earlier lawful processing. We may request information needed to verify your identity.

You may also lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or another competent supervisory authority.

7. Security and changes

We use technical and organizational measures intended to protect personal data, including private database access, server-side validation, bot protection, rate limiting, and restricted credentials. No internet service can guarantee absolute security.

We may update this notice as the service, providers, or legal requirements change. The effective date at the top identifies the current version.