Privacy notice
Last updated 4 November 2026.
Who is responsible
Elli.Z.G., trading as MeshSat, Floresstraat 17, 2315 HP Leiden, the Netherlands. Chamber of Commerce (KvK) 99812584. Write to hello@safertogether.eu with any question about your data.
What we process
When you send a request: your organisation, country, name, function, email address, phone number, the number of meeting points, your message and the language of the page. We also keep the time and the IP address of your request and of your confirmation, as proof that you confirmed it.
Why, and on what legal basis
- To answer your request or prepare a quote: steps you asked for before a possible contract (Art. 6(1)(b) GDPR). For staff of public bodies, our legitimate interest in answering the body you work for (Art. 6(1)(f)).
- To email you about the MeshSat Resilience Hub, only if you tick the box and then confirm by email (consent, Art. 6(1)(a), double opt-in).
- To keep proof of that consent (Art. 7(1) with Art. 6(1)(c) and (f)).
- To keep bots out of the form (legitimate interest, Art. 6(1)(f)).
How a request works
After you send the form, we email you a link to confirm. Only after you confirm does the request reach our contact system and a person answer it. Requests that are not confirmed are deleted after 30 days.
Where it is processed
On our own servers in Europe: the web edge in Switzerland and Norway, the application, database and contact system in Norway, and the mail relay in the Netherlands. Our email is hosted by Proton AG in Switzerland, a country with an EU adequacy decision. This site is not served from outside Europe.
The form's bot check is Cloudflare Turnstile. Cloudflare is a US company. The check loads from challenges.cloudflare.com and sends technical data about your browser to Cloudflare; transfers rely on the EU-US Data Privacy Framework and standard contractual clauses. So the site is hosted in Europe, but this one check is not.
How long we keep it
- Requests that are not confirmed: deleted after 30 days.
- Your message text: removed from the application 30 days after it reaches our contact system.
- Contact records: 24 months after our last contact with you.
- Proof of consent: as long as the consent is active, and 3 years after you withdraw it.
A request that our web application firewall flags may be logged with its content, for security purposes.
Your rights
You can ask for access to your data, and for it to be corrected, erased, restricted or handed over, and you can object to its processing. You can withdraw consent at any time, through the unsubscribe link in every email or by writing to hello@safertogether.eu. You can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority in your own country. We make no automated decisions about you.
Cookies
This site sets no cookies of its own and runs no analytics. Cloudflare Turnstile may store what it needs to tell people from bots; see Cloudflare's own notice.