Who we are (data controller)
Kuberdon is a trading name of JB CAPITAL BV, a company registered in Belgium.
- BCE / VAT
- BE 1005.101.429
- Registered address
- Strijdersstraat 64, 3000 Leuven, Belgium
- Contact for privacy matters
- [email protected]
- Data Protection Officer
- Not appointed; not legally required for the scale and nature of our processing.
What personal data we collect
We only collect data you choose to give us, plus minimal technical data needed to run the site.
- Contact and audit-diagnostic formsYour name, work e-mail, organisation, role, the answers you select about your AI landscape, and any message you write.
- E-mail correspondenceThe content of e-mails you send us and our replies.
- Technical and server logsIP address, browser type, and request data, kept briefly for security and to keep the site running.
- Analytics (only with your consent)Privacy-friendly, aggregated usage statistics — see the Cookie Policy for details.
We do not intentionally collect special categories of data (health, beliefs, etc.). Please do not include such data in free-text fields.
Why we use it and our legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Answering your enquiry and scoping a possible audit | 6(1)(b) steps prior to a contract, and/or 6(1)(f) legitimate interest in responding to business enquiries |
| Sending you the information or proposal you asked for | 6(1)(b) / 6(1)(f) |
| Keeping the site secure and operational | 6(1)(f) legitimate interest |
| Privacy-friendly analytics | 6(1)(a) consent |
How long we keep it
Form and enquiry data is kept for up to 18 months from your last contact with us, after which it is deleted, unless a longer period is required for a contract or by law (for example invoicing and accounting records). You can ask for deletion sooner at any time.
Where your data lives (EU data residency)
By default your data is stored and processed on servers in the EU/EEA. We do not transfer personal data outside the EU/EEA unless adequate safeguards are in place, and we will say so here if that ever changes.
Who we share it with (processors and sub-processors)
We use a small number of carefully chosen service providers, each bound by a data-processing agreement (DPA):
- Website hosting
- DigitalOcean App Platform — Amsterdam (AMS) region.
- E-mail and form delivery
- Resend — EU residency tier.
- Analytics (only with your consent)
- PostHog — EU-hosted (eu.posthog.com).
We never sell your personal data and we do not use it for third-party advertising.
The EU AI Act readiness scorecard
When you complete the scorecard, Kuberdon receives the answers you select, your work email, your organisation, and the computed result, so we can follow up on the gaps you report and respond to any questions.
What we receive
- Your work email address.
- Your organisation name.
- Your answers to the sixteen scorecard questions.
- Your computed score, tier, and per-category breakdown.
- The language version of the page you used.
- Technical metadata: IP address, browser type, timestamp.
Retention. Up to eighteen months after your last contact with us, then deleted.
Residency. EU/EEA only. Hosted on DigitalOcean App Platform (Amsterdam) and sent via Resend (EU residency).
Recipients. Inside Kuberdon. We do not sell or share your data with third parties beyond the processors listed above.
Your rights
Under the GDPR you have the right to access your data; correct it; have it erased; restrict or object to processing; data portability; and withdraw consent at any time (without affecting prior lawful processing). To exercise any of these, e-mail [email protected].
You also have the right to lodge a complaint with the Belgian supervisory authority: the Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Rue de la Presse 35, 1000 Brussels — [email protected].
Changes to this policy
We may update this policy as Kuberdon grows. The current version and its date will always be shown here.