Legal / Privacy
Last changed 11 September 2026
Three fields identify you or your business and are required, because without them we cannot come back to you:
Everything else on the form is about the business, and those answers only count as personal data because they arrive attached to the three above: roughly how much customer mail you get, and what eats most of your hours.
Three more things are recorded without you typing them: your IP address, the browser identification your browser sends, and the time of submission. They are there to keep the form usable — spam defence, and being able to work out what went wrong if a submission ever fails to arrive.
Anything the form does not ask for is discarded on arrival and never stored. If something extra is appended to a submission, it never reaches the file.
You fill the form in to find out whether we can work together, so the legal ground for the answers you type is taking steps at your request before entering into a contract (GDPR article 6.1.b). The IP address, browser identification and timestamp rest on our legitimate interest (article 6.1.f) in keeping a public form from being flooded and in being able to diagnose it if something goes wrong.
We never ask for sensitive data — health, beliefs, anything of that kind — and the form has no field where it would fit.
A submission takes exactly two paths, and both of them stay inside the EU:
Our web server keeps ordinary technical logs of the requests it serves — address, time, page, browser identification.
Beyond the mailbox, nobody else receives it. Nothing in it is sold, passed on, published, or used to train a model.
We record our calls. You will hear that from us at the start of the call, before anything is recorded. Say no and we do not record; the call goes ahead either way.
The reason is narrow: what gets agreed in a conversation should not live only in someone's memory. A recording is where a promise made in March is still findable in November. It is also how we learn which questions keep coming up, so the next person gets a better answer.
The recording and the written transcript stay on our own machine. The audio is transcribed on that same machine, so no outside service hears the call. It follows the same clock as the rest of this page: twelve months if nothing comes of it, and for as long as we work together if you become a client. Ask for it to go and it goes, at any point.
You do not have to wait for any of those terms. Ask, and it goes.
The GDPR gives you a set of rights over your own data, and there is no procedure standing between you and them:
Mail info@dsns.ai. You usually have an answer the same week, and never later than a month. Unhappy with how we handled it? You can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
This page covers the intake form and this website. It does not cover what happens once we build something for you.
When an agent runs for a client, it works on that client's own data on that client's own server — their customer mail, their orders, their figures. There we are the processor and the client is the controller: they decide what happens to it, we only carry it out. That relationship belongs in a written data processing agreement, signed before anything is connected, and it is a separate document from this one.
How that side is built — what an agent may do, who else sees anything, and what we do not claim — is on the legal page, alongside the Service Agreement and Data Processing Agreement.
When this page changes, the date at the top changes with it. If a change affects what happens to a submission we already hold, whoever sent it hears about it by mail rather than by a quiet edit.