Snapshot 20781
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Skip to main content
v6 · 2026 · Edition 01
§00 / 02·Legal · GDPR
Privacy Policy.
How NextFluent BV collects, uses, and protects personal data processed through the AssessFluence platform.
Last updated: 22 March 2026 · [email protected]
§01 / 02·Articles 1–13
Read the policy
1. Who We Are
AssessFluence is a maturity intelligence platform operated by NextFluent BV, a company registered in Belgium. We act as the data controller for personal data processed through the AssessFluence platform.
Contact: For any privacy-related questions, please contact us at [email protected].
2. Data We Collect
We collect and process the following categories of personal data:
Account data: First name, last name, email address, company name, job title, and password (hashed).
Assessment data: Responses to maturity assessments, scores, dimension breakdowns, and risk flags.
Usage data: Pages visited, features used, timestamps, browser type, and IP address (anonymized where possible).
Organization data: Company name, organizational hierarchy, and team memberships.
Communication data: Support requests, feedback, and email correspondence.
3. Legal Basis for Processing
Under the General Data Protection Regulation (GDPR), we process your personal data based on:
Contract performance (Art. 6(1)(b)): Processing necessary to provide you with the AssessFluence platform services.
Consent (Art. 6(1)(a)): Where you have given explicit consent, such as accepting this privacy policy during signup.
Legitimate interest (Art. 6(1)(f)): For platform security, fraud prevention, and service improvement.
Legal obligation (Art. 6(1)(c)): Where required by Belgian or EU law.
4. How We Use Your Data
Your personal data is used to:
Provide and maintain the AssessFluence platform.
Generate maturity assessments, reports, roadmaps, and benchmarks.
Manage your account, organization, and team memberships.
Send service-related notifications (e.g., assessment reminders, regulatory alerts).
Improve platform functionality based on aggregated, anonymized usage patterns.
Comply with legal and regulatory requirements.
5. Data Sharing & Third Parties
We do not sell your personal data. We may share data with:
Infrastructure providers: Cloud hosting and database services required to run the platform, all within the EU or with adequate safeguards.
AI model providers: For AI-powered features (e.g., report narration, roadmap advice), anonymized or pseudonymized data may be sent to AI service providers. No personally identifiable information is shared.
Your organization admins: Administrators within your organization can view assessment results and team activity as part of their management functions.
Legal authorities: When required by law or court order.
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. Upon account deletion, personal data is removed within 30 days, except where retention is required by law. Anonymized, aggregated data used for benchmarking may be retained indefinitely.
7. Your Rights Under GDPR
As an EU/EEA resident, you have the right to:
Access: Request a copy of your personal data.
Rectification: Correct inaccurate or incomplete data.
Erasure: Request deletion of your personal data ("right to be forgotten").
Restriction: Request limited processing of your data.
Portability: Receive your data in a structured, machine-readable format.
Object: Object to processing based on legitimate interest.
Withdraw consent: Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
8. Data Security
We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, regular security audits, and row-level security policies on all database tables.
9. International Transfers
Your data is primarily stored and processed within the European Economic Area (EEA). If data is transferred outside the EEA, we ensure adequate protection through Standard Contractual Clauses (SCCs) or other approved mechanisms.
10. Cookies
AssessFluence uses only essential cookies required for authentication and session management. We do not use advertising or tracking cookies. No consent banner is needed for strictly necessary cookies under the ePrivacy Directive.
11. Children's Privacy
AssessFluence is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children.
12. Changes to This Policy
We may update this privacy policy from time to time. Material changes will be communicated via email or an in-platform notification. Continued use of AssessFluence after changes constitutes acceptance.
13. Supervisory Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit):
Gegevensbeschermingsautoriteit
Drukpersstraat 35, 1000 Brussels, Belgium
www.gegevensbeschermingsautoriteit.be
NextFluent BV · Belgium · AssessFluence Platform
Privacy Controls and Cookies
We (nextfluent.com) and selected third parties (2) collect personal information as specified in the privacy policy and use cookies or similar technologies for technical purposes and, with your consent, for functionality, experience and “marketing (personalized ads)” as specified in the cookie policy.
You can freely give, deny, or withdraw your consent at any time by accessing the preferences panel. Denying consent may make related features unavailable.
Use the “Accept” button to consent. Use the “Reject” button to continue without accepting.
Press again to continue 0/2