Privacy statement
CertiFlow is a service that processes personal data, and this statement describes which data and what we do with it.
Last updated: 2026-08-09
Who is responsible
MyCreativity is the controller for data collected through this website, and the processor for data customers record in the product. Contact details are at the bottom of every page.
For the data you put into CertiFlow — your installations, your logbook, your staff — you are the controller and we are the processor. A data processing agreement covers that.
Which data, and what for
Signing up for a trial: company name, your name and your email address. Needed to create your account and send the activation link. Basis: performance of a contract.
Contact form: your name, email address, optionally your company name, and your message. Needed to answer your question. Basis: legitimate interest.
Using the product: name, email address, role and language preference of your users, plus the data you record yourself. Basis: performance of a contract.
Visiting this site: we count page views in aggregate, per day and per page. No cookie is set, no IP address is stored and no visitor is recognised. Basis: legitimate interest.
How long we keep it
A sign-up that is never activated disappears after seven days without anything ever having been written to the database.
Contact form messages are kept for at most two years.
Customer data is kept for as long as the account exists and for 30 days after, so you can still export. Then we delete it permanently, having told you first.
Logbook data is immutable for as long as the account exists, because the statutory retention obligation requires it.
Who we share data with
Hetzner Online GmbH (hosting, Germany), Cloudflare (network and encryption) and our email provider, for sending login codes and notifications. A data processing agreement is in place with each.
No data is transferred to countries outside the European Economic Area.
We do not sell data and do not use it for advertising or profiling.
Cookies and tracking
This website sets no tracking cookies and uses no third-party analytics. That is also why there is no cookie banner: there is nothing to consent to.
The product itself uses one functional cookie to remember your session. Without it you cannot stay signed in.
Your rights
You can request access to your data, have it corrected or deleted, and object to processing. Send an email and we will respond within one month.
If you disagree with how we handle it, you can complain to the Dutch Data Protection Authority.