Privacy policy
v1.0
This privacy policy covers thethingsindustries.com only (marketing and lead capture). The Things Stack and The Things Network have their own policies.
1. Who we are
This privacy policy explains how The Things Industries B.V. (“TTI”, “we”, “us”) handles personal data when you visit thethingsindustries.com (the “Website”) or contact us through it. We are the controller of that data under the EU General Data Protection Regulation (GDPR).
Company: The Things Industries B.V.
Address: Singel 542, 1017 AZ Amsterdam, the Netherlands
Chamber of Commerce (KvK): 64725189
Privacy contact: privacy@thethingsnetwork.org
2. What data we collect
We only collect what you give us through forms, plus basic usage data about how the Website is used.
Category | Examples | How we get it |
|---|---|---|
Contact and sales enquiries | Name, email address, company, your message | Contact and sales forms |
Chat conversations | Name, email address, chat content | Live chat (Intercom) |
Usage and device data | IP address, browser and device type, pages visited, referring site, time of visit | Google Analytics (via Google Tag Manager), Framer and server logs |
We do not ask for sensitive data (such as health or political views). Please don’t include it in form messages.
3. Why we use it and our legal basis
Each use rests on one GDPR legal basis (Article 6).
Purpose | Legal basis |
|---|---|
Replying to your enquiry, preparing a quote or demo | Steps before a contract at your request (6(1)(b)) or legitimate interest in answering business enquiries (6(1)(f)) |
Following up with you as a business lead | Legitimate interest in B2B sales (6(1)(f)); you can object at any time |
Answering chat messages | Legitimate interest in helping visitors (6(1)(f)) |
Running, securing and improving the Website | Legitimate interest (6(1)(f)) |
Analytics and chat cookies | Consent (6(1)(a)), given through the cookie banner |
Meeting legal obligations, such as record keeping | Legal obligation (6(1)(c)) |
We do not use your data for automated decisions with legal or similarly significant effects.
4. Cookies and similar technologies
We only place non-essential cookies after you accept them in the cookie banner. You can change your choice at any time in the cookie settings.
Type | What it does | Consent needed |
|---|---|---|
Strictly necessary | Keeps the Website working and secure, remembers your cookie choice | No |
Analytics | Measures visits and page use with Google Analytics, loaded through Google Tag Manager | Yes |
Functional | Enables live chat with Intercom | Yes |
5. Who we share it with
We do not sell your data. We share it only with service providers who process it for us under a data processing agreement, and only where needed for the purposes above.
Provider | Role |
|---|---|
Framer | Website hosting and forms |
Our CRM provider | Storing and following up enquiries sent through our forms |
Google (Analytics, Tag Manager) | Website analytics, with your consent |
Intercom | Live chat, with your consent |
Infrastructure providers, e.g. AWS | Hosting and running our systems |
We may also share data with our professional advisers, when required by law, or as part of a merger or acquisition (we will tell you first).
International transfers. Some providers are based outside the European Economic Area. Where they are, we rely on the EU–US Data Privacy Framework, an adequacy decision or the European Commission’s Standard Contractual Clauses.
6. How long we keep it
We keep personal data only as long as we need it for the purpose it was collected for, then delete or anonymise it. Data we must keep by law, such as invoicing records, is kept for 7 years under Dutch tax law.
7. Your rights
You can ask us to:
give you a copy of your personal data (access)
correct inaccurate data (rectification)
delete your data (erasure)
restrict or stop certain processing, including objecting to direct marketing (restriction and objection)
send your data to you or another organisation in a common format (portability)
withdraw consent at any time, without affecting earlier processing
Email privacy@thethingsnetwork.org. We reply within one month and may ask you to confirm your identity.
If you are unhappy with how we handle your data, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the authority in your own EU country.
8. Security, children and other services
Security. We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS) and access controls with our providers.
Children. The Website is aimed at businesses and is not intended for children under 16. We do not knowingly collect their data.
Other websites. The Website links to sites we do not control, such as LinkedIn and GitHub. Their own privacy policies apply.
Our products. This policy covers the Website only. Using The Things Stack (including The Things Stack Cloud and the TTI account portal) is covered by our End User License Agreement and, where applicable, a data processing agreement. The Things Network has its own privacy policy.
9. Changes and contact
We may update this policy when our Website or tools change. The date at the top shows the latest version; we will announce significant changes on the Website.
Questions? Email privacy@thethingsnetwork.org or write to The Things Industries B.V., Singel 542, 1017 AZ Amsterdam, the Netherlands.