Privacy Policy & GDPR Compliance

1. Data Controller Identification

The data controller responsible for the processing of personal and telemetry data under this policy is Antidot Data Dynamics B.V., a private company with limited liability incorporated under the laws of the Netherlands, having its statutory seat in Amsterdam, registered with the Dutch Trade Register of the Chamber of Commerce (Kamer van Koophandel) under registration number 84920194, with principal offices at Keizersgracht 421, 1016 EK Amsterdam, the Netherlands.

2. Scope and Principles of Data Processing

Antidot is committed to upholding the highest standards of data protection under Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR) and the Dutch GDPR Implementation Act (Uitvoeringswet AVG). All data processing is strictly conducted pursuant to the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality.

3. Telemetry and Network Data

In our capacity as a carrier interconnect and network telemetry infrastructure provider, Antidot processes transit metadata (including IP headers, autonomous system numbers, flow metrics, and packet timestamps) solely for the technical execution of routing contracts, DDoS mitigation, and network quality maintenance. Payload contents are never inspected, decrypted, stored, or processed.

4. Legal Basis for Processing (Article 6 GDPR)

Processing of customer contact and technical peering data is performed pursuant to:
• Art. 6(1)(b) GDPR: Performance of contract (provisioning dedicated cross-connects, peering sessions, and SLAs).
• Art. 6(1)(c) GDPR: Legal obligation compliance under Dutch telecommunications law (Telecommunicatiewet).
• Art. 6(1)(f) GDPR: Legitimate interests in protecting network infrastructure integrity and cybersecurity defense.

5. Data Retention Periods

Flow metadata and server connection logs are purged automatically after a rolling window of 14 calendar days, unless an active security incident investigation requires retention under applicable statutory guidelines. Customer billing and contract records are retained for 7 years in compliance with Dutch tax authority requirements (Rijksbelastingdienst).

6. Data Subject Rights

Under the GDPR, individuals have the right to request access to, rectification of, or erasure of personal data, restriction of processing, objection to processing, and data portability. To exercise any of these rights, contact our Data Protection Officer at:
dpo@antidotroskomnadzor.xyz.

7. Supervisory Authority

You have the right to lodge a complaint with the relevant supervisory authority in the Netherlands:
Autoriteit Persoonsgegevens (AP)
Bezuidenhoutseweg 30, 2594 AV The Hague, Netherlands
Website: autoriteitpersoonsgegevens.nl