Privacy notice
Last edited 28 July 2026.
This notice explains what personal data we process through the PubliQio website, in particular the demo request form, why we process it, how long we keep it and what rights you have.
1. Data controller
PubliQio is a service of HolidaiButler, a trade name of Frank Spooren, based in the Netherlands.
Email: info@holidaibutler.com
For questions about this notice or the processing of your personal data, please contact us at the address above.
2. What data we process
2.1 Demo requests and contact
When you submit the demo request form, we process:
- Name
- Organisation
- Email address (business)
- Message (optional)
- Consent timestamp (the date and time you agreed to this notice)
- IP address and user-agent (for security, fraud prevention and rate limiting)
2.2 Website analytics
We use Simple Analytics (Amsterdam, Netherlands) for website analytics. Simple Analytics collects no personal data, sets no cookies and is fully GDPR-compliant. No IP addresses are stored or shared with third parties.
3. Purposes and legal basis
| Processing | Purpose | Legal basis (GDPR) |
|---|---|---|
| Demo request / contact | Responding to your request and any follow-up | Consent (Art. 6(1)(a)) |
| IP address on form submission | Security, fraud prevention, rate limiting | Legitimate interest (Art. 6(1)(f)) |
| Website analytics (Simple Analytics) | Understanding website use | Legitimate interest (Art. 6(1)(f)) |
4. Retention
| Data | Retention |
|---|---|
| Demo requests and contact | Up to 12 months after your last contact, unless a client relationship arises |
| IP addresses and security data | 30 days |
| Website analytics (Simple Analytics) | No personal data, no retention limit |
5. Sharing with third parties
We do not share your personal data with third parties for commercial purposes. For this website we use the following processors, all within the European Union:
- Hetzner Online GmbH (Gunzenhausen, Germany): server hosting and database.
- Simple Analytics BV (Amsterdam, Netherlands): anonymised website analytics.
- MailerLite (MailerLite UAB, Vilnius, Lithuania; data hosted within the EU, in Germany and the Netherlands): email communication.
No data is transferred outside the European Economic Area (EEA).
6. Security
We take appropriate technical and organisational measures to protect your data:
- Encrypted storage (AES-256) and encrypted transport (TLS 1.3)
- Server and database exclusively within the EU (Hetzner, Germany)
- Role-based access control (RBAC)
- Rate limiting and honeypot protection on forms
- Regular security reviews
7. Cookies
This website (publiqio.com) sets no cookies and uses no tracking technology that requires consent under the GDPR or the ePrivacy Directive.
8. Your rights
Under the GDPR you have the following rights:
- Right of access (Art. 15)
- Right to rectification (Art. 16)
- Right to erasure (Art. 17)
- Right to restriction of processing (Art. 18)
- Right to data portability (Art. 20)
- Right to object (Art. 21)
- Right to withdraw consent (Art. 7), without affecting processing that already took place
You can exercise your rights by emailing info@holidaibutler.com. We respond within 30 days.
9. EU AI Act transparency
This website does not itself generate AI content. The PubliQio product it presents uses AI to assist content creation, chatbot interactions and translations; every piece passes a human approval workflow before it is published. We describe this as our way of working in line with the EU AI Act; it is not a claim of certification.
10. Complaints
If you believe we process your personal data incorrectly, you have the right to lodge a complaint with the supervisory authority:
Autoriteit Persoonsgegevens, Postbus 93374, 2509 AJ Den Haag, autoriteitpersoonsgegevens.nl
If you are based in another EU member state, you can lodge a complaint with the supervisory authority in your own country.
11. Changes
We may amend this notice. Substantial changes will be announced 30 days in advance on the website. The date at the top of this page reflects the last change.
