Privacy Policy

Introduction

Stonewell (hereinafter: "Stonewell") respects the privacy of its website visitors, in particular their rights regarding the automated processing of personal data. We have therefore formulated and implemented a policy that offers our clients full transparency about the processing of personal data, the purpose of that processing and the ways to exercise your legal rights in the best possible manner.

This policy describes which data we process, why, and what rights you have. Where we need your consent for a processing activity, we ask for it explicitly and in advance; merely visiting this website never counts as consent. The version of this privacy policy currently available is the only version that applies while you visit our website, until a new version replaces the current one. Last updated: September 2026.

Which data we process

Contact and forms: if you fill in a form or email us, we process the data you provide yourself (such as name, email address, company name and your message) in order to answer your question and maintain the relationship. These messages reach us by email.

Scheduling appointments: the booking buttons on the website open a Calendly (Calendly LLC, United States) scheduling window in a new tab, where that service processes the data you enter there, such as name, email address and the chosen time. On the industry pages, an embedded Cal.com (Cal.com, Inc., United States) scheduling window appears on our own page instead. Both act as an independent party for their own platform; see their own privacy policy for that processing.

On the industry pages, that scheduling window is a window of another website (an iframe from app.cal.com) inside our page. Whatever happens in it, happens on Cal.com's domain and not on ours: we cannot look inside it and we cannot place or read cookies there. Cal.com may use storage within that window that is needed to complete a booking, and our cookie choice does not apply there. The window only loads at the moment it comes into view, so as long as you do not scroll to it, nothing is fetched from Cal.com.

The booking buttons elsewhere on the site are not an embedded window, but an ordinary link that opens Calendly in a new tab: you leave our website by doing so. Whatever happens on that tab happens on Calendly's domain and not on ours: we cannot look inside it and we cannot place or read cookies there.

If you would rather have no contact with Cal.com or Calendly at all, email us at info@stonewell.ai and we will schedule the appointment by hand.

Customer videos: on a case with a video embed, there is a window from YouTube (Google Ireland Limited), in the privacy-friendly variant without cookies for personalisation (youtube-nocookie.com), inside our page. Whatever happens in it, happens on YouTube's domain and not on ours: we cannot look inside it and we cannot place or read cookies there. The window only loads at the moment it comes into view, so as long as you do not scroll to it, nothing is fetched from YouTube.

Technical log files: with every visit, our hosting party processes technical data such as IP address, browser type and requested pages in log files, for the security and functioning of the website.

Definitions

Website (hereinafter: "Website"): www.stonewell.ai

Party responsible for the processing of personal data (hereinafter: "the controller"): Stonewell B.V., established in Etten-Leur, the Netherlands, Chamber of Commerce number: 42149801.

Access to the website

Access to and use of the website are strictly personal. You will not use the data and information from this website for your own commercial, political or advertising purposes, nor for commercial offers, in particular unsolicited electronic offers.

Content of the website

All brands, images, texts, comments, illustrations, (animated) images, video images, sounds and all technical applications that may be used to make this website function, and more generally all components used on this website, are protected by intellectual property law. Any reproduction, repetition, use or modification, in any way whatsoever, of all or only part of it, including technical applications, without the controller's prior written consent, is strictly prohibited. The fact that the controller does not take immediate action against an infringement cannot be regarded as tacit consent, nor as a waiver of any right to prosecute the infringing party.

Management of the website

With a view to the proper management of the site, the controller may at any time: suspend, interrupt, limit or refuse access to the website for a particular category of visitors; remove all information that may disrupt the functioning of the website or that conflicts with national or international law or with internet etiquette; make the website temporarily unavailable in order to carry out updates.

Responsibilities

The controller is not liable for any malfunction, interruptions, difficulties or interruptions in the functioning of the website that cause the (temporary) unavailability of the website or one of its functionalities. You are yourself responsible for the way in which you connect to our website. You must take all appropriate measures to protect your equipment and data against dangers such as viruses on the internet. You are furthermore responsible for which websites you visit and which information you look for.

The controller is not liable for legal proceedings brought against you: because of the use of the website or of services accessible via the internet; for breaching the conditions of this privacy policy.

The controller is not liable for any damage suffered by you or third parties or your equipment as a result of your connection to or use of the website, and you will refrain from any subsequent (legal) action against the controller.

If the controller becomes involved in a dispute as a result of your (mis)use of this website, it is entitled to recover from you all damage arising from it.

Data collection

Your personal data is collected by Stonewell and (one or more) external processors. Personal data means all information relating to an identified or identifiable natural person ('data subject'). An identifiable natural person is someone who can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

The personal data collected on the website is used mainly by the controller to maintain a (commercial) relationship with you and, where applicable, to process your orders. It is recorded in an (electronic) register.

Your rights regarding information

In accordance with article 13(2)(b) GDPR, every data subject has the right to information about and access to, rectification, erasure and restriction of the processing of their personal data, as well as the right to object to the processing and the right to data portability. You can exercise these rights by contacting us at info@stonewell.ai. Every request must be accompanied by a copy of a valid identity document, on which you place your signature and state the address at which we can contact you.

You will receive a reply from us within one month of the request submitted. Depending on the complexity and the number of requests, this term may be extended by two months.

If you disagree with how we handle your data, you have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). We would appreciate it if you contacted us first at info@stonewell.ai, so that we can resolve it together.

Legal obligations

In the event of a breach of any law or regulation of which a visitor is suspected and for which the authorities need the personal data collected by the controller, this data will be provided to them following an express and reasoned request from those authorities, after which this personal data no longer falls under the protection of the provisions of this privacy policy. If any information is necessary in order to access certain features of the website, the controller will indicate the mandatory nature of this information at the moment the data is requested.

Collected data and commercial offers

You may receive commercial offers from the controller. If you no longer wish to receive these, please send us an email to the following address: info@stonewell.ai.

If, during a visit to our website, you come across personal data of other data subjects, you must refrain from collecting it, from unauthorised use, or from any other act that constitutes an infringement of the privacy of the data subject(s) in question. The controller is not responsible in these circumstances.

Retention of data

The collected data is used and retained for the period determined by law.

Cookies and measurement

This website does not place any cookies of its own. We use no tracking cookies, no advertising cookies, and we do not carry out profiling.

At this time we do not measure use of this website with a script of our own, which is why no cookie window appears either. If we do start measuring, we will first ask for your consent, and in that same step this text will be extended with exactly what is placed.

Embedded third-party services, such as Cal.com's scheduling window on the industry pages and the customer videos from YouTube, may use storage within their own window that is necessary to make that service work. That happens on that party's domain, and only at the moment you use that window.

The booking buttons elsewhere on the site are not an embedded window but an ordinary link: it opens Calendly in a new tab, on Calendly's own domain. We do not place or read cookies there; whatever happens on that tab happens outside our website.

Images and products offered

No rights can be derived from the images, illustrations and texts accompanying a product offered on our website.

Liability in the event of data breaches

If there is a data breach caused by factors beyond Stonewell's reasonable control, including but not limited to hacking attacks on our data management platforms, security flaws in the website software, or other unforeseen circumstances, Stonewell is not liable for any damage claims, demands or losses in whatever form. Within 21 days of discovering a data breach, Stonewell will notify all parties involved. This includes clients, users and relevant supervisory authorities, as required under the applicable legislation, including the General Data Protection Regulation (GDPR). Stonewell will take all reasonable measures to minimise the impact of the data breach and to prevent further damage.

Regardless of the nature or scale of the data breach, Stonewell can never be held liable for any form of data breach. This includes, but is not limited to, direct, indirect, incidental, special or consequential damage arising from the data breach, even if Stonewell was aware of the possibility of such damage.

Users of Stonewell's services are responsible for implementing appropriate security measures on their own systems and networks. Stonewell is not liable for data breaches arising from negligence or careless conduct by users, such as failing to secure passwords adequately or failing to update software.

Applicable law

These terms are governed by Dutch law. The court in the district of Breda has exclusive jurisdiction if a dispute arises about these terms, unless a statutory exception applies.

For questions, product information or information about the website itself, you can contact: info@stonewell.ai