Privacy Policy

About this statement

This website processes as little personal data as possible. This statement explains who is responsible, what data is processed, why, and what your rights are.

It applies only to the CropXR Resilience Hub website, not to the Resilience Hub data platform services that the website links to (see 'Other websites and services').

Who is responsible

CropXR ('we', 'CropXR') is the controller for the personal data processed through this website. Our contact details are in the Legal notice.

For privacy questions or requests, contact us at info@cropxr.org.

What we process, why and on what legal basis

Server logs. When you visit this website, the hosting service automatically records technical data: your IP address, the date and time of your visit, the pages requested, and your browser and device type. We use this data to deliver the website, keep it secure and fix errors. The legal basis is our legitimate interest in keeping the website secure and working (GDPR article 6(1)(f)). Logs are kept only as long as needed for security and troubleshooting, as set by the hosting provider.

Email. If you email us at info@cropxr.org, we process your name, email address and the content of your message to answer your question or request. The legal basis is our legitimate interest in replying to people who contact us (GDPR article 6(1)(f)). We keep your message until your request has been handled, and then for up to 12 months.

This website has no contact form, newsletter sign-up, user accounts or comment function. We do not use your data for automated decision-making or profiling, and we do not sell personal data.

Cookies

This website uses only functional cookies. These are needed for the website to work and do not track you. Under the Dutch Telecommunications Act, no consent is required for functional cookies, so there is no cookie banner.

We do not use analytics, advertising, social-media or other tracking cookies. At present the website sets no cookies at all.'

You can delete or block cookies in your browser settings. The website may then work less well.

Who receives your data

We share personal data only with parties that help us run the website, and only as far as necessary: our hosting provider, the operator of the DataXR GitLab Pages service (Gitlab Inc, United States), which stores the website and its server logs, and authorities, where we are legally required to do so.

Other websites and services

This website links to other websites and to the services of the Resilience Hub data platform. These are outside the scope of this statement. They have their own privacy statements and terms, which we recommend you read before using them. We are not responsible for how those websites and services process personal data.

This website does not embed videos, maps or other third-party content, and fonts are hosted locally, so no data is sent to third-party font or content providers.

Security

We take appropriate technical and organisational measures against loss, misuse and unauthorised access, including encrypted (HTTPS) connections and access restricted to authorised staff.

Your rights

Under the GDPR you have the right to access your personal data, to have it corrected, to have it erased, to restrict or object to its processing, and to receive your data in a portable format.

To exercise a right, email info@cropxr.org. We may ask you to identify yourself and will respond within one month. We may refuse a request where the law allows or requires us to keep the data.

If you are not satisfied with our answer, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).

Changes to this statement

We may update this statement. The current version is always on this page. Last updated: 05/10/2026.