Privacy statement

Convene is a strategic advisory firm specializing in the strategic application and governance of AI. We value transparency in our advice and in our handling of personal data.

Convene is the data controller under the General Data Protection Regulation.

We process only information necessary for our services and communication. This may include:

• Name
• Organization
• Role
• Email address
• Telephone number
• Information submitted through contact forms
• Information supplied for a Strategic AI Audit
• Website usage after analytics consent, including visited pages, session duration, general device information and a pseudonymous visitor identifier

We do not process special category data unless explicitly necessary for a specific engagement and agreed in writing.

Communication

Responding to contact requests and messages.

Services

Delivering strategic analysis, audits and advisory engagements.

Relationship management

Maintaining professional client relationships.

Analysis and improvement

After consent, measuring website use with Google Analytics to improve content and navigation.

Personalization

After consent, using aggregated or pseudonymous insight to develop more relevant content.

Compliance

Meeting statutory obligations including administration and taxation.

We rely on consent for newsletters, analytics, personalization and marketing cookies; contractual necessity for agreed services; legitimate interest for ordinary operations and security; and legal obligations where applicable. Consent can be withdrawn at any time.

We retain personal data no longer than necessary for its stated purpose unless a statutory retention period applies. Newsletter details are linked to a contact record in our protected CRM and retained while you remain subscribed. After unsubscribing, we retain only the minimum evidence needed to respect your choice and previous consent. When data is no longer required, it is securely deleted or anonymized.

We share data only when required for service delivery or legal compliance. This may include hosting and email providers such as Resend, Google for Gemini API form classification, Google Ireland Limited for Analytics only after consent, and suppliers directly involved in an engagement. Email addresses, telephone numbers and IP addresses are not provided to the classification model.

We enter into data processing agreements with processors and remain accountable for these activities.

We never sell your personal data.

We aim to keep processing within the European Economic Area. Google Analytics and certain AI or cloud services may process data elsewhere only under appropriate safeguards such as an adequacy decision, EU Standard Contractual Clauses and supplementary measures.

For form classification, only the necessary business context and message text are sent to Gemini. Name, email address, telephone number, IP address and cookie data are excluded. Every submission is stored in our own system first and remains available for human review.

We use appropriate technical and organizational measures against misuse, loss, unauthorized access and alteration. Measures include encrypted HTTPS connections, strict access controls, logging and monitoring.

If you believe information is not adequately protected, contact info@convene.nl.

Essential cookies and local storage support forms, security and privacy preferences and cannot be disabled.

Essential

Security, sessions, forms and storage of your consent choice. No consent is required.

Analytics and personalization

Google Analytics 4 measurement ID G-XFJYFMZCMQ loads only after consent and helps us understand which content is used. Google Analytics does not store individual IP addresses.

Marketing

This preference prepares the site for potential future advertising services. We currently load no marketing tracker.

Non essential scripts are blocked before your choice. You can change consent through Privacy settings in the footer. Withdrawing Analytics consent stops further measurement and removes associated Analytics cookies from your browser.

Under GDPR you may request access, correction, deletion, restriction, objection and data portability. Send requests to info@convene.nl. We respond as quickly as possible and within one month.

You may withdraw consent at any time. You may also lodge a complaint with the Dutch Data Protection Authority.

We may update this statement when law or services change. The latest version is always available on this page.