Privacy Policy
Last updated: 14 October 2026
Algol Labs is a consulting practice for cloud infrastructure, platform engineering and AI systems. This policy explains what personal data we hold, why we hold it, where it goes, how long we keep it, and what you can ask us to do about it. It covers this website, people who contact us, our clients and business contacts, and people in our professional network on LinkedIn.
Composita, our newsroom platform, has its own policy at composita.ai/privacy.
In short: this site sets no cookies, our analytics run on our own servers, we sell nothing, and the data we use to stay in touch with our LinkedIn network stays on hardware we own.
Who we are
Algol Labs is a sole proprietorship (eenmanszaak) owned by Zaid Amireh. It is registered with the Netherlands Chamber of Commerce (KvK) under number 82057605 and based in Rotterdam.
For the processing described in this policy, Algol Labs is the controller: we decide why and how the data is used. Send anything about this policy to privacy@algollabs.com.
When we act for a client
In client engagements we sometimes work on systems that hold personal data belonging to the client, such as data about its users, staff or customers. In that work we are a processor. We handle the data only on the client's instructions and under our agreement with them, and the client's own privacy notice applies.
If your data reaches us this way, contact the client first. If you write to us instead, we will pass your request on without undue delay and help them answer it.
Visiting this website
Analytics. We count page views with Umami, which we host ourselves at analytics.algollabs.com. It sets no cookies, uses no advertising identifiers, and does not follow you to other websites. For each visit it records:
- the page viewed and the site that referred you
- your browser, operating system, device type, screen size and language
- an approximate location (country, region and city)
Umami does not store your IP address. It uses the address briefly to estimate your location and to compute an anonymous visitor identifier. That identifier resets periodically, so visits cannot be linked over a long period.
Server logs. Our web server records each request: your IP address, the time, the address requested and the response status. We use these logs to keep the site secure and to diagnose faults, and we keep them for up to 180 days.
Cookies. This website sets no cookies, so there is no banner to dismiss. Fonts and scripts are served from our own domains, so viewing a page sends no request to a third party.
Legal basis: our legitimate interest (Article 6(1)(f) GDPR) in running a secure website and knowing which pages are useful.
Contacting us
Contact form. The form sends us your name, email address, company and message. It is delivered by Web3Forms, a form service operated by Web3Creative from India. Web3Forms passes your message to our mailbox and keeps a copy for up to three years unless it is deleted sooner. To filter spam, it also checks your IP address and email address with anti-spam services.
Email. Our email is hosted by Proton AG in Switzerland.
Booking a call. When you book through our Calendly link, Calendly processes your name, email address and anything you enter in the booking form on our behalf.
Legal basis: taking steps at your request before a contract (Article 6(1)(b)), or our legitimate interest in answering you (Article 6(1)(f)).
We keep enquiries until you ask us to delete them, or until it is clear the enquiry will not go further. If it turns into an engagement, the next section applies.
Clients and business contacts
For clients, suppliers and partners, we hold:
- contact details for the people we work with: name, business email address, phone number and role
- contracts and correspondence
- invoices and payment records
Legal basis: performing our contract (Article 6(1)(b)) and meeting our legal obligations (Article 6(1)(c)). Dutch tax law requires us to keep financial records for seven years. We keep our books in Moneybird, a Dutch service. Where the law requires it, we share records with the Dutch Tax Administration (Belastingdienst).
People in our LinkedIn network
This data does not come from you directly, so this section is our notice to you under Article 14 GDPR.
Whose data. People connected to Zaid Amireh on LinkedIn.
Where it comes from. LinkedIn. LinkedIn gives every member a copy of their own account data. We obtain ours through LinkedIn's data download and, for members in the EEA and Switzerland, its Member Data Portability API. We do not scrape LinkedIn, automate a logged-in session, use browser extensions that read profiles, or buy data from brokers.
What we hold. We hold:
- your name and LinkedIn profile URL
- your current employer and job title
- the date we connected
- your email address, if your LinkedIn settings share it with connections
- the messages exchanged between you and Zaid on LinkedIn
We do not use the rest of the export.
Why. To find connections who might have a professional reason to hear from us, such as work we could do together, a role, or a referral, and to stay in touch with them.
Legal basis: our legitimate interest (Article 6(1)(f)) in contacting our own professional network about work. We weighed it against your interests:
- you chose to connect
- any contact is one-to-one and about work
- a person writes and sends it
- you can say no at any time
How. The data is processed on a machine we own and operate in the Netherlands. Software on that machine, including a locally run language model, sorts connections by likely professional relevance and drafts a message for each one worth contacting. No third-party AI service or cloud provider receives this data.
Zaid reads every draft and decides whether to send it. Each message is sent by hand, one at a time, on LinkedIn. Nothing in the process makes a decision that has a legal or similarly significant effect on you. We do not send bulk messages, add you to a mailing list, or sell or share this data.
How long. We keep each copy of the LinkedIn data for at most 12 months. Notes on a conversation we are actively having are kept while the professional relationship is active. Backup copies expire within six months.
Saying no. If you would rather not hear from us, reply to Zaid on LinkedIn or write to privacy@algollabs.com. We will mark you as not to be contacted, and that marker stays in place through future imports.
If you ask us to delete your data, we delete everything this processing holds about you. The only thing we keep is a one-way hash of your LinkedIn identifier, so that a later import does not bring you back. It is used for nothing else.
Who else handles your data
We use a small number of service providers, each acting on our instructions:
| Provider | What for | Where |
|---|---|---|
| Hetzner Online GmbH | Hosting for this website, its server logs and analytics | Germany |
| Proton AG | Switzerland | |
| Web3Creative (Web3Forms) | Contact form delivery | India, on Amazon Web Services, Cloudflare and Hetzner infrastructure |
| Calendly LLC | Call booking | United States |
| Moneybird B.V. | Bookkeeping and invoicing | Netherlands |
We may also share data with our bank, with professional advisers who are bound by confidentiality, and with authorities where the law requires it.
When you message us on LinkedIn, LinkedIn handles that message under its own privacy policy.
We do not sell personal data, and we do not share it for advertising.
Transfers outside the EEA
Most processing happens in Germany and the Netherlands. Some of it happens elsewhere:
- Proton (Switzerland): covered by the European Commission's adequacy decision for Switzerland.
- Web3Forms (India) and Calendly (United States): covered by the EU Standard Contractual Clauses in each provider's data processing terms.
Retention at a glance
| Data | Kept for |
|---|---|
| Server logs | Up to 180 days |
| Website analytics | Contains no IP address, name or email address. Kept as traffic history |
| Enquiries | Until you ask us to delete them, or until it is clear the enquiry will not go further. The Web3Forms copy is kept for up to three years |
| Client financial records | Seven years, as Dutch tax law requires |
| LinkedIn network data | At most 12 months per copy. Notes on an active conversation are kept while the relationship is active |
| "Do not contact" marker | For as long as we hold LinkedIn network data, so we can honour your request |
| Backups | Expire within six months |
Security
- All traffic to and from our services is encrypted in transit.
- Only our owner-operator has access to our infrastructure.
- Database backups are encrypted.
- LinkedIn network data stays on hardware we own and is never sent to a third-party AI provider.
- We keep a register of our service providers and review it on a schedule.
If a personal data breach puts your rights at risk, we report it to the Autoriteit Persoonsgegevens within 72 hours. If the risk to you is high, we tell you directly.
Your rights
You have the right to:
- access your personal data
- have it corrected or deleted
- receive a copy in a portable form
- restrict how we use it
- object to how we use it. Where we use it to contact you about our services, your objection is always honoured.
- withdraw consent, where processing rests on consent
Write to privacy@algollabs.com and we will answer within one month. We may ask you to confirm your identity first.
You can also complain to a supervisory authority. In the Netherlands that is the Autoriteit Persoonsgegevens. You can also complain to the authority where you live or work.
Changes to this policy
When this policy changes, we update the date at the top. If a change materially affects how we handle data about our clients, we tell those clients directly.
Contact
Send questions, requests or concerns about this policy to privacy@algollabs.com.