Last updated: 31 October 2026
1. Who we are
Lavante provides independent enterprise architecture consulting, advisory services and services related to the Value Driven Architecture Framework (VDAF).
Lavante is responsible for processing personal data for its own website operations, business enquiries, consulting relationships and business administration.
Contact details
Lavante
Rinckberg 39
6374 LP Landgraaf
The Netherlands
Website: https://lavante.nl
Email: info@lavante.nl
Telephone: +31 6 29587143
Privacy Contact: Ralf Wassen
Email: info@lavante.nl
For privacy-related questions or requests concerning your personal data, please contact us using the email address above.
2. Personal data we process
Depending on how you interact with Lavante, we may process:
- Your name and business contact details, including your email address and telephone number where provided.
- Your organisation, position and business relationship with Lavante.
- Information you provide in contact forms, email correspondence or other communications.
- Information necessary for consulting engagements, contracts, invoices and business administration.
- Technical information associated with website access, security and spam prevention, such as IP addresses and browser or device information where processed by our website or service providers.
We aim to collect only personal data that is necessary for the relevant purpose.
Please avoid including sensitive personal information in contact-form messages unless specifically necessary and agreed.
3. Purposes and legal bases
We process personal data for the following purposes:
| Purpose | Legal basis |
|---|---|
| Responding to enquiries and communications | Legitimate interests in responding to business enquiries, or steps requested before entering into a contract where applicable |
| Providing consulting and professional services | Performance of a contract where the individual is a contracting party; otherwise legitimate interests where appropriate |
| Managing business relationships and correspondence | Legitimate interests in maintaining professional relationships |
| Maintaining financial and administrative records | Compliance with legal obligations where applicable |
| Protecting the website against spam, misuse and security threats | Legitimate interests in securing our website and communications, subject to applicable requirements |
| Processing optional activities that specifically require consent | Consent, where obtained |
Where processing is based on legitimate interests, we consider the necessity of the processing and its impact on the individuals concerned.
4. Contact forms and email
When you submit an enquiry through our contact form, we process the information you provide to respond to your enquiry and, where relevant, discuss our services.
Contact-form submissions are not stored in the WordPress database. They are delivered to Lavante by email.
Correspondence may subsequently be retained in our business email system where necessary for handling the enquiry, maintaining a business relationship or meeting applicable legal obligations.
5. Website hosting, security and third-party services
Our website is hosted by STRATO.
The hosting environment may process technical information, including IP addresses and server logs, for website delivery, availability, troubleshooting and security.
We use Google reCAPTCHA v3 to help protect our contact form against spam and automated misuse. This service may process technical and interaction information, including IP addresses, browser information and other signals used to assess automated activity.
We use Google Search Console to understand how our website appears in Google Search and to monitor search performance and indexing. We do not use Google Analytics or Google Tag Manager.
Further details about cookies, similar technologies and applicable third-party processing will be provided following verification of the website’s active technical configuration.
6. Sharing personal data
We may share personal data with service providers where necessary to operate our website, email systems and business services.
These may include website hosting, email, IT support, accounting and other professional service providers, depending on the services used.
We do not sell personal data.
Where required, we enter into appropriate data-processing arrangements with service providers and apply relevant confidentiality and security requirements.
We may also disclose information where required by law or a competent authority.
7. International transfers
Some external services may involve processing or access to personal data outside the European Economic Area.
Where such transfers occur, we assess the applicable legal requirements and safeguards, including adequacy decisions or appropriate contractual safeguards where necessary.
The precise processing locations and transfer arrangements of relevant service providers remain subject to verification.
8. Retention of personal data
We retain personal data only for as long as necessary for the purposes for which it was collected, taking account of applicable legal obligations and legitimate business needs.
Retention periods may differ for enquiries, business correspondence, consulting records, financial administration and technical security logs.
Where a specific retention period has not yet been established, we will apply documented retention criteria based on the processing purpose and applicable requirements.
9. Your privacy rights
Subject to applicable legal conditions, you have the right to:
- Request access to your personal data.
- Request correction of inaccurate information.
- Request deletion of personal data.
- Request restriction of processing.
- Object to processing based on legitimate interests.
- Request data portability where applicable.
- Withdraw consent where processing is based on consent.
You can submit a request to info@lavante.nl.
We may request additional information to verify your identity where reasonably necessary. We do not routinely require a copy of an identity document.
We normally respond within one month. Where legally permitted, this period may be extended, in which case we will inform you.
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): https://autoriteitpersoonsgegevens.nl.
10. Automated decision-making
Lavante does not currently use solely automated decision-making that produces legal or similarly significant effects on individuals as part of its corporate website or general consulting enquiries.
Automated technical processing may occur for website operation, email delivery and security purposes, including spam prevention.
11. Security
Lavante applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, disclosure and alteration.
These include encrypted HTTPS connections for website communications and applicable access and system-security controls.
Specific security measures are subject to periodic review and may be adapted as our services evolve.
If you suspect that personal data has been compromised, please contact info@lavante.nl.
12. VDAF Portal
Lavante is developing the VDAF Portal, a platform for architecture management, assessments, governance and related customer activities.
The portal involves additional processing of user identities, access information, customer-related content and security records.
A separate VDAF Portal Privacy Notice will describe those activities and the applicable responsibilities of Lavante and its c