This is the Privacy Statement (the "Statement") of dembrane. It explains who we are, which personal data we process about you, why, and what we do with it. Personal data is any information that can directly or indirectly identify you. We may amend this Statement from time to time; the current version is always available on the bottom banner of our website. Last updated: 18 June 2026 (v2.0).

When does this Statement apply?

This Statement explains how we collect and use your personal data when you, for example: visit or use our website or social channels; subscribe to our newsletter; take part in a session offered directly by dembrane; use one of our products (such as dembrane Echo) as a member of an organisation or workspace, or as an invited external collaborator; purchase or take our services; supply goods or services to us; apply for a job; or contact us.

Important note for participants. This Statement applies only where dembrane is the controller of your data. When we process personal data on behalf of another controller (for example, a client who runs a session through our platform), we act as a processor and that client's privacy notice applies. If you took part in a session run by a client, please see our Data Policy for Participants.

Who is dembrane?

dembrane facilitates and enhances participation activities (events, stakeholder engagement, consultations) and develops software and methods to support them. "we", "us" or "dembrane" means dembrane B.V. (Dutch Chamber of Commerce no. 89391438), based in 's-Hertogenbosch.

What personal data do we process, and why?

1. Website visitors. Device information (IP address, device and operating system), log data (pages, time, referrer) and approximate location (from your IP).

• Operating and securing the website: legitimate interest (Art. 6(1)(f)).
• Analytics to understand and improve usage: consent for non-essential cookies (Art. 6(1)(a)). By default our website runs cookie-free; analytics cookies and session replay are enabled only if you accept. See our cookie policy and the banner on our website.

2. Newsletter subscribers. Name, organisation and email.

• Sending news about our services, events and developments: consent (Art. 6(1)(a)). You can unsubscribe at any time.

3. Participants in sessions run directly by dembrane. Contact details; audio recording (subsequently anonymised); information shared during the session.

• Communicating with participants and gathering insights: consent (Art. 6(1)(a)). See the Data Policy for Participants.

4. Users of our products. Account contact details (name, email, phone); organisation, workspace and collaboration data (memberships, roles including the external-collaborator role, invitations); product-usage and diagnostic data.

• Creating accounts and providing the platform and support: performance of a contract (Art. 6(1)(b)).
• Product analytics and error tracking to improve and secure the product (pseudonymous usage and diagnostic data, hosted on PostHog EU Cloud): legitimate interest (Art. 6(1)(f)).
• Sending transactional and account email: performance of a contract.

5. (Employees of) (potential) clients. Contact details; financial information (bank or payment details).

• Identifying and communicating for the collaboration: performance of a contract (Art. 6(1)(b)).