Legal

Privacy & Cookies Policy

This version is effective as of 21 July 2026.

Introduction

In this Privacy & Cookie Policy we explain how Third Rule B.V., through the websites thirdrule.ai and ainotaris.eu, collects, uses and (where relevant) discloses personal data.

This Privacy & Cookie Policy applies solely when you visit our websites. Our websites and services are intended exclusively for business users and professionals. We do not intend to collect personal data from website visitors under the age of 16.

Which data

The personal data we collect depends on your relationship with us. To that end, we may collect the following personal data about you:

  • Name and contact details (first and last name, e-mail address, postal address and telephone number);
  • Work-related information (job title and other employment or education information);
  • Account data (passwords and other security information for verification and access);
  • Financial information (bank account numbers and credit and debit card numbers for processing payments);
  • Usage information (behavioural information about how you navigate our website);
  • Computer, device and connection information (IP address, browser type, version and location, cookie or tracker identifiers and related information);
  • Any other information you share through our websites and other products and services, including online chat communication.

How is data collected?

We may collect personal data from the following sources:

  • Direct interactions (when you use the website, register for our services or communicate with us);
  • Third-party data (information on third-party websites that you have made publicly available, or that is provided by third-party sources, including but not limited to government agencies and data resellers);
  • Automated tracking technologies (information automatically collected about your interaction with our website or services, using various technologies such as cookies and internet tags).

How is data used?

Personal data is used for the purposes for which it was collected and will only be used for lawful or other legitimate purposes. We use this information to further improve the quality of our services. We apply the following legal grounds for processing:

  • Processing necessary for the functioning of the website or for entering into or performing an agreement;
  • Processing necessary for our legitimate interests, for example to improve the quality of our services;
  • Processing necessary for compliance with a legal obligation to which we are subject, or which is otherwise permitted by law under applicable data protection legislation;
  • Processing with your consent.

Depending on how you interact with us and the services, we may use your personal data for the following purposes:

  • Managing our relationship with you, such as providing and managing your access to and use of our services. This processing is necessary to perform a contract;
  • Developing and improving our new and existing products and services. This processing is necessary to provide you with optimal services;
  • Offering web chats, web forms, calendar functions (via Pipedrive) and other communication features. This processing is necessary for the performance of a contract, for its preparation, or to safeguard our legitimate interests;
  • Other general business support purposes (procurement, financial and tax management, risk and compliance management, external reporting, etc.). This processing is necessary for compliance with a legal obligation to which we are subject, or which is otherwise permitted by law under applicable data protection legislation, or for our legitimate interests.

Sharing data

In order to provide you with the best possible services and to support our business operations, we may share certain information internally or with selected third parties. There may also be a legal obligation under which we, in good faith, believe we must disclose your personal information to third parties. Parties with whom we may share data include:

  • Other affiliated companies or subsidiaries;
  • Our service providers;
  • Organisations involved in business transfers, in the event of a corporate transaction involving part or all of our operations;
  • Other parties where necessary for external audit, compliance, risk management, business-development and/or corporate-governance related matters; or
  • Government authorities, regulators and other third parties, in response to a legal request, court orders, or to comply with applicable law.

Retention period

Personal data is retained for as long as necessary for the purposes for which it was collected and for as long as you maintain an active relationship with us. After the relationship ends, the data is deleted or anonymised, except where legal obligations (such as tax retention periods) require longer retention. We take appropriate measures to ensure that unnecessary data is removed from our systems.

Protection and your rights

We limit access to personal data for our employees, service providers and external service providers to a ‘need-to-know’ basis. More specifically, and in accordance with the law, we take appropriate technical and organisational measures (policies and procedures, IT security and others) to safeguard the confidentiality and integrity of your personal data and the way it is processed. We would like to point out that you have the following rights regarding the processing of your personal data:

  • Access;
  • Rectification;
  • Erasure;
  • Restriction of processing;
  • Objection;
  • Data portability.

For questions about this policy or to exercise your rights, you can contact our data protection officer at any time at privacy@thirdrule.ai. You may also ask our officer at any time to amend or delete your data, whereby we request that you describe your request as specifically as possible (in writing). The form below helps you with this.

Exercise your rights

Choose the right you wish to invoke. We prepare an e-mail for you to our data protection officer — you send it yourself from your own e-mail program.

An overview of the personal data we process about you.

No data is sent or stored through the website: the button opens your own e-mail program with the request as a draft.

Open e-mail to privacy@thirdrule.ai

Cookies

We use cookies and similar tracking technologies for various purposes, as explained below. Cookies allow data to be collected to analyse personal browsing behaviour, remember you and your preferences, and personalise our services.

We may use cookies that fall into one of the three categories below.

  • Strictly necessary cookies: strictly necessary for the functioning of the website. You can set your browser to block cookies or to warn you. Please note: if you block these cookies, the website may not function fully.
  • Functional cookies: to provide enhanced functionality, a better user experience and personalisation. If you do not accept these cookies, some or all services may not work correctly.
  • Performance cookies support analytical services that improve the functionality and user experience on our website.

If you do not want cookies to be stored, you can set this in your browser’s options or preferences. For placing performance cookies (such as Google Analytics) we ask for your explicit prior consent via the cookie banner (Cookie Consent Manager) on our website. You are not obliged to give this consent in order to visit the website. With the cookie management tool on our website, you can view, manage and change your preferences for these cookie categories at any time (except for the ‘strictly necessary’ and ‘functional’ categories, which are always placed).

We use specific third-party services for the functioning and improvement of the website. Specifically, we use:

  • Pipedrive CRM: for offering web chat, web forms and the calendar function (functional cookies).
  • Google Analytics (via Google Tag Manager): for collecting statistics about website visits to measure and optimise the performance of our website (performance cookies).

These third parties may also use cookies for these purposes and apply their own privacy policies. If you want to disable the use of cookies or device identifiers by third parties, you must go to the specific privacy settings of these providers. We do not maintain or control these systems.

From time to time we may update this privacy and cookie policy. When changes are made, we add a new date to this Privacy Statement and publish it on the website.

This version is effective as of 21 July 2026.