Privacy statement

We collect as little as possible and keep it briefly. There are no advertising cookies and no third-party tracking. We measure how the site is used ourselves, without cookies. Below is what happens, especially when you talk to Pia.

Who we are

The controller is:

Technische Handelsonderneming Peek BV
De Ring 30, 5261 LM Vught, the Netherlands
Chamber of Commerce (KvK) 18030812
Telephone: +31 (0)73 820 02 88
E-mail for privacy questions: [[email protected]](mailto:[email protected])

Peek BV represents Krantz Components in the Netherlands. This site belongs to Peek, not to Krantz. Krantz receives no data about you through this site.

In short

What	Which data	Why	Legal basis	How long
Visiting the site	IP address, browser, page requested, time	Serving and securing the site	Legitimate interest	Server logs: 7 days
Statistics (Matomo)	Shortened IP address, pages, clicks on features	Improving the site	Legitimate interest	Raw visit data 6 months, then only anonymous totals
Language choice	None: the language is part of the page address (/en/ for English). There is no language cookie.	Showing you the right language	Not applicable	Not applicable
Talking to Pia	Your voice, the conversation’s video and audio, IP address	Holding the conversation	Explicit consent (you start it, after information about the transfer to the US)	Runway produces a transcript and a recording; we delete those, like our own conversation log, after 1 month. Runway itself publishes no fixed retention period
Pia conversation log	Transcript, page, duration, products mentioned, whether a callback was requested	Improving our service and Pia	Legitimate interest	1 month, then erased automatically
Callback request	Name, phone number, subject, optionally e-mail	Calling you back	Your request, before any contract	As long as needed to follow up and for any resulting order; deleted sooner on request
Feedback on Pia	Rating, comment, optionally e-mail	Improving Pia	Legitimate interest	As long as needed to follow up and for any resulting order; deleted sooner on request
E-mail or phone	What you tell us	Answering your question	Your request, before any contract	As long as needed to follow up and for any resulting order; deleted sooner on request

Visiting the site

When you open a page, the server receives your IP address, your browser type, the page and the time. That is needed to send you the page, and it helps us detect abuse and faults. That is our legitimate interest.

Fonts and animation libraries (three.js, GSAP, Lenis) are on our own server, so your browser requests nothing from Google or any other outside network to display the site.

Our host keeps the server logs (access and error logs, with your IP address) for 7 days. They are then deleted.

Our site runs through Cloudflare, a US company that manages the domain name, protects the traffic and delivers the pages faster. In doing so Cloudflare sees your IP address and the page you request, and may set a technical security cookie (see the cookie statement). That is our legitimate interest: keeping the site available and secure. Cloudflare processes this on a global network; the EU-US Data Privacy Framework and the European Commission’s standard contractual clauses apply.

Statistics with Matomo

We want to know which outlets people look at and whether Pia helps. For that we use Matomo, which we host ourselves on our own server. Nothing goes to Google or any other company.

No cookies. Matomo places nothing in your browser.
Shortened IP address. The last two bytes of your IP address are discarded before anything is stored, so it can no longer be traced back to you.
What we measure: which pages and product pages you view, and a few actions:
starting and ending a conversation with Pia;
an outlet that Pia shows or recommends;
downloading a data sheet or specification text;
making a callback request (only that it happened, not your name or number);
switching language;
No sharing. The data stays on our server and we share it with no one.
Legal basis: legitimate interest: understanding how the site is used, so we can improve it.
Retention: raw visit data 6 months. Matomo then erases it automatically; only summarised, anonymous totals remain.

Talking to Pia

Pia is an AI avatar, not a person. She is a digital member of Peek’s team, built on Runway’s avatar service. She can make mistakes. For a final selection or a quote, you speak to a colleague at Peek.

Before you click, nothing from Pia loads. You only see a photo, and a short notice that we keep a transcript of the conversation (see “Pia conversation log”).

When you click “Video call with Pia”:

Your browser fetches Pia’s window from our own Pia server (pia-w6gd.onrender.com, hosted by Render). That server sees your IP address and browser.
When you press the start button in that window, your browser asks whether the microphone may be used. It is your choice. Without a microphone you can hear Pia, but she cannot hear you.
Our server requests a conversation session from Runway. Your browser then connects directly to Runway for Pia’s video and audio. Runway sees your IP address.
Pia introduces herself first. Only when she has finished does your microphone open and your voice go live to Runway. Runway turns your speech into text and has Pia answer in video and audio. Your camera is not used.

Your voice and the conversation. We do not store your voice on our own servers. At Runway, however, every conversation produces a transcript and a video-and-audio recording that we, as the account holder, can view. Our Pia server has those deleted at Runway automatically once they are older than 30 days (daily deletion routine), just like our own conversation log. Runway itself publishes no fixed retention period for conversations via its API; beyond that, Runway processes data under its own privacy policy (version 11 May 2026). For the connection Runway uses LiveKit (United States), which under its own data processing addendum does not keep video and audio after delivery.

Runway is in the United States. Pia’s video and audio run through Runway, Runway AI, Inc. (US). Your data may therefore be processed and stored in the US, where privacy protection is weaker than in the EU. Runway offers a data processing agreement only with an annual enterprise contract, which we have not taken out. On 12 October 2026 Runway told us in writing that it does not use the conversations with Pia to train its AI models. This is not contractually guaranteed: under Runway’s standard terms it may. We are not waiting for that: the conversation goes to Runway only once you have given explicit consent. If you do not want that, use the text chat, or e-mail or call us.

To keep costs in check, our Pia server counts per IP address how many conversations and forms were started in the past hour. Those counts exist only in working memory, apply for one hour and vanish at every restart. That is our legitimate interest: preventing abuse.

Legal basis for the conversation: your explicit consent. Before you start the video call you read what goes to Runway in the US and what risks that carries; by clicking the start button you consent to that transfer (Art. 49(1)(a) GDPR). You give your browser access to the microphone yourself. You can stop at any time by ending the conversation or closing the window. Your voice is not used to recognise or identify you.

Pia conversation log

After a conversation ends, we keep the transcript: what you said and what Pia said. With it we keep the page you spoke on, how long the conversation lasted, which products were mentioned and whether you asked for a callback.

What is not in it: your name, your phone number and your IP address. If you tell Pia other things about yourself, such as your company or your project, those are in the text. So don’t tell Pia anything you don’t want kept.
Where: in our own WordPress admin, on the server of our host bghost (Hetzner, Germany). Only Peek can read it.
Purpose: improving our service and Pia. We see which questions come up, where Pia falls short and which products people are looking for.
Legal basis: legitimate interest. You are told before the conversation, so you can choose not to talk to Pia and e-mail or call us instead.
Retention: 1 month. The log is then erased automatically. A copy may remain in a backup for up to 30 days more (see “Backups”).
Having it erased: e-mail [[email protected]](mailto:[email protected]). Since there is no name in it, it helps if you give the date, time and page of the conversation.

Chatting with Pia (text)

At the bottom right of every page is the button Chat with Pia: you type your question and Pia answers in text. It is the same Pia, with the same knowledge and the same rules, but without video, audio or microphone. Through the chat, nothing goes to Runway, Render or LiveKit.

This is AI. Pia answers through Claude, an AI model by Anthropic. She can make mistakes. For a final selection or a quote, you speak to a colleague at Peek. The chat window therefore shows one short line (“You’re chatting with Pia, an AI assistant. Don’t share sensitive data.”) with a link to this section; nothing is sent until you type something yourself. The chat uses no cookies; while you stay on the site your browser itself remembers the conversation (session storage), and that disappears when you close the tab.

What happens: your message goes through our own web server to Anthropic (United States), together with the earlier messages of the same conversation and Pia’s knowledge documents, to produce an answer. No name, contact details or IP address of yours go with it, other than what you type yourself. So do not type anything you do not want to share.
At Anthropic: Anthropic processes the messages on our behalf, does not use them to train models and deletes inputs and outputs within 30 days. This is a transfer to the US, covered by the European Commission’s standard contractual clauses in Anthropic’s data processing addendum, just as for “Your room, your air”.
With us: during the chat the conversation is held on our server for one hour, without a cookie. We also keep the transcript in our conversation log, in the same way as for Pia (video): 1 month, then deleted automatically (see “Pia conversation log”). Phone numbers and the name from a callback request are removed from it. Per IP address we count how many conversations were started in the past hour (at most 10), and per call we store the number of characters and the estimated cost, without content.
Callback via the chat: if you ask Pia to be called back, she asks for your name and phone number. These go along the same route as the callback form (see “Callback request”); the website itself does not store them.
Legal basis: legitimate interest for the conversation log and the counts; your request for the callback. Using the chat is your choice: you can always call or e-mail instead.
Cookies: none.

Callback request

If you would rather talk to a person, you can ask to be called back. There are two ways: tell Pia, or fill in the form below her or on the consult page. The form sends your details to Peek through our Pia server; the website itself does not store them. If you give your details to Pia, they are written down through speech recognition. A colleague checks the number if it looks wrong.

Data: your name, phone number, what it is about, and your e-mail address if you give it. Also the time, the conversation’s session number, the page and your browser type.
Purpose: calling you back about your question.
Legal basis: your request, as a step before any contract.
Recipients: Your request goes from our website through our Pia server (Render, Frankfurt) to the mail service Brevo (EU), which delivers it as an e-mail to Peek (Microsoft 365). The website itself stores nothing. Our Pia server at Render records your name in its server log.
Retention: as long as needed to follow up your request and for any resulting order. Want us to delete it sooner? E-mail us and we remove it, including from Microsoft 365. If an order follows, we keep what is needed for as long as the law requires, such as the 7-year Dutch tax retention obligation.

Feedback on Pia

After a conversation you can rate Pia and leave a comment. Your e-mail address is optional. If you give it, we can reply.

Data: rating, comment, e-mail address (optional), how long you spoke, the session number, the page, the time and your browser type.
Purpose: improving Pia and the site, and replying if you want us to.
Legal basis: legitimate interest.
Retention: as long as needed to follow up your feedback. Want us to delete it sooner? E-mail us and we remove it, including from Microsoft 365.

Temporary copy. Our Pia server first writes every callback request and every piece of feedback to a file, so nothing is lost if the mail fails for a moment. That file is wiped at every update or restart of the server. In addition, with every new submission the server removes the lines older than 30 days; the text of a callback request is already not kept in that file, only its character count.

Feedback on the new site

On the new site you can use the button at the bottom of the screen to give a rating from 1 to 5 and tell us what is good or could be better. We receive your rating, your text, the page you were on and, only if you fill it in, your email address. This goes by email to Peek, through our Pia server (Render). We keep the feedback for as long as needed to improve the site; if you would like us to delete it sooner, email us. The button uses no cookies.

On the site you can subscribe to the Peek BV newsletter. You enter your email address and tick the box to say you want to receive it. We then send you a confirmation email; only when you click the link in it are you on the list (double opt-in).

What data: your email address, the date and proof of your consent, which Brevo records, and for each newsletter whether you opened it and which links you clicked (with time).
Why: to send you the newsletter, and to measure whether you open it and which links you click, so we can see which topics are of interest.
Legal basis: your consent. You give it with the tick box and confirm it with the link in the email.
Retention: until you unsubscribe. You can unsubscribe at any time, with the link at the bottom of every newsletter; we then remove you from the list.
Processor: Brevo (EU). Your sign-up goes from our website through our Pia server (Render, Frankfurt) to Brevo. Our website and the Pia server do not keep your email address in the process.
How we measure: the newsletter contains a small invisible image (pixel) and its links run through Brevo. This lets Brevo see whether and when you open the email and what you click. We do this only for the newsletter, based on the consent you give when you subscribe; if you do not want to be measured, please unsubscribe. The sign-up form on the site itself uses no cookies and no tracking pixels, and we measure nothing in our other emails (confirmations, notifications).

Smoke Ring (game)

If you play Smoke Ring and put your score on the board, we store on our own server your name (as you enter it), your score, the playing time and a few game details, such as the number of rings. We need this for the scoreboard and to spot fake scores. The public scoreboard shows only your name and score, so do not enter a name you do not want to make public.

We do not ask for an e-mail address unless you sign up for the newsletter. Your address then goes to Brevo as described under “Newsletter” above; the game itself does not store it. We do not store your IP address, only an encrypted, short-lived key to limit abuse (at most one hour).

Legal basis: your consent, by submitting your score. We keep entries for at most 12 months, or less if we clear the scoreboard earlier. If you want your entry removed sooner, e-mail [email protected] with your name and roughly the time.

Your room, your air

On the page “Your room, your air” you can upload a photo, floor plan or section of a room. An AI model reads the room type and dimensions from it, you check and correct them, and fixed rules applied to our catalogue then propose two or three outlets. The result is indicative. The model does not choose products; a Peek adviser makes the selection.

This is AI. The reading is done by Claude, an AI model by Anthropic. The model can misread dimensions; each field shows whether a value was measured or estimated, and you confirm them yourself. No decision about you is taken by a computer alone.

Before you upload, you see this information in brief and tick a box. Without the tick, our server accepts no file. That tick is your consent to the processing described below. You withdraw it by deleting the file; see “With us”.

What you upload. One file: jpg, png, webp or pdf, up to 10 MB. A pdf (up to 10 MB and 20 pages) is sent to Anthropic as a whole, so a large drawing with several rooms can be read room by room; for more than 20 pages we use only the first two, as images. We make a reduced preview of the first page. Do not upload images with recognisable people, or drawings with names, addresses or other people’s details; a photo of the empty room or a drawing without its title block is enough. Everything on the image can be seen by us and by Anthropic.

What happens: your file lands on our own web server (bghost, Germany), in a folder not reachable through the site. A reduced copy (longest side 1500 px), or for a PDF the file itself, goes to Anthropic to read room type, length, width, height, ceiling type, special features and an indication of the number of people. No name, contact details or IP address of yours go with it. The proposal is calculated by our own rules; no AI is involved in that step.
Data: the image, the values read out and confirmed by you, your answers to the optional questions about the room, and your IP address to limit the number of uploads per hour. We do not ask for your name when you upload.
At Anthropic (United States): Anthropic processes the file on our behalf, does not use it to train models and deletes inputs and outputs within 30 days (source: privacy.claude.com, “How long do you store my organization’s data?”, 1 July 2026). This is a transfer to the US, covered by the European Commission’s standard contractual clauses in Anthropic’s data processing addendum. We have assessed the risks of that for images of rooms without people.
Several files: you can upload up to 10 files (100 MB in total) in one request: PDF (drawings, specification), IFC, DWG, DXF, XLSX, CSV, DOCX, EML, MSG and images. Only PDFs and images go to Anthropic to read rooms and requirements; the other files are only stored and passed on to an adviser. A link to files elsewhere (WeTransfer and the like) that you provide is not opened or downloaded automatically; it goes to the adviser as text.
With us: an upload you do not submit: 24 hours, after which the file, the copy and the pdf pages are deleted automatically. If you submit the request, your files stay for 30 days in a non-public folder and a Peek adviser gets a secure download link (unguessable, valid for 30 days, no logging of persons); they are then deleted automatically. The e-mail contains no large attachments. Sooner: e-mail us with the date and time of the upload. Per call we keep the number of characters and the estimated cost with the file number, without the image. Per IP address we count the uploads of the past hour.
Legal basis: consent for uploading and the AI reading; legitimate interest for the IP count and the cost log.
Cookies: none.

Sending it to an adviser. Leave your name, phone number and e-mail address and your request, with the confirmed values and proposed type codes, goes through our Pia server (Render, Frankfurt) and the mail service Brevo (EU) as an e-mail to our adviser at Peek (Microsoft 365). If you tick the box, your file goes along as an attachment. Legal basis: your request, as a step before any contract. Retention: we keep your request, including any photo, in our mail for as long as needed to follow it up and for any resulting order. Want us to delete it sooner? Let us know and we will. If an order follows, the statutory retention period for business records applies after that.

Google Maps

The contact page shows a Google Maps map. It only loads when you click Load map. If you do, your browser connects to Google, which then sees, among other things, your IP address and may set cookies. Google’s privacy policy applies. If you do not click, nothing is sent to Google.

CAD/BIM via MagiCAD Cloud

Some products link to MagiCAD Cloud, the environment in which Krantz offers its CAD and BIM files (DXF, RFA). That is an external website run by MagiCAD, not by Peek. Nothing is sent to MagiCAD until you click that link yourself: you then leave our site, and MagiCAD sees, among other things, your IP address and may set cookies. MagiCAD’s privacy policy applies there. Peek passes no data about you along and does not see what you do there. If you do not click, nothing is sent to MagiCAD.

E-mail and phone

If you e-mail or call us, we use what you tell us to answer your question. Legal basis: your request, as a step before any contract. We keep it for as long as needed to follow up your question and for any resulting order; on request we delete it sooner, including from Microsoft 365. If an order follows, the statutory retention period for business records applies.

Backups

Our host bghost makes backups of the site and the database. They are stored at Hetzner in Falkenstein (Germany) and kept for 30 days. Data we erase from WordPress after 1 month, such as the Pia conversation log, can therefore remain in a backup for up to 30 days more. After that it is gone there too. We only restore a backup after a failure and do not take any of your data out of it.

Who else processes your data

We work with these processors. They process data only on our behalf, not for their own purposes.

Processor	For	Where	Transfer outside the EEA
bghost (hosting, via BlueGlobe B.V.)	The site’s web server, the Pia conversation log, Matomo and the backups	Hetzner server in Nuremberg, Germany; backups at Hetzner in Falkenstein, Germany	No. Data processing agreement with BlueGlobe: being concluded.
Cloudflare	DNS, proxy, CDN and security (sees your IP address and the page requested)	Global network, US company	Yes. EU-US Data Privacy Framework and standard contractual clauses; Cloudflare’s data processing addendum applies through our subscription terms.
Runway	The avatar Pia: video, audio, speech recognition, answers	United States; Runway uses LiveKit (US), among others, for the connection	Yes. Runway AI, Inc. is in the US and publishes no certification under the EU-US Data Privacy Framework. Runway offers a data processing agreement only with an annual enterprise contract, which we do not have. On 12 October 2026 Runway stated in writing that it does not train on the conversations with Pia; this is not contractually guaranteed. The transfer therefore rests on your explicit consent when you start the video call (Art. 49(1)(a) GDPR). The connection runs via LiveKit (US), which is certified under the Data Privacy Framework.
Render	Pia’s server (pia-w6gd.onrender.com), including logs	EU (Frankfurt, Germany); US company (Render Services, Inc.)	Yes, limited: the service runs in Frankfurt, the company is in the US. Render is certified under the EU-US Data Privacy Framework (with the UK and Swiss extensions) and its data processing addendum with standard contractual clauses applies via its terms of service. Render keeps server logs for 7 days.
Brevo	Sending the e-mails with callback requests, feedback, CAD requests and “Your room” requests (with your attachment if you include it), and the confirmation email and list of the newsletter	EU (France and Germany)	No. Brevo’s data processing agreement applies through its terms of use.
Microsoft 365	Receiving and storing those e-mails, and your e-mail to us	EU (tenant registered in the Netherlands; EU Data Boundary)	No, apart from the limited exceptions Microsoft publishes
Anthropic	Reading your uploaded photo or drawing with the AI model Claude, in “Your room”, and Pia’s answers in the chat (without your contact details, other than what you type yourself)	United States	Yes. The European Commission’s standard contractual clauses in Anthropic’s data processing addendum; inputs and outputs are deleted there within 30 days and not used for training

bghost itself uses these sub-processors: Hetzner (servers and backups), TransIP, OpenProvider (domain registration) and Cloudflare (DNS).

If data goes to a country outside the European Economic Area, we only do so with an appropriate GDPR safeguard, such as the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

We do not sell your data and do not pass it to others for their own purposes. Krantz does not receive it either. We make no decisions about you that are taken by a computer alone.

Security

The site and Pia work only over an encrypted connection (HTTPS).
Pia loads only after your click. Between Pia and the page, only type codes and the state of the conversation are exchanged.
The conversation log and the statistics are on our own server and visible to Peek only.
Our Pia server accepts a limited number of characters per form, checks every field and slows down repeated submissions.
The keys for Runway, Brevo, Anthropic and the hosting are not in the code and not in the browser.
Only the people at Peek who need them can see the e-mails and data.

Your rights

You have the right to:

access your data;
have incorrect data corrected;
have your data erased;
object to processing based on our legitimate interest, such as the conversation log or the statistics;
have processing restricted;
receive your data in a common file format or have it sent on (portability);
withdraw your consent. This applies from then on: what was lawful before stays lawful.

E-mail [[email protected]](mailto:[email protected]) or call us. We respond within one month. Sometimes we first ask you to show that the data is yours.

If you disagree with how we handle your data, please tell us first. You may also lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

Changes

When something changes on the site or in Pia, we update this statement. The date of the last change is always shown here.

Last updated: 14 October 2026