Privacy
Last changed 7 November 2026.
The Solution Essentials Assessment is a tool a sales representative uses during a conversation. Their customer opens a link, picks the criteria they will judge any solution against, and puts their five most important ones in order. The representative watches it happen on their own screen.
The platform is operated by Hovingh & Partners. Each company that uses it decides what is collected and why: in data protection terms that company is the controller and Hovingh & Partners is a processor acting on its instructions. If you took part in a session, the company whose representative invited you is the one to ask first; this page says what the platform itself does.
What is recorded about a customer
When a representative starts a session they type the customer's name and their company, so that the document produced afterwards says who it was for and so that later meetings with that company form one record. During the session the app records which criteria were selected, the order of the five chosen, any criterion the customer wrote in their own words, and the language they read in. In a review meeting it also records the score from 1 to 10 the customer gave each of their five, and whether the customer or the representative entered it.
No account is needed to take part, and none is created. The link itself is the entry: it expires twelve hours after the session is created, and the first device to open it keeps it, so a forwarded link does not let a second person in.
What is recorded about a representative
People who sign in have an account: their name, their work email address, a password stored only as an argon2id hash, the times they signed in, and, if they switched it on, a second-factor secret. Their preferences for language and appearance sit on the same record. An administrator of their company can see this, and can remove the person entirely.
What is kept after a session, and for how long
Two different things are kept, on two different clocks. A company with review meetings keeps its closed sessions on purpose: they are its record of working with a customer, and the starting point of the next review meeting. A company without them keeps a session for thirty days after it ends, and the customer's screen says which applies.
- The session itself — the customer's name, their company, their choices, their own words, their scores, the record of the conversation. At a company with review meetings, kept for its period, two years unless it chooses otherwise, counted from the last meeting with that customer company. After that the rows are removed, not hidden. A session in which nothing was ranked goes after thirty days, and so do the details of a kept session that nobody needs later: the customer's email address, their device, and the wording of the criteria nobody chose.
- One row per ranked criterion — which criterion, in which position, on which day, by which representative. The customer's name and company are not part of it. This is what lets a company see which criteria its customers care about. It is kept for its own period, thirty-six months unless the company chooses twelve, sixty, or to keep it.
Because that second row names the representative, it is data about an employee, and companies are asked to decide its retention deliberately rather than by default.
Contracts and invoices
When a company takes the platform, Hovingh & Partners keeps what a contract needs: the company's name and invoice details, the name and work email address of the person who accepted the order, when they accepted and from which internet address, the words they accepted, and the invoices that follow. For these records Hovingh & Partners is not the company's processor but a controller of its own, because they are its own books.
They are kept for seven years, because Dutch law asks that of a company's books, and they stay when a company is removed from the platform: under the company's name, and only what the books need. A partner who sold the platform to a company sees that company's contract and its own share of it.
When a contract ends, the company can read and download its records for ninety days. After that nobody can sign in, and the data is kept for ninety more days so that it can come back. Then it is deleted.
Cookies
The app sets no advertising or analytics cookies and uses no tracking of any kind. What it does set:
- a sign-in cookie for people with an account, which is what keeps them signed in;
- two small preference cookies remembering the language and the light or dark setting, so the sign-in screen is already right next time;
- for a customer in a session, a cookie scoped to that one session which holds the link to the device that opened it. It dies with the session.
Who else touches the data
- Scaleway (France) — the servers, the database and the sending of email. Everything is hosted in the European Union: the application in Amsterdam, the database in Amsterdam, email through Paris.
- DeepL (Germany) — translates the criteria texts a company writes into the languages it offers. Criteria are the company's own wording, not anything a customer typed: no customer's name, company or own words are ever sent there.
There are no other sub-processors, and no data leaves the European Union.
The app sends email on a few occasions: an invitation to a colleague, a session link to a customer when the company has switched that on, a session's report to the representative who asks for it, the answer to a question a person sent from Help, and notices to a company's administrators about its contract and its settings. For each message it records who it went to, what it was for, when, and whether the provider accepted it. It never stores the message itself, because a message may carry a link and the link is a secret. That record goes thirty days after the session ended, or with the person.
Your rights
You may ask for a copy of what is held about you, ask for it to be corrected, or ask for it to be deleted. Your name can be taken off a record on its own, and everything under your company can be erased. Ask the company whose representative you spoke with, since it is the controller; the tools to answer you are built into the product, and Hovingh & Partners will help where the company needs it. You may also complain to your national data protection authority.
Contact
Hovingh & Partners, privacy@hovingh.eu.