Privacy Statement

Last updated: July 2, 2025

1. Introduction

Instant Design Tool (hereinafter: "Instant Design Tool", "we", "us" or "our") is a trade name of Galeri.nl B.V.

We provide a Software-as-a-Service (SaaS) design platform that enables users to create professional designs through our web-based application. This privacy policy explains how we process personal data.

2. Data Controller

Galeri.nl B.V. is the data controller for the data processing described in this privacy policy.

Company Details

  • Address: Osloweg 45, 9723 BH Groningen, Netherlands
  • Chamber of Commerce (NL): 69272271
  • Email: info@instantdesigntool.com

For privacy-related questions, you can contact our Data Protection Officer at privacy@instantdesigntool.com.

3. Scope of Application

This privacy policy applies to the following situations:

  • All processing of personal data that takes place within the services we offer
  • The use of our website(s)
  • Communication between you and us regarding our services

3.1 Our Role in Data Processing

For the data mentioned in this privacy policy, we act as data controller.

Important note
For data processed within the SaaS platform on behalf of our business clients, we act as a data processor. This means we only process such data according to our clients' instructions and handle it with the utmost care.

When acting as a data processor for business clients, we process data only according to their instructions and maintain appropriate technical and organizational security measures as outlined in our data processing agreements.

4. Data Processing

We collect your personal data in the following ways:

  • Data provided by you when registering or using our services
  • Automatically collected technical data for website operation

4.1 Processed Data

Activity Personal Data Purpose Legal Basis Data Subjects Recipients
Newsletter Email address Product updates and offers; Commercial messages Consent Customers; Potential customers Employees
General IP address Security; Fraud prevention Legitimate interest Site visitors Employees; Webhosting provider
General Website activity data Site optimization; User experience Legitimate interest Site visitors Employees
General Cross-site browse behavior Advertising purposes Consent Site visitors Advertising networks
General Browser info, Device type Security; Site optimization Legitimate interest Site visitors Employees
Contact form Name, Email, Company name, Message Handle inquiries Legitimate interest Form users Employees
Tool registration Email Send login link; Account access Contract performance Prospects Employees
Upgrade to paid plan Invoice address details; Payment data Payment processing; Service provision Contract performance Customers Employees; Payment providers
Financial administration Name and address details, Payment data, Financial data Financial administration, VAT declaration, Reporting Legal obligation Customers, Suppliers Aksos accountants, Tax authorities

4.2 Legal Bases Explained

Contract Performance (Art. 6(1)(b) GDPR)
To provide our SaaS platform, we process data necessary to create and maintain your account, authenticate your access, manage your subscription, and process payments.

Legitimate Interest (Art. 6(1)(f) GDPR)
We collect technical data for security, platform optimization, fraud prevention, and to provide customer support. We also analyze platform usage to improve our service. Based on a careful balancing test, we have concluded this is proportionate to your privacy rights.

Consent (Art. 6(1)(a) GDPR)
For our newsletter and advertising networks, we ask for your explicit consent. You can withdraw this consent at any time via the unsubscribe link in our emails or through your account settings.

Legal Obligation (Art. 6(1)(c) GDPR)
We retain certain data such as invoicing and payment data to comply with our accounting and tax obligations.

5. Retention Periods

We do not retain your data longer than necessary for the purpose for which the data was collected. In some cases, we retain your data longer, for example to comply with our legal retention obligations for fiscal data.

6. Required Data

To provide our SaaS platform, certain data is required:

For free accounts:

  • Email address (for account creation and authentication)

For paid subscriptions:

  • Email address
  • Billing information (name, address)
  • Payment method details

Without this required data, we cannot provide you access to our SaaS platform. Additional data such as company name and phone number are optional and enhance your experience but are not required.

7. Security

We implement a combination of technical and organizational security measures to protect your data:

7.1 Technical Security

  • All website traffic is encrypted via HTTPS (lock icon in browser)
  • Servers are protected with firewalls and up-to-date antivirus software
  • Email security with DKIM, SPF, and DMARC to prevent phishing and spam
  • All data processing occurs via secure servers
  • Encryption of data
  • Strong password requirements and hashing
  • Timely software and dependency updates

7.2 Organizational Security

  • Access to personal data is restricted to authorized employees only (need-to-know basis)
  • Employee confidentiality agreements
  • Regular security checks and updates of our systems
  • Ongoing staff training in data protection
  • Data processing agreements with all sub-processors, including strict security requirements
  • Onboarding and offboarding procedures for staff

8. Protection of Minors

Our services are aimed at business users. We do not knowingly collect personal data from persons under 16 years of age without parental consent. If you suspect unintended data collection from minors, please contact our Data Protection Officer at privacy@instantdesigntool.com for immediate deletion.

9. Your Rights

Under the GDPR, you have the following rights:

  • Access: Request an overview of your personal data we process
  • Rectification: Have incorrect or incomplete data corrected
  • Erasure: Request deletion of your data, unless we are legally required to retain it
  • Objection: Object to data processing
  • Data portability: Export your data
  • Withdraw consent: Withdraw consent for data processing where applicable

You can exercise all rights that the GDPR grants you, even if they are not specifically mentioned in this privacy policy.

Exercising Your Rights

Send a request to privacy@instantdesigntool.com. We will respond within 30 days. We may ask for additional information to verify your identity.

Filing a complaint?

If you are dissatisfied with our response, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

10. Sharing with Third Parties

We do not share your personal data with third parties, unless this is necessary for:

  • The performance of our agreement with you
  • Compliance with a legal obligation

When we engage third parties who process your data, we conclude a data processing agreement to ensure the same level of security and confidentiality. Galeri.nl B.V. remains responsible for these processing activities.

11. International Data Transfers

We strive to process your data within the European Economic Area (EEA). In some cases, data may be transferred to countries outside the EEA, for example for cloud services or payment processing.

When we transfer data outside the EEA, we ensure this is done in accordance with applicable legislation and implement appropriate safeguards as described in Article 46 of the GDPR.

12. Automated Decision-Making

We do not use fully automated decision-making with legal effects or other significant consequences for you as a data subject.

13. Cookies

We use different types of cookies on our website:

  • Functional cookies: Necessary for technical operation of the website and tool
  • Analytical cookies: Help us improve the website and tool through user insights
  • Marketing cookies: With your consent, for personalized advertisements

During your first visit, we inform you about these cookies and ask for consent to place non-essential cookies. You can adjust your cookie preferences at any time via your browser settings or by re-opening our cookie banner on the website to change your permissions.

14. Changes

We reserve the right to modify this privacy policy. Changes will be published on this page. The date of the last modification is shown at the top of this document.

15. Contact Us

If you have any questions about this privacy policy, please contact us at:

  • Data Protection Officer Email: privacy@instantdesigntool.com
  • General inquiries Email: info@instantdesigntool.com
  • Website: www.instantdesigntool.com

Subscribe to our newsletter

Receive the latest updates regarding our software and products! Be the first to get a glimpse of new product launches and join our refer-a-friend program to get special promotions.