Privacy statement

Last updated: 22 October 2026. This statement describes how ColoCompass handles personal data.

Who is responsible?

ColoCompass is operated by MH Nexus, based in Amstelveen (Chamber of Commerce no. 99677954). For questions about this statement or your data, email privacy@colocompass.com.

Which data do we process?

Searching and comparing on the platform does not require an account. For every visitor, we count per location how often it is shown, opened, compared and requested, and which search criteria are used, without cookies and without storing your IP address, a visitor code or text you type. These counts are not personal data.

If you accept our usage cookie, we also record the route of your visits under a random code: the pages you visit, the search criteria you choose from our lists, the locations you open, compare or include in an inquiry, the website or campaign code that brought you here, the type of device and the time. We do not record text you type or your IP address, and we do not link the route to your name or to an inquiry you send. We do not record routes while you are signed in. We also record your choice, the time and the version of the text you agreed to.

When you send an inquiry (a request for proposals from operators), we process the data you enter yourself: name, email address, optionally company name and phone number, and your description of the requirement. We also record the time and version of your consent.

To prevent abuse, for anonymous actions (such as sending an inquiry) we temporarily store an encrypted derivation of your IP address (a hash) and the browser type. We do not store the IP address itself.

If you create an operator account, we process your name, business email address and the company details you provide.

If your organisation is a partner, we process your name, business email address and role, the company details of your organisation, and the details of the signing of the Partner Agreement: the signatory, the time, the IP address and the browser type. Partner accounts are created only by invitation.

In a registration, a partner records details about its client: the company name, the project and its requirements, capacity, region and timing, and any information about an existing relationship. These are business details. If they contain personal data, for example the name of a sole trader or a person mentioned in a note, this statement applies to it.

For what purpose and on what basis?

We use your inquiry data to follow up on the inquiry via the route you choose. Basis: your consent, which you give explicitly per inquiry and can withdraw at any time.

Abuse prevention (IP hash) and the security of the platform rely on our legitimate interest in keeping the service reliable.

We use visit routes to understand how visitors find a suitable datacenter and to improve the platform. Basis: your consent, which you give with the Accept button and can withdraw at any time via Cookie settings. The cookieless counts serve the same purpose and show operators how their locations perform; they contain no personal data.

To keep the routing of inquiries honest, we may contact you about an inquiry you sent: to let you know how an operator responded (for example that the operator indicated an existing relationship with your organisation, or is not available) and to ask whether the inquiry led to an agreement. Basis: our legitimate interest in the correct operation of the platform and in enforcing our agreements with operators. Such contact is factual, neutral and limited to what is necessary.

Your description of the requirement may be analysed automatically to suggest search filters; no contact details are included in that process.

We use partner account data to provide the account and to administer the Partner Agreement. We use registration data to review the registration, to record which partner introduced the client and to guide the commercial terms and the introduction. Basis: the performance of the Partner Agreement and our legitimate interest in recording introductions correctly.

Who do we share data with?

If you choose independent guidance, only the platform team sees your contact details. Operators that we approach on your behalf receive the description of the requirement and the name of your organisation, so that they can check whether you are already their customer; they do not receive your name or contact details.

If you choose a direct inquiry, we first share your company name and your description with the operators of the datacenters you selected. Your name, email address and any phone number are released to an operator only once it accepts the inquiry; that operator then contacts you directly. We record which data was shared, when, and with which operator in an internal register.

A registration is visible only to the partner's own organisation and to the platform administrators. It is not passed on to operators automatically; when an introduction follows, we share only what that introduction requires, in consultation with the partner.

We also use service providers (processors) for hosting and database, email delivery and automated text analysis. Data processing agreements apply with them; they do not use your data for their own purposes. When a map is shown, map imagery is loaded from MapTiler, which receives your IP address as part of the request.

We do not sell personal data, we do not use advertising tracking and we do not share visit routes with operators or other parties.

How long do we keep data?

We keep inquiry data for as long as needed to follow up on your inquiry and to account for it, after which it is deleted or anonymised. The IP hash for abuse prevention is cleaned up automatically after a short period.

A draft registration that has not been changed for 90 days is removed; the partner receives an email one week in advance. We keep submitted registrations and partner account data for as long as the Partner Agreement runs and for two years after it ends, after which they are deleted or anonymised. Records we must keep for tax purposes are kept for seven years. Evidence of the signing of the Partner Agreement is kept for ten years.

We keep visit routes for 13 months, after which they are deleted. The usage cookie expires 6 months after you accept it. If you withdraw your permission, we delete the cookie and the routes linked to it. Your consent record is kept for as long as the routes it covers, so that we can show that you agreed.

Your rights

You have the right to access, rectify and erase your data, and you can withdraw any consent given at any time. Email privacy@colocompass.com and include your reference code (RFQ-…) if you have one.

You can withdraw your permission for the usage cookie at any time via Cookie settings at the bottom of every page.

If you are not satisfied with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).