Privacy statement
Who is responsible
MindfulSec, sole proprietorship, Schutskooistraat 1, 3171 GR Poortugaal, the Netherlands, Chamber of Commerce (KvK) 81091133, is the controller of your personal data as described in this statement. Questions? Email [email protected].
What data I process
Contact form and email: your name, company name (optional), email address and the content of your message. By phone or email, I only process what you choose to share.
Website visits: the website is hosted by Cloudflare. To deliver and protect the site, Cloudflare processes technical data such as your IP address and browser details. For visitor statistics I use Cloudflare Web Analytics, which according to Cloudflare does not use cookies and does not build individual visitor profiles.
Why and on what legal basis
- To answer your question and send you a proposal or quote. Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
- To keep the website secure and working and to measure its use in broad terms. Legal basis: legitimate interest (Article 6(1)(f) GDPR).
- To meet legal obligations, such as the Dutch tax retention obligation if an assignment follows (Article 6(1)(c) GDPR).
Who I share data with
I do not sell your data and do not share it for marketing. I use two service providers that process data on my behalf: Cloudflare (hosting, security and statistics) and Zoho (email, via its European data centre).
Cloudflare is a US company and may process data outside the European Economic Area. Such transfers are covered by appropriate safeguards, such as the European Commission’s standard contractual clauses.
How long I keep data
I keep messages received via the contact form or email for up to 12 months if no assignment follows. If an assignment follows, I keep the data needed for my records for 7 years, as required by Dutch tax law.
Cookies
This website does not use tracking or advertising cookies. Cloudflare may set strictly necessary security cookies, for example to detect abuse and bots. These do not require consent.
Security
The website is only available over an encrypted connection (HTTPS) and uses security headers. Only I have access to messages received through the website.
Your rights
You have the right to access, correct or delete your data, to restrict processing, to object and to data portability. Send your request to [email protected]. I respond within one month.
If you disagree with how I handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the data protection authority in your country.
Changes
I may update this statement. The date at the top shows when it was last changed.