Privacy statement
We help organisations protect their data. So we have to get it right ourselves too. In this statement you can read which data we process about you, why, and what your rights are. No small print. In case of differences, the Dutch version prevails.
Who we are
Brandaris Cybersecurity B.V. is responsible for processing your personal data.
- Keesomstraat 10-G, 1821 BS Alkmaar, the Netherlands
- Chamber of Commerce 94696675
- [email protected] · +31 72 202 97 95
Questions about privacy? Email [email protected]. Maikel Roolvink.
Which data we process and why
We only process what we need. No more.
| When | Which data | Why | Legal basis | Retention period |
|---|---|---|---|---|
| You fill in the contact form, or request a call after the Cybercheck | Name, organisation, email address, phone number and your message; for MSPs also the number of clients you manage | To answer your question and get in touch. We record your details in our customer system (Teamleader) | Legitimate interest / your request | 12 months after last contact |
| You complete the Cybercheck | Name of your organisation, number of employees, how your IT is arranged, your answers and the advice. No personal contact details | Only for statistics, for our articles and to match our services to what organisations need. This is not a contact request: we only get in touch if you ask us to at the end | Legitimate interest; you confirm the sharing in advance | 24 months |
| You register for an event or training | Name, email address, organisation, phone number | To arrange your registration, inform you about the event and send you invitations to new events and updates. You can unsubscribe at any time | Performance of a contract; legitimate interest for invitations | Until you unsubscribe |
| You subscribe to the newsletter | First name, last name and email address | To send you our newsletter. You are only subscribed once you click the link in the confirmation email. We also record your subscription in our customer system (Teamleader) | Consent | Until you unsubscribe |
| You become a client | Contact, company and billing details | To deliver our services and invoice them | Performance of a contract, legal obligation | 7 years after the information is no longer current (tax retention obligation) |
| You apply for a job | CV, motivation, contact details | To assess your application | Consent / pre-contractual phase | 4 weeks after completion, or 1 year with your consent |
| You visit our website | IP address and browser details, in the log files of our hosting | To keep the website secure and available | Legitimate interest | According to Cloudflare's standard period; we do not keep log files ourselves |
We measure visitor numbers with Cloudflare Web Analytics. It works without cookies and without following you across websites. We do not place any cookies ourselves. Read more in the cookie statement.
Who we share your data with
We never sell your data. We only share it with parties that help us deliver our services. We conclude a data processing agreement with them.
- Cloudflare: hosting the website, processing the forms and the Turnstile bot check, which verifies that you are human when you submit a form.
- Resend: sending messages from the contact form to our mailbox.
- Campaign Monitor: newsletter subscriptions and sending the newsletter and invitations to events.
- YouTube (Google): playing our videos. The player only loads when you click play yourself, via the privacy-friendly youtube-nocookie.com mode. From that moment, Google's terms apply.
- Microsoft (Microsoft 365 and Teams): email, internal communication and notifications of submitted forms to our team.
- Numbrs Accounting, Teamleader, NinjaOne: administration and customer contact.
Cloudflare, Resend, Marigold (the company behind Campaign Monitor) and Microsoft are certified under the EU-US Data Privacy Framework. Their standard data processing terms also apply. We only share what is needed for the service.
Sometimes we are legally required to share data, for example with the Dutch Tax Administration.
Your rights
It is your data. You have the right to:
- access your data;
- have incorrect data corrected;
- have your data deleted;
- have the processing restricted;
- object to processing;
- have your data transferred;
- withdraw your consent.
Send your request to [email protected]. We respond within 4 weeks. To make sure the request comes from you, we may ask you to identify yourself.
Complaints
Cannot resolve it with us? Then you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). Of course, we would rather hear it from you first.
Changes
We update this statement when the way we work changes. The date at the top shows when that last happened.