Privacy statement

1. What data we process

Data you provide yourself. If you fill in a form or subscribe to the newsletter, we process what you enter: your name, your email address, any other contact details you give, and the content of your message. None of it is mandatory. You decide what you leave behind.

Data about your visit, and only with your permission. On your first visit we ask whether we may measure how the site is used. If you say yes, we process your IP address in shortened form, your browser type and the pages you view, through Google Analytics. If you say no, or choose nothing at all, no measurement script is loaded and none of this happens. Separately, the server the site runs on keeps an ordinary log: that is needed to deliver and secure the site and is unrelated to your cookie choice. Which services are actually switched on at any moment is set out in the cookie policy.

2. What we use it for

• To handle your question, request or newsletter subscription.
• To improve the website and our services, based on anonymised visitor behaviour.
• To send you the newsletter or other information, only where you have given consent.
• To do what the law requires of us, for instance in bookkeeping and tax matters.

3. On what legal basis

Every processing activity rests on one of four grounds under the GDPR. Consent, when you submit a form or subscribe to the newsletter. Performance of a contract, when you purchase or request a service. Legitimate interest, where it concerns improving and securing our own services. And legal obligation, where the law leaves us no choice.

4. How long we keep it

Data collected through contact forms is kept for a maximum of two years, unless a longer retention period is legally required. For our bookkeeping it is: invoices and the data belonging to them are kept for seven years, because Dutch tax law requires it.

We keep visit data only where you gave permission, and no longer than the period configured in the service concerned. Those periods are listed per cookie in our cookie policy. Our hosting provider's logs fall under their own short retention period. If you withdraw your consent, measurement stops immediately.

5. Who we share it with

We never sell your data. We share it in three cases only: where it is necessary to perform the contract, for instance with our hosting or email provider; where the law obliges us to; or where you have given us explicit consent.

Parties that process data on our instructions are contractually bound to confidentiality and may only use the data for the purpose for which it was provided. If you want to know which parties those currently are, email hallo@cosymize.com.

6. How we secure it

We take appropriate technical and organisational measures to protect your personal data. In practice that means encrypted traffic over SSL, access to systems limited to those who genuinely need it, and two-factor authentication wherever the supplier supports it.

7. Your rights

You have the right to access your data, to have it corrected and to have it deleted. You may object to the processing, and you have the right to data portability: taking your data with you in a common file format. If you gave consent, you can withdraw it at any time; that has no effect on processing that already took place.

One email to hallo@cosymize.com is enough. You will hear from us within a month, and in practice sooner.

8. Cookies

This website places only cookies that are necessary, plus the cookies you gave permission for yourself. You make that choice in the cookie banner on your first visit, and “Cookie preferences” at the bottom of every page lets you change or withdraw it at any time. What falls under each category, how long it stays and what is switched on right now is set out in our cookie policy.

9. Changes

We may amend this privacy statement, for example when the law or our services change. The current version is always on this page, with the date above it. Do look at it now and then.

10. Contact and complaints

Questions about this statement or about your data? Email hallo@cosymize.com or call 085 200 9293. You get an answer from Jesse or Derk, not from a ticketing system. If you are a client and it is about something running right now, email support@cosymize.com.

If you disagree with how we handle your data and we cannot resolve it together, you may file a complaint with the Dutch Data Protection Authority. That right is always yours, including without complaining to us first.