Privacy Statement

Last updated: 26 October 2026

VERITRON B.V. respects your privacy. This privacy statement explains which personal data we process when you visit www.veritron.nl, contact us, or do business with us, why we do so, and which rights you have. We process personal data in accordance with the General Data Protection Regulation (GDPR / Algemene verordening gegevensbescherming, AVG) and the Dutch GDPR Implementation Act (Uitvoeringswet AVG).

1. Who we are

The controller (verwerkingsverantwoordelijke) for the processing described in this statement is:

VERITRON B.V.
Sikkel 40 B, 3274 KK Heinenoord, the Netherlands
Chamber of Commerce (KVK): 98643541
VAT: NL868581884B01
Email: hello@veritron.nl
Phone: +31 6 58983282

VERITRON B.V. is not required to appoint a Data Protection Officer. For all privacy questions and requests, please contact us at hello@veritron.nl.

2. Whose data we process

  • Visitors of our website;
  • People who contact us by contact form, email, phone or LinkedIn;
  • Contact persons at (prospective) clients, investors, suppliers and business partners;
  • Applicants, if you send us an unsolicited application.

3. Which personal data we process

  • Contact details: name, email address, phone number, company name and job title;
  • Content of communication: the message you send through our contact form or by email, and our correspondence with you;
  • Business and contract data: information needed to prepare, perform and invoice an engagement, such as billing address, VAT and KVK numbers, and contract documents;
  • Identification data: only where we are legally required to verify the identity of a client or counterparty;
  • Technical data: IP address, browser type, device information, and the date and time of your visit, as recorded in server logs.

We do not intentionally process special categories of personal data (such as health data) or data of persons under 16. If you believe we hold such data without a valid reason, please contact us so we can delete it.

4. Purposes and legal bases

Purpose Legal basis (Art. 6(1) GDPR)
Answering questions and requests sent through our contact form, by email or by phone Legitimate interest (f): responding to people who contact us; or steps prior to entering into a contract (b)
Preparing proposals and performing advisory, project or management engagements Performance of a contract (b)
Invoicing, bookkeeping and tax compliance Legal obligation (c)
Client and counterparty identity checks where required by law Legal obligation (c)
Maintaining business relationships with clients, investors and partners Legitimate interest (f)
Operating, securing and protecting our website against misuse, spam and attacks Legitimate interest (f)
Establishing, exercising or defending legal claims Legitimate interest (f)

Where we rely on legitimate interest, we have weighed our interests against your privacy and keep the processing limited to what is necessary. You may object to this processing at any time (see section 8).

Providing personal data to us is voluntary. If you do not provide the data needed to answer your request or to perform an engagement, we may not be able to help you.

5. How long we keep your data

  • Contact requests and correspondence that do not lead to an engagement: up to 12 months after our last contact, unless a longer period is needed for an ongoing conversation.
  • Client, contract and invoicing records: 7 years, as required by Dutch tax and corporate law (Article 52 of the General Tax Act (Algemene wet inzake rijksbelastingen) and Article 2:10 of the Dutch Civil Code).
  • Identification records required by law: for the statutory retention period.
  • Unsolicited applications: up to 4 weeks after the end of the application process, or up to 1 year with your consent.
  • Server log data: for a limited period needed for security and troubleshooting, after which it is deleted automatically by our hosting provider.

6. Who we share your data with

We do not sell your personal data and do not share it with third parties for their marketing. We only share data where necessary:

  • Service providers (processors) that support our operations, such as our website and email hosting provider Hostinger International Ltd. (Cyprus, EU), and our bookkeeping, payroll and IT service providers. We have agreements with them that require them to protect your data and use it only on our instructions.
  • Professional advisers such as accountants, tax advisers, notaries and lawyers, who are bound by confidentiality.
  • Banks for processing payments.
  • Government authorities such as the Dutch Tax Administration (Belastingdienst), where we are legally required to do so.
  • Google Fonts (Google Ireland Limited): our website loads fonts from Google servers, which means your IP address is sent to Google when you view a page. See our Cookie Statement for details.

7. Transfers outside the European Economic Area

We store and process personal data primarily within the European Economic Area (EEA). Some service providers, such as Google, may process data outside the EEA, including in the United States. Such transfers only take place with appropriate safeguards, such as an adequacy decision of the European Commission (including the EU-US Data Privacy Framework) or the European Commission’s Standard Contractual Clauses.

8. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you;
  • have incorrect data rectified;
  • have your data erased (unless we are legally required to keep it);
  • restrict the processing of your data;
  • data portability: receive the data you provided to us in a structured, commonly used format;
  • object to processing based on our legitimate interest;
  • withdraw your consent at any time, where processing is based on consent. This does not affect processing that took place before withdrawal.

To exercise your rights, email hello@veritron.nl. We will respond within one month. We may ask you to confirm your identity before handling your request, to make sure we do not disclose data to the wrong person.

9. Complaints

If you have a complaint about how we handle your personal data, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, via autoriteitpersoonsgegevens.nl.

10. Security

We take appropriate technical and organisational measures to protect your personal data against loss and unlawful processing. These include encrypted (HTTPS) connections, access restricted to authorised persons, strong passwords and two-factor authentication where available, and regular software updates. If you suspect misuse of your data, please contact us immediately.

11. Automated decision-making

We do not make decisions based solely on automated processing, including profiling, that produce legal effects for you or similarly significantly affect you.

12. Cookies

For information about cookies and similar techniques on our website, please read our Cookie Statement.

13. Third-party websites

Our website contains links to other websites, such as our LinkedIn page and project websites. This privacy statement does not apply to those websites. Please read the privacy statements of those parties.

14. Changes to this statement

We may update this privacy statement when our services or the law change. The current version is always available on this page. The date at the top shows when it was last updated.