Last updated: 25 November 2025
1. Controller Information
BARE Cybersecurity KvK: 90801628 Address: [Complete Address] Phone: +31 85 799 26 06 Email: info@bare-consult.nl
2. Introduction
BARE Cybersecurity ("we," "our," or "us") is committed to protecting your personal data and respecting your privacy rights in accordance with the General Data Protection Regulation (GDPR) and Dutch data protection laws.
This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website or use our services.
3. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: When you provide explicit consent (e.g., subscribing to our newsletter)
- Contract Performance: To provide our cybersecurity services
- Legal Obligation: To comply with applicable laws and regulations
- Legitimate Interest: To improve our services and communicate relevant business information
4. What Personal Data We Collect
We collect the following categories of personal data:
Direct Collection (via forms):
- Name and surname
- Company name and position
- Business address
- Telephone number
- Email address
- Information about your security needs and service inquiries
Automatic Collection (website usage):
- IP address
- Browser type and version
- Device information
- Pages visited and time spent
- Referring website
5. How We Use Your Personal Data
We process your personal data for the following purposes:
- Service Delivery: To respond to inquiries, provide quotes, and deliver our cybersecurity services
- Communication: To send service-related updates, security alerts, and respond to your questions
- Marketing: To send newsletters and information about our products/services (only with your consent)
- Legal Compliance: To meet regulatory requirements and enforce our terms
- Service Improvement: To analyze usage patterns and improve our website and services
6. Marketing Communications
Your Rights:
- You can opt in to receive marketing communications by subscribing to our newsletter
- You can unsubscribe at any time by clicking the "Unsubscribe" link in any email
- You can also contact us directly at info@bare-consult.nl to manage your preferences
- We will never sell your email address to third parties
7. Data Sharing and Transfers
Third-Party Service Providers: We may share your data with trusted service providers who assist us in operating our website and delivering our services, including:
- Email service providers (for newsletter distribution)
- Cloud hosting providers
- Analytics platforms
These providers are contractually bound to process data only on our instructions and maintain appropriate security measures.
BARE ALLIANCE Network: As part of the BARE ALLIANCE network of independent European cybersecurity experts, we may share relevant information with network partners when necessary to deliver services. All partners comply with GDPR requirements.
Legal Requirements: We may disclose your information when required by law, court order, or governmental authority.
We will never sell your personal data to third parties.
8. International Data Transfers
Your data is primarily stored and processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions by the European Commission
- Other legally valid transfer mechanisms
9. Data Retention
We retain your personal data only as long as necessary:
- Service-related data: For the duration of our business relationship plus 7 years (Dutch legal requirement)
- Marketing data: Until you withdraw consent or we no longer have a legitimate interest
- Website analytics: 26 months maximum
10. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure ("Right to be Forgotten"): Request deletion of your data
- Right to Restriction: Limit how we use your data
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests or for marketing purposes
- Right to Withdraw Consent: Withdraw consent at any time (without affecting prior lawful processing)
- Right to Lodge a Complaint: File a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)
To exercise your rights, contact us at: info@bare-consult.nl
We will respond to your request within one month (extendable by two months for complex requests).
11. Security Measures
As a cybersecurity company, we implement robust technical and organizational measures to protect your data:
- Encryption of data in transit and at rest
- Access controls and authentication
- Regular security assessments
- Employee training on data protection
- Incident response procedures
12. Cookies
Our website uses cookies to improve functionality and user experience. For detailed information about our cookie usage, please see our separate Cookie Policy [link to Cookie Policy if available].
You can control cookie settings through your browser preferences.
13. Children's Privacy
Our services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
14. Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or significantly affects you.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by:
- Posting the updated policy on our website with a new "Last Updated" date
- Sending an email notification for material changes (if you are subscribed)
16. Contact Us
For privacy-related questions or to exercise your rights:
Email: privacy@bare-consult.nl Phone: +31 85 799 26 06 Address: [Complete Address]
Dutch Data Protection Authority (Supervisory Authority): Autoriteit Persoonsgegevens Website: https://autoriteitpersoonsgegevens.nl Phone: +31 (0)70 888 8500