Legal
Privacy statement
We collect as little data as possible and only use it for the purpose you give it to us. This is a translation; if the versions differ, the Dutch version prevails.
Who we are
SurfaceGuard is a Nuvtek service, registered with the Dutch Chamber of Commerce under number [KvK number], located at [address]. Nuvtek is the controller for the data described here. You can reach us at klantenservice@nuvtek.nl.
What data we process
Contact form and email
When you fill in the contact form or email us, we process your name, company name, business email address, the domain you mention and the content of your message. We only use this data to respond to your request and prepare any engagement. The legal basis is your request and, for an engagement, the performance of the contract.
Clients
For clients, we process contact details, billing details and the information in the authorisation form. Legal basis: performance of the contract and legal obligations, such as tax record-keeping.
Scan results
During an assessment we collect technical data about the client's systems, such as domain names, IP addresses and software versions. If these contain personal data, we process it on the client's behalf under a data processing agreement.
Website visits
This website sets no cookies of its own and uses no analytics or tracking services. Our hosting provider processes technical data such as your IP address in order to deliver and secure the site.
Who we share data with
We never sell your data. We use the following service providers:
- Formspree (United States): processes the contact form and forwards it to us.
- Cloudflare (United States, with servers in the EU): hosting and security for this website.
- Google Fonts (United States): serves this website's typefaces. Your browser connects to Google for this, which shares your IP address.
- Strato (Germany): domain registration and email.
For transfers to the United States we rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
How long we keep data
- Requests that don't lead to an engagement: at most [12 months].
- Client data and invoices: 7 years, due to tax record-keeping requirements.
- Scan results and reports: as agreed in the engagement, by default at most [12 months] after it ends.
Security
We take appropriate technical and organisational measures to protect your data, such as encrypted connections and restricted access to data.
Your rights
You have the right to access, correct or delete your data, restrict processing, object and transfer your data. Send your request to klantenservice@nuvtek.nl. We respond within one month.
If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Changes
We may update this statement. The latest version is always on this page.