Last updated: 15-11-25

Den Otter Consulting, located at Koningshoeven 13 in Den Bosch, the Netherlands, is committed to protecting your privacy. In this privacy statement, we explain how we handle the personal data we collect through our website, https://denottersolutions.com.

We process your personal data in accordance with the requirements of the General Data Protection Regulation (GDPR).

1. Identity of the Data Controller

Den Otter Consulting is the 'Data Controller' within the meaning of the GDPR. This means that we decide which personal data is processed, for which purposes and by which means.

2. What Personal Data Do We Process?

We process personal data because you provide it to us directly or because it is collected automatically during your visit to our website.

A. Data you provide to us directly:

This concerns the data you enter via the contact form on our website:

• Your name
• Your organisation name (if provided)
• Your email address
• Your phone number (if provided)
• The content of your message (including any personal data you provide in it)

B. Data we collect automatically:

When you visit our website, our servers automatically collect certain technical information for security and diagnostic purposes.

• Your IP address
• Browser type and operating system (User-Agent)
• The pages you visit and the time of your visit

3. Purposes and Legal Bases for Processing

We process your personal data exclusively for specific, predetermined purposes, and each processing activity is based on a legal basis from the GDPR.

4. Retention Periods

We do not retain your personal data for longer than is strictly necessary to achieve the purposes for which your data is collected.

• Contact requests (potential clients): Data provided via the contact form is retained for the duration of our communication. If no client relationship is established, this data is deleted no later than 24 months after the last contact.
• Client data: If you become a client, your data falls under our client administration. This data is retained in accordance with the statutory fiscal retention obligation of 7 years.
• Server logs (security): Technical logs, including IP addresses, are retained for security purposes for no longer than 14 days.

5. Sharing Data with Third Parties

We never sell your data to third parties for commercial purposes. We only share your data with third parties ("Processors") when this is necessary for the provision of our services, or when we are legally obliged to do so.

• Hosting Provider: Our website and email services are hosted by Cloud86. This party processes the data (storage) on our behalf. We have concluded a valid data processing agreement (in accordance with Art. 28 GDPR) with this party, which obliges them to maintain confidentiality and adequate security.
• Legal obligation: We may be required to share data in the context of legal proceedings or by order of a competent authority (such as the police).

6. Security of Personal Data

We take the protection of your data seriously and have implemented appropriate technical and organisational measures (TOMs) to prevent misuse, loss, unauthorised access, unwanted disclosure and unlawful alteration.

• The connection to our website is secured using SSL/TLS encryption (recognisable by https:// and the lock icon in your browser).
• Access to systems in which personal data is stored (such as the email inbox) is restricted and secured.

7. Your Rights (Data Subject Rights)

You have control over your personal data at all times. Under the GDPR, you have the following rights:

• Right of Access (Art. 15 GDPR): You have the right to request an overview of the personal data we process about you.
• Right to Rectification (Art. 16 GDPR): If your data is incorrect, you have the right to have it corrected.
• Right to Erasure (Art. 17 GDPR): You can request that we delete your personal data (under certain conditions, e.g. if the data is no longer necessary for its purpose).
• Right to Restriction (Art. 18 GDPR): You have the right to temporarily suspend the processing of your data.
• Right to Object (Art. 21 GDPR): You can object to the processing of your data on the basis of our legitimate interest (see the table in section 3).

To exercise your rights, you can send an email to rob@denottersolutions.com. To prevent misuse, we may ask you to adequately identify yourself. We will respond to your request within the statutory period of one month.

You also have the right to file a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).

8. Changes to this Privacy Statement

We may amend this privacy statement from time to time, for example in the event of changed business operations or legislation. The most current version can always be found on our website.

Cookie Statement — Den Otter Solutions

Last updated: 15-11-25

1. What are Cookies?

Cookies are small text files placed on your computer, tablet or mobile phone by a website. These files store information about your visit.

2. The Dutch Cookie Law (Telecommunications Act)

The Dutch Telecommunications Act (Art. 11.7a) requires that website visitors give "consent" for the placement and reading of most types of cookies. This is why you see a "cookie banner" on many websites.

However, the law makes an important exception for cookies that have no or minimal impact on your privacy. These are:

• Functional (necessary) cookies: Cookies that are strictly necessary for the website to function technically or to deliver a service requested by you (e.g. a cookie that manages your session).
• Analytical cookies (with minimal impact): Cookies used to measure website visits, provided they are configured in a privacy-friendly manner (e.g. anonymised).

For these two categories, no consent and no cookie banner is required.

3. Cookies on denottersolutions.com

Den Otter Solutions values a clear, fast and privacy-friendly website.

Our website https://denottersolutions.com therefore uses only functional (necessary) cookies. We do not use analytical cookies (such as Google Analytics) or marketing or tracking cookies (such as those from Facebook or LinkedIn).

Because we only use cookies that fall under the legal exception, your consent (via a cookie banner) is not legally required.

4. Overview of Cookies Used

Below you will find an overview of the only cookie placed by our website to ensure its technical operation.

5. Blocking Cookies

You can always block the placement of cookies (including functional ones) through your internet browser settings. You can find instructions in the help section of your browser. Please note that blocking this necessary cookie may negatively affect the operation of the website.