// privacy

Privacy Notice

Last updated: 4 November 2026

This notice explains how R.I. CyberSec handles personal data when you visit ri-cybersec.com or contact us through the website. We keep it short because we collect very little.

Who we are

R.I. CyberSec, Amsterdam, the Netherlands. KvK 97214469. You can reach us about anything in this notice at contact@ri-cybersec.com. R.I. CyberSec is the controller of the data described below.

What we collect and why

• Contact form: your name, email address, company (optional), the service you are interested in and your message. We use these only to respond to your request and, if relevant, to prepare a quote. Our legal basis is taking steps at your request before entering into a contract (GDPR Article 6(1)(b)).
• Technical and security data: when you use the site, our hosting provider processes your IP address and browser information to deliver the pages and protect the site and form against abuse, including the Cloudflare Turnstile check on the form. Our legal basis is our legitimate interest in keeping the website secure (Article 6(1)(f)).
• Visit statistics: we use Cloudflare Web Analytics to count visits. It does not use cookies or local storage and does not track you across sites or build a profile of you. Our legal basis is our legitimate interest in understanding how the site is used (Article 6(1)(f)).

We do not use cookies for tracking or advertising, we do not sell your data, and we do not use it for marketing.

Who processes it for us

We use a small number of trusted service providers for website hosting and security, web fonts, email delivery and our email inbox. They process your data only to provide these services to us. Some of them may process data outside the European Economic Area, for example in the United States. Those transfers are covered by the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

How long we keep it

If your request does not lead to an engagement, we delete your message and contact details within 12 months. If it does, we keep the correspondence for as long as the engagement lasts and as long as Dutch law requires us to keep business records afterwards, which is usually 7 years.

Your rights

You have the right to access, correct or delete your personal data, to restrict or object to how we process it, and to receive it in a portable format. To exercise any of these rights, email us at the address above. We will respond within one month.

If you believe we have handled your data incorrectly, you can file a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens.