1. What data do we process?
We only process data that is necessary for the use of our services. This includes, among other things:

• Name and contact details of CyberManager users

• Data of employees entered into the CyberManager by the customer

• Contact details of individuals who submit a request, demo request, or information inquiry

This data is processed solely for the purpose for which it was provided.

2. For what purposes do we use personal data?
We process personal data for the following purposes:

• Creating and managing CyberManager user accounts

• Communication about our products, services, and support

• Ensuring the proper functioning, improvement, and security of the CyberManager

• Handling requests, demos, and support inquiries

We never process more data than necessary for these purposes.

3. Who has access to the data?

• The customer has full control over the data entered into the CyberManager.
• IRM360 B.V. and a limited number of carefully selected processors only have access when necessary for support, maintenance, or security purposes.
• Data Processing Agreements are in place with all processors, specifying confidentiality, appropriate security measures, and processing purposes.
• Data is not shared with third parties for commercial purposes.

4. How do we secure data?
We implement appropriate technical and organizational measures to protect personal data, including:

• Encryption of data based on industry standards

• Secure connections (TLS/HTTPS)

• Restricted and logged access rights

• Monitoring and periodic penetration testing

• Strict confidentiality agreements with employees and processors

5. Retention periods

• Customer data is retained according to the defined retention periods in our processing register.

• Contact details of interested parties are kept only as long as necessary to process the request or communication.

• Customers can delete data from the CyberManager themselves.

• When the purpose of processing has been fulfilled, data is deleted or anonymized.

6. Your

Under the GDPR, you have the following rights:

• Access to your personal data

• Rectification of incorrect data

• Erasure of your data (“right to be forgotten”)

• Restriction of processing

• Data portability

• Objection to certain types of processing

Requests can be submitted via our contact page (add link to the contact page in Umbraco).
To prevent misuse, we may ask you to suitably verify your identity.

7. Questions or complaints

If you have any questions about this privacy statement or how we handle personal data, you can contact us via our contact page.
If you disagree with the way we process your personal data, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).