Privacy Policy

Verulon B.V., registered with the Chamber of Commerce (KvK) in Rotterdam, acts as controller within the meaning of the General Data Protection Regulation (GDPR). Contact: privacy@verulon.nl

We process the following personal data:

• Contact data: name, email address, telephone number and company name when you complete a contact form or schedule an intake call.
• Usage data: IP address, browser type, pages visited and session duration via analytical cookies (only with consent).
• Communication data: content of emails and messages sent to us.

We retain personal data no longer than necessary:

• Contact data: 2 years after the last contact moment
• Contract data: 7 years (statutory retention obligation)
• Cookie data: 13 months
• Newsletter subscriptions: until unsubscription

We do not sell your personal data to third parties. We may share data with:

• Processors: IT suppliers and software tools that process data on our behalf, under a data processing agreement.
• Legal obligations: Government authorities when required by law.

All processors are contractually obliged to handle data confidentially and in accordance with the GDPR.

Under the GDPR you have the following rights:

• Right of access — you may request an overview of the data we hold on you
• Right to rectification — you may have incorrect data corrected
• Right to erasure — you may request deletion of your data (‘right to be forgotten’)
• Right to restriction — you may limit the processing of your data
• Right to data portability — you may request your data in a machine-readable format
• Right to object — you may object to processing based on legitimate interest

To exercise your rights, contact us at privacy@verulon.nl. We will respond within 30 days. If you are dissatisfied with our response, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, ap.nl).

Verulon applies technical and organisational measures to protect your personal data, including:

• Encrypted data transport (TLS 1.3)
• Access control and multi-factor authentication
• Regular security audits
• Physical security of data centres (ISO 27001)
• Encrypted storage with customer-managed keys

This privacy policy may be updated. The current version with date is always available on this page. For significant changes we will notify you via email where possible.