Geenen ict B.V., Sint Jansstraat 19, 6071 JG Swalmen, the Netherlands, registered with the Dutch Chamber of Commerce under number 87555840 (VAT NL864328837B01), is the controller for the processing of personal data described in this statement. This statement applies to the website geenenict.nl and to the trade name Orange Insight. Our brands Webamigo (webamigo.nl) and OctoMarkets (octo.markets) have their own privacy statements.

Contact: info@geenenict.nl, +31 85 401 5985.

What data we process and why

Website visitors. We use functional cookies that are necessary to make the website work. Only with your consent, given in the cookie banner, we use Google Analytics to measure how the website is used (Google truncates the IP address). Legal basis: consent (analytics cookies) and legitimate interest (functional cookies and website security).

Contact form and e-mail. If you send us a message, we process the data you provide (name, e-mail address, telephone number, company name and the content of your message) to answer your question and, where applicable, to prepare a quotation. Legal basis: steps prior to entering into a contract and legitimate interest.

Customers and business contacts. For customers, suppliers and partners we process name, job title, business contact details and the data needed to perform the contract, for invoicing and for support. Legal basis: performance of the contract and legal obligations (tax retention requirements).

Data in customer environments. In our consultancy and managed services (for example Splunk and Cribl environments) we work in our customers' systems. Personal data we encounter there is processed only on behalf of and on the instructions of the customer; the customer is the controller. The arrangements are laid down in the agreement or data processing agreement with the customer.

We do not process special categories of personal data and we do not use personal data for profiling or automated decision-making.

Recipients and processors

We share personal data only with parties that are necessary for our services and with whom we have agreements on the protection of that data:

• Squarespace (hosting of this website and the contact form);

• Google (Google Workspace for e-mail and documents; Google Analytics, only with your consent);

• our accountant and, where necessary, legal advisers. Processing takes place within the EU/EEA or under appropriate safeguards (EU standard contractual clauses or the EU-US Data Privacy Framework). We never sell personal data.

Retention periods

• Form submissions and e-mail contact without follow-up: no longer than 12 months after the matter is closed.

• Customer and invoicing data: for the duration of the contract and thereafter for as long as the statutory (tax) retention period of seven years requires.

• Analytics data: according to the Google Analytics settings, no longer than 14 months.

Security

We take appropriate technical and organisational measures to protect personal data against loss and unauthorised access, including encrypted connections (TLS), access control with two-factor authentication and logging. Our information security management system is set up in accordance with ISO 27001. Where the law requires it, we report data breaches to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) and to the persons concerned.

Your rights

You have the right to access, rectify and erase your personal data, to restrict processing, to data portability and to object. You may withdraw consent you have given at any time. Send your request to info@geenenict.nl; we respond within one month. You may also lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

Changes

We may update this statement. The current version is always available at geenenict.nl/privacy.

Version 1.0, 15 September 2026