Privacyverklaring

Castellum Security Collective (hereinafter referred to as “we”, “us” or “our organisation”) values the privacy of customers and website visitors. In this privacy statement, we explain which personal data we process, why we do so and how we protect this data.

Contact details

Personal data processed

Castellum Security may process personal data about you because you use Castellum Security’s services and/or because you provide this data yourself by filling in a contact form on the website. Castellum Security processes the following personal data:

Basic details

• Your name (+ company name)
• Address details
• Telephone number
• Email address

Financial details

• Data for billing purposes

Application details

• CV
• Cover letter

 

Why Castellum Security needs data (purposes)

Castellum Security processes your data in order to contact you by phone, email or post, depending on your preference and availability. Data provided via the website is used solely for the purpose for which you have shared it. We also use personal data to fulfil agreements and to comply with legal obligations, such as tax regulations.

How long Castellum Security retains data

Castellum Security does not retain your company data longer than is strictly necessary to achieve the purposes for which your data is collected. Your data will not be kept longer than one year if no agreement is concluded with you. Application data will be retained for a maximum of four weeks after completion of the application procedure, unless you give consent for longer retention. Billing data will be retained for seven years in accordance with tax legislation.

Sharing with others

Castellum Security only shares your personal data with third parties if this is necessary for the proper execution of an agreement with you, or to comply with a legal obligation.

Cookies

We use analytical cookies to gain insight into website usage; GA4 from Google Analytics is configured to be anonymised and no user-specific tracking takes place. You can manage your cookie preferences via the pop-up on our website.

Rights of data subjects

You have the following rights with regard to your personal data:

• Right of access: you can request information on which personal data we process about you.
• Right to rectification: if your data is incorrect or incomplete, you can request a correction.
• Right to erasure: you can request the deletion of your data, unless this would conflict with legal obligations.
• Right to restriction of processing: in certain cases, you may request the restriction of data processing.
• Right to data portability: where applicable, you may receive your data in a structured, commonly used format.
• Right to withdraw consent: if processing is based on consent, you may withdraw it at any time.

You can exercise your rights by contacting us via contact@castellumsecurity.nl.

Security measures

Castellum Security takes appropriate technical and organisational measures to prevent misuse, loss, unauthorised access, unwanted disclosure and unauthorised modification of personal data. Examples include access control and authorisations, periodic security audits and the use of MFA and 2FA. We are certified in accordance with ISO 27001, the internationally recognised standard for information security.

If you believe your data is not properly secured or there are indications of misuse, or if you would like more information about the security of personal data collected by Castellum Security, please contact Castellum Security via contact@castellumsecurity.nl.

Changes to this privacy statement

We reserve the right to amend this privacy statement. We advise you to consult this statement regularly for updates.

Contact and complaints

If you have any questions or complaints about the processing of your personal data, you can contact us at contact@castellumsecurity.nl You also have the right to file a complaint with the Dutch Data Protection Authority.

This statement was last updated on 9 August 2025.