Privacy notice

1. Who is responsible?

Jotan Security, operating under the name JotaSec, is responsible for the processing described in this notice. For privacy questions or requests, email info@jotasec.nl.

2. What data do we process?

When you use the contact form, we process your name, email address, organisation, selected service, submitted domain, number of public IP addresses, language and any message you provide.

For security and abuse prevention, the server may also process technical data such as your IP address, time and requested page. The contact form uses the IP address temporarily to limit the number of submissions.

3. Why and on what legal basis?

• To handle your request and take steps at your request before entering into a possible contract (GDPR Article 6(1)(b)).
• To protect the website and form against abuse and spam, based on JotaSec's legitimate interest (GDPR Article 6(1)(f)).
• To comply with statutory record-keeping obligations where applicable (GDPR Article 6(1)(c)).

4. Recipients and service providers

The website and email are technically processed through STRATO. Data is shared with service providers only where necessary for hosting, email, security or delivery of an engagement. JotaSec does not sell personal data or use form submissions for unsolicited marketing. No transfer outside the European Economic Area is intended.

5. How long do we retain data?

Requests that do not result in an engagement are deleted no later than twelve months after the last contact. Where an engagement follows, relevant correspondence and records are retained as long as necessary for service delivery, disputes or statutory retention duties.

Rate-limit data remains in working memory for no more than fifteen minutes. Technical server logs are rotated periodically and retained only as long as needed for security and troubleshooting.

6. Cookies and external links

The website uses no tracking cookies, advertising cookies or analytics. Links to LinkedIn and WhatsApp do not load content from those services on this website. Once you open such a link, the external service's privacy policy applies.

7. Your rights

You may request access, correction, erasure, restriction or portability of your personal data. You may also object to processing based on legitimate interests. Email your request to info@jotasec.nl. To prevent abuse, JotaSec may ask you to confirm your identity in an appropriate manner.

8. Making a complaint

If your concern cannot be resolved with JotaSec, you may lodge a complaint with the Dutch Data Protection Authority at autoriteitpersoonsgegevens.nl.

9. Security and changes

JotaSec applies appropriate technical and organisational measures, including HTTPS, encrypted SMTP, access restrictions and input validation. This notice may be updated when the website, services or law changes. The current version is always available on this page.