privacy policy

Version 1.0, 22 September 2026. This statement replaces the one of 26 April 2023.

what this covers

This statement is about the website unexus.nl. It applies to you when you look at the site, fill in a form, sign up for a newsletter or send us a message through the site.

It is not about the Unexus platform itself. If you work with Unexus at one of our customers, or you call or chat with an organisation that uses Unexus, then that organisation is responsible for your data. We work on their instructions. A separate statement is coming for that situation. Until then you can go to the organisation you were in touch with, or to us.

We have written this in plain words. Is there something you still do not follow? Email us. That is quicker than working it out yourself.

who we are

Unexus B.V.
Oude Utrechtseweg 24
3743 KN Baarn
the Netherlands
Chamber of Commerce 74840266

Privacy questions: privacy@unexus.nl
General: info@unexus.nl or +31 88 7620 400

We are the controller for everything in this statement. That means we decide what happens to your data, and you can hold us to it. We have no separate data protection officer; a company of our size is not required to appoint one. Email the privacy address and it reaches the people who deal with it.

in short

• We keep only what you fill in yourself, plus what the site technically needs to work.
• We sell nothing on and we do not build a profile of you.
• The site runs at Microsoft in the Netherlands. What you fill in reaches us and nobody else. Only the newsletter runs through Mailchimp.
• Only if you say yes do we measure with Google Analytics how the site is used. Say no and we measure nothing.
• You can always ask what we hold about you, and have it corrected or deleted.

when you look at the site

The site is made of ordinary web pages. You do not have to fill in anything to read them. Three things always happen, and a fourth only if you say yes to it.

What is not there: advertising cookies, tracking pixels, a chat widget or social media buttons that follow you. Exactly what does and does not end up on your device is on the cookie page.

when you fill in a form

Everything you fill in on a form arrives in our own mailbox. It goes there through our own environment at Microsoft; there is no form service from another company in between. Only a newsletter sign-up does not go to the mailbox but to Mailchimp, see below. What we ask depends on the form.

With every submission our system also records which page you sent the form from and at what moment. A copy of every submission stays for 90 days in the technical log of our environment at Microsoft. That lets us check what went wrong if a message does not arrive. We use your IP address only to stop someone sending hundreds of forms an hour. For that we remember it for one hour, and after that it is gone.

Why we are allowed to. If you fill in a form, you are asking us something. To answer we need that data. The law calls that a legitimate interest. If it is about a quotation or an agreement, it is the preparation of that agreement.

For how long. We keep your message for as long as we are working on it, and two years after that. So we know what was agreed if you come back later. If your organisation becomes a customer, your data moves to the customer file. The statement for customers then applies.

when you email or call us

Do you email or call us through an address or number on the site? Then we keep your message, or a note of the conversation, in order to help you. The same applies as for the forms: as long as needed, and two years after that. We do not record phone calls.

newsletters

We have three newsletters: the Unexus newsletter, WhatsNew for users and the Partner Update for partners. Sign up and you are on the list straight away. Are you getting a newsletter you do not want, or did somebody else fill in your address? Unsubscribe through the link at the bottom, or email us. Then we take you off the list.

The lists sit at Mailchimp, an American service. Mailchimp is certified under the EU-US Data Privacy Framework, the arrangement between Europe and the United States on the protection of data. On top of that we have made the standard European contractual arrangements with Mailchimp. Mailchimp measures whether an email was opened and what was clicked. We use that to see which subjects work; we do not look at individuals.

You stay on the list until you unsubscribe. That can be done at the bottom of every newsletter, with one click. Within a month after that your data is out of the list. We do this on the basis of your consent.

applying for a job

If you apply through the site, only the people responsible for that vacancy read your data. We do not approach references without telling you, and we do not look you up on social media without your knowing.

If you are not hired, we delete your data no later than four weeks after the end of the procedure. Would you like us to keep you in mind for a next vacancy? Tick the box for that in the form. Then we keep your data for at most a year, and that is the only place on the site where we ask you for consent. You can withdraw that consent at any time with an email. If you are hired, your data moves to your personnel file.

who we share your data with

We do not give your data to others. The only exception is the companies that run the site and our mail for us. They may do nothing else with it than what we ask, and we have put that in writing with each of them.

Only where the law obliges us to, for instance on a court order, do we give data to a government body.

where your data sits

The site, the forms and our mail sit at Microsoft in the Netherlands. Three services sit (also) in the United States: Adobe Fonts, Mailchimp and, only if you have said yes, Google Analytics. For those three the EU-US Data Privacy Framework applies. Under that arrangement your data is meant to be as well protected there as here. Where we could, we have put the European standard clauses alongside it.

how long we keep what

how we secure your data

Unexus is ISO 27001 certified. That is the international standard for information security. An independent party tests every year whether we live up to it. For the site it means among other things: the connection is always encrypted, the forms reach only the people who need them, and our systems are protected with a second step at sign-in. More about how we work is on security & compliance.

If something does go wrong with your data, we report it to the Dutch Data Protection Authority. If it could have consequences for you, we tell you as well.

what you can ask

You have the right to know what we hold about you, and to have it corrected or deleted. Concretely, you can ask to:

• See it. Which data we hold about you, what for and for how long.
• Correct it. If something is wrong, we put it right.
• Delete it. We delete your data, unless the law says we have to keep it.
• Object. If you do not want us to use your data for something, we stop, unless there is a compelling reason to carry on.
• Withdraw consent. For the newsletter, for keeping your application for a year, or for the visitor statistics (on the cookie page). That applies from that moment; what happened before stays valid.
• Take it with you. You get the data you gave us in a common file format.

Email privacy@unexus.nl. We answer within a month. To be sure we are talking to the right person, we may ask you to confirm something. We never ask for a copy of your identity document.

not happy?

Do you think we are not handling your data properly? Tell us first; usually we sort it out together. You can also lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens. If you live in another EU country, you may also go to the supervisory authority there.

if this statement changes

If we put something new on the site that processes data, we update this statement before it goes live. The date and the version number are always at the top. If it is a large change, we say so on the page itself.