Privacy Policy

1. Introduction

AmiSyn B.V. ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our services, including our websites (amisyn.com, amisec.nl, amiphished.nl, amicloud.nl) and related services.

This policy applies to all divisions of AmiSyn: AmiSec (cybersecurity services), AmiPhished (security awareness training), and AmiCloud (cloud and AI solutions).

2. Data Controller

3. Data We Collect

3.1 Information You Provide

• Account Information: Name, email address, company name, job title
• Contact Information: Phone number, business address
• Payment Information: Billing details (processed by our payment providers)
• Service Data: Information related to the specific services you use
• Support Data: Communications with our support team

3.2 Automatically Collected Data

• Usage Data: Pages visited, features used, time spent
• Device Information: IP address, browser type, operating system
• Cookies: See our Cookie Policy for details
• Security Logs: Authentication attempts, security events

4. How We Use Your Data

We process your personal data for the following purposes:

5. Legal Basis for Processing

Under GDPR, we process your data based on:

• Contractual Necessity: To fulfill our service agreements with you
• Legitimate Interest: To improve our services and ensure security
• Consent: For marketing communications (which you can opt-out of)
• Legal Obligation: To comply with Dutch and EU law

6. Data Sharing and Transfers

6.1 Third-Party Service Providers

We share data with trusted service providers who assist us in delivering our services. All providers are contractually bound to protect your data and use it only for specified purposes.

See our Subprocessors List for details.

6.2 International Transfers

We primarily store data within the EU. If data is transferred outside the EU, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Active customer data: Duration of contract + 1 year
• Financial records: 7 years (legal requirement)
• Marketing data: Until you opt-out or 2 years of inactivity
• Security logs: 90 days to 1 year depending on type

8. Your Rights

Under GDPR, you have the following rights:

To exercise your rights, contact us at privacy@amisyn.com. We will respond within 30 days.

9. Security Measures

We implement industry-standard security measures to protect your personal data:

• Encryption in transit (TLS/SSL) and at rest (AES-256)
• Regular security audits and penetration testing
• Access controls and authentication mechanisms
• 24/7 security monitoring and incident response
• Employee training on data protection
• ISO 27001 certified processes

10. Contact Us

11. Changes to This Policy

We may update this privacy policy periodically. We will notify you of significant changes via email or through our services. The "Last updated" date at the top indicates when changes were made.