Privacy Statement

Privacy statement PuraSec B.V.
Last updated on 6 February 2026

Thank you for visiting the PuraSec website (the “Website”). PuraSec B.V. (“PuraSec”, the “Company”, “we”, “us” or “our”) is committed to protecting and respecting your privacy. This Privacy Statement describes how PuraSec  collects, uses, shares and otherwise processes personal data and what rights you may exercise in relation to your personal data.

For the services and activities described in this privacy statement, PuraSec acts as the controller within the meaning of the General Data Protection Regulation (“GDPR”).

If you have any questions or concerns regarding this privacy statement, please contact us here:
PuraSec B.V.
Maanweg 174
2516 AB, Den Haag
+31 15 200 2193
info@purasec.nl
Chamber of Commerce number: 72945001

Personal data we process

Personal data are any information that enables you to be directly or indirectly identified as an individual. Examples include name, address, telephone number, and account number. The personal data that we collect and process depends on our relation and service. The personal data that we collect and process from you may include the following:

• Business contact information, such as name, e-mail address, telephone number;
• Other information you provide, such as when you contact us or subscribe to our newsletter; and
• Information that is collected by social media platforms we use.

Purposes for processing personal data

PuraSec may process your personal data in the following circumstances:
• offering our services;
• processing payments;
• sending newsletters;
• improving our website and services; and
• to comply with legal obligations.

Legal basis

PuraSec only processes personal data when there is a legal basis. PuraSec uses the following legal bases:
• Consent: when you subscribe to our newsletter or when you request to be contacted.
• Performance of a contract: when the processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract.
• Legal obligation: to comply with a legal obligation.
• Legitimate interest: so that we can offer the most optimal and personalised services. In doing so, we take your interests, rights, and expectations into account. Our legitimate interests include:
o manage our business operations and administer our client relationships;
o ensure the Website operates effectively and efficiently;
o operate, maintain, manage and secure the Website;
o improve and enhance the features and performance of the Website and relevant services;
o provide support and respond to your requests and queries; and
o enforce our terms and policies.

Use of cookies

Cookies are small text files that are stored on your device when you visit the Website. Some cookies are deleted once you close your browser, while other cookies are retained even after you close your browser so that you can be recognized when you return to a websites. Cookies help the website to recognise your device, preferences and improve user experience. We only store analytical cookie information, such as the number of website visitors. You may choose to disable cookies by configuring your web browser to prevent them from being stored. Additionally, you can remove any cookies or related data that have already been saved through your browser’s settings. For more information on the use of cookies by PuraSec, see our Cookie statement.

How we share your personal data

PuraSec may share your personal data with third parties when this is necessary for the provision of our services, for example with payment partners or IT service providers. When we share your personal data with third parties who process personal data on our behalf, we ensure that your personal data is protected by, among other things, entering into data processing agreements. We never sell your data to third parties.

International data transfers

Your personal data is primarily stored in the European Economic Area (EEA). In the event that personal data is processed outside the EEA, PuraSec ensures additional measures are taken to ensure that the personal data is protected at an adequate level of security.

Automated decision-making and profiling

We do not use automated decision-making without human intervention, including profiling, in a way that produces legal effects concerning you or otherwise significantly affects you.

Your rights and how to exercise them

Under the GDPR, you have the following rights that you can exercise in relation to our processing of your personal data.
• Right of information: You have a right to be informed about how we process your personal data.
• Right of access: You have a right to obtain confirmation as to whether or not your personal data is processed by us and have access to your personal data.
• Right to rectification: You have the right to rectify incorrect personal data that PuraSec processes.
• Right to erasure: You have the right to request your personal data to be deleted, for example when personal data is no longer necessary for the purpose for which we they were obtained. There are a number of exceptions to this, including our obligation to retain specific financial records for tax authorities.
• Right to restriction: During the period in which we are determining whether your data needs to be corrected, determining the lawfulness of data processing, determining whether data needs to be deleted, or you have objected to the processing, you have the right to request the restriction of processing.
• Right to data portability: At your request, we can transfer all personal data we hold about you to you or another organisation of your choice. This right may only be exercised if the processing takes place on the basis of consent or an agreement.
• Right to object: If we process personal data on the basis of legitimate interest or public interest, it is possible to object, after which a balancing of interests will follow. You always have the right to object to the processing of your personal data for direct marketing purposes.
• Right to withdraw consent: You always have the right to withdraw your consent whenever the processing of your personal data takes place on the basis of your consent. Withdrawal of consent does not affect the lawfulness of the processing of personal data prior to the withdrawal. Please note that certain features of our Website and our services may not be available if your consent has been withdrawn.
• Right to file a complaint: If you believe that your rights have been infringed you also have the right to lodge a complaint with the relevant supervisory authority. Please consult the website of the Dutch supervisory authority for more information about filing a complaint.

Should you have any questions or complaints about this Privacy statement or if you wish to exercise any of your rights in respect of your personal data processed by PuraSec, please send your request to privacy@purasec.nl. In order to protect your privacy, we may require you to provide additional information to demonstrate your identity before we process your request.

PuraSec strives to handle requests as quickly as possible, but in any case within one month of receipt of the request, and to inform you about the handling of the request. If the request is extensive or complex, PuraSec will use an additional period of two months to respond to the request. If PuraSec makes use of this additional period, we will inform you of this within one month of the request.

How long do we store your personal data

We store your personal data on the basis of applicable law and regulation and as long as is necessary for us to provide the Website and services and operate our business, or when it is necessary to fulfill the purposes for which such information was collected. If we no longer need your personal data, we will delete or anonymise the personal data as required by applicable laws and regulations.


How we protect your personal data

PuraSec takes reasonable steps to ensure that your personal data is properly secured using appropriate technical and organisational measures. We take steps to limit access to personal data to those individuals who need to have access for one of the purposes listed in this Privacy Statement. Furthermore, we contractually ensure that any third party processing your personal data on our behalf maintains at least equal security and integrity standards.

Contact us

If you have any questions about this privacy statement or if you wish to exercise the rights described above with regard to your personal data, please contact us at privacy@purasec.nl. You can also contact us to report complaints about the processing of your personal data.

Changes to this privacy statement

We may update this privacy statement from time to time. We will notify you of any material changes through a notification on the Website. We encourage you to periodically review this privacy statement to stay informed of changes.

Security questions?

We have answers.

Whether you're wondering about compliance requirements, investigating suspicious activity, or just want to know if you're doing enough, we're here to help. No sales pitch, just straight answers from security professionals who've been there.