Hackify B.V. respects your privacy and handles your personal data with care. This statement applies to our websites hackify.nl, pentests.nl and phishify.nl and to our services.
Want all the details? Our full privacy policy is public and available on request via [email protected].
Hackify B.V. is a provider of penetration testing services and security research.
Hackify B.V. is the data controller within the meaning of the GDPR.
| Who are you? | What do we process? | Why? |
|---|---|---|
| Client or contact person | Business contact details, organisation details | Quotation, assignment, communication, invoicing |
| Website visitor | IP address, browser data, behaviour (with consent) | Site operation, security, anonymised statistics |
| Applicant | Name and address details, CV, motivation | Recruitment and selection |
| Supplier | Contact and invoicing details | Procurement and administration |
| Encountered during a pentest | Only insofar as relevant to the assignment | Reporting to the client |
During pentests we try not to process third parties’ personal data. Where that is unavoidable, we minimise or anonymise it, or delete it after reporting.
| Data | Retention period |
|---|---|
| Client and assignment data | 7 years (statutory tax retention) |
| Pentest reports and test data | 3 years |
| Application data (rejected) | 4 weeks, or 1 year with consent |
| Contact form requests | 6 months if there is no follow-up |
| Security logs | 1 year |
We only share with:
We do not sell data and do not use it for third-party marketing. Transfers outside the EEA take place only with appropriate safeguards.
Functional cookies are necessary for hackify.nl, pentests.nl and phishify.nl to work and we place them without consent. For analytics (Google Analytics) we ask for your consent in advance via the cookie banner. You can change your preferences at any time.
We use Cloudflare to host these websites. For analytics we use Google Analytics. Both providers are based in the United States; transfers outside the EEA take place on the basis of the EU-US Data Privacy Framework.
You can request access, rectification, erasure, restriction or data portability, or object to processing. Send your request to [email protected]. We respond within one month. If you disagree with how we handle it, you can lodge a complaint with the Dutch Data Protection Authority (https://autoriteitpersoonsgegevens.nl).
For topics that are not covered exhaustively here (for example our processing register, our approach to data breaches, the DPIA procedure or how this is embedded in our information security policy) we refer to our full privacy policy (PRIV-POL-001). This policy is public and available on request via [email protected].
We may amend this statement. The most up-to-date privacy statement is always available on our websites (hackify.nl, pentests.nl, phishify.nl). We inform active clients of any significant changes.