Privacy Statement
Last updated: 28.01.2026
Introduction
At ZENIQ Consultancy (hereinafter referred to as “ZENIQ”, “we”, “our” or “us”), we are committed to protecting and respecting your privacy. This Privacy Statement explains how and why we process your personal data, how we protect it, and how you can exercise your rights under applicable data protection laws, including the General Data Protection Regulation (“GDPR”).
Data Controller
The data controller responsible for the processing of personal data is: ZENIQ Consultancy, registered with the Dutch Chamber of Commerce (KvK) under number 97121673. Email: info@zeniqconsultancy.com
What personal data do we process?
We process only personal data that is necessary for our business operations. This may include:
Name and surname,
Business or personal email address,
Phone number (optional),
Company name and job title,
Billing and invoicing details (such as address and payment information), where applicable,
Communications sent to us by email or via the contact form on our website.
We do not knowingly collect or process personal data relating to children. Our website and services are not directed at children. If you believe that a child has submitted personal information to us, please contact us. If we become aware that children’s personal data has been collected, we will immediately delete or destroy such information without undue delay.
Why do we process your personal data?
We process your personal data for the following purposes:
Providing and delivering our consultancy services,
Communicating with clients and responding to inquiries,
Managing appointments and business relationships,
Issuing invoices and processing payments,
Fulfilling legal, tax, and administrative obligations.
We do not process personal data for purposes incompatible with those listed above, unless required or permitted by applicable law.
Legal bases for processing
Under the GDPR, we process personal data only when a lawful basis applies. Depending on the situation, processing is based on one or more of the following legal grounds:
Performance of a contract or taking steps prior to entering a contract,
Compliance with legal obligations, such as accounting and tax laws,
Legitimate interests, such as operating and managing our business and maintaining client communication, provided these interests do not override your fundamental rights and freedoms,
Consent, where applicable (for example, when you contact us voluntarily).
Where processing is based on consent, you may withdraw your consent at any time.
Data retention
We retain personal data only for as long as necessary to achieve the purposes for which it was collected, unless a longer retention period is required by law. For example, invoicing and financial records are retained in accordance with Dutch tax legislation. After the applicable retention period expires, personal data is securely deleted or anonymized.
Security of your personal data
We take appropriate technical and organizational measures to protect your personal data against loss, misuse, unauthorized access, disclosure, alteration, or destruction. These measures are designed to ensure a level of security appropriate to the risks involved.
How do we collect personal data?
We collect personal data directly from you, for example when you:
Contact us via email or on our website,
Engage our services,
Provide information necessary for invoicing or administration.
Providing personal data is voluntary unless the data is required to comply with legal obligations or to perform a contract.
Sharing of personal data and third parties
We do not sell your personal data. We may share personal data with third parties only where it is necessary to operate our business, comply with legal obligations, or provide our services. This may include:
IT, email, hosting and business support service providers,
Payment or accounting service providers, where applicable.
Where such parties act as data processors, we ensure that appropriate contractual and organizational safeguards are in place in accordance with Article 28 of the GDPR. Where personal data is transferred outside the European Economic Area (EEA), we also ensure that appropriate safeguards are in place, such as Adequacy decisions approved by the European Commission, or Standard Contractual Clauses approved by the European Commission.
Cookies
Our website does not use cookies or similar tracking technologies.
Your rights
Under the GDPR, you have the following rights regarding your personal data:
Right of access – to obtain a copy of your personal data,
Right to rectification – to correct inaccurate or incomplete data,
Right to erasure (“right to be forgotten”) – to request deletion where data is no longer necessary,
Right to restriction of processing – to limit how we process your data,
Right to data portability – to receive your data in a structured, commonly used format,
Right to object – to processing based on legitimate interests,
Right to withdraw consent – where processing is based on consent,
Right to lodge a complaint – with a supervisory authority.
The supervisory authority in the Netherlands is the Autoriteit Persoonsgegevens. Without prejudice to any other remedies, you have also right to file a complaint either in your habitual residence, or the country you deem that data protection law has been infringed, in accordance with Article 77 and 79 of the GDPR.
Exercising your rights
To exercise any of your rights, please contact us at info@zeniqconsultancy.com. We will respond to your request in accordance with applicable data protection laws. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal or processing based on other legal grounds.
Questions and updates
If you have any questions or concerns about this Privacy Statement, you may contact us at info@zeniqconsultancy.com. We may update this Privacy Statement from time to time to reflect changes in law or our data processing practices. The most recent version will always be available on www.zeniqconsultancy.com.