Privacy and cookie statement

The privacy and cookie policy below applies to all website visits, transactions and agreements with Digiworxspace B.V., Mia van IJperenplein 82, 3065 JK Rotterdam.

Version: October 2026, version 2.

We respect the privacy of the visitors to our website and ensure that the personal information you provide to us is treated confidentially. You can read below exactly how we do this, and which personal data we collect from you for which purposes.

The use of personal data

When you use our website www.digiworxspace.nl, we obtain certain data from you. This may include personal data. We only store and use the personal data that you provide directly, in the context of the service you have requested (for example via the contact form, the Worxspace configurator or the chat assistant), or of which it is clear at the time of provision that it is given to us for processing. We will not use your personal data for other purposes, unless you have given prior consent for this or we are permitted or required to do so by law or under the agreement.

Purposes of use

In order to serve you optimally, it is necessary in certain cases for your personal data to be stored. Your personal data is used for the following purposes:

• Relationship management: to contact you when you request this.
• Orders via the Worxspace configurator: for handling your callback request or order, recording your SEPA mandate and preparing invoices.
• Website security: for securing forms and preventing spam and abuse (including with Google reCAPTCHA).
• AI chat assistant DigiX: for answering your questions via the chat assistant on our website.
• Marketing cookies: for tracking user sessions, collecting marketing insights, measuring advertising performance and integration with Google Analytics and Google Adsense.
• Statistical cookies: for analysing visitor behaviour and internal website optimisation.
• Necessary cookies: for basic functionalities such as securing forms, distinguishing between humans and bots, storing cookie preferences and displaying content correctly.
• Complaint handling: for handling complaints and complying with legal obligations.

We process personal data solely on the basis of your consent or where this is necessary on the basis of a legal ground, as required under the General Data Protection Regulation (GDPR).

Description of the personal data

For the above purposes, we will process the following personal data from you:

• name;
• e-mail address;
• company name;
• telephone number;
• registered company name, KvK number and address;
• confirmation of your authority to act on behalf of the company;
• IBAN and name of the account holder;
• SEPA mandate and the documents you have accepted (with version and time);
• company domain and chosen Worxspace configuration;
• content of chat messages with the chat assistant DigiX;
• browser and device data;
• cookie ID;
• IP address;
• click and browsing behaviour.

Retention periods and legal basis

We do not retain your personal data longer than is necessary to achieve the purposes mentioned in this privacy and cookie statement. The retention periods vary depending on the purpose of the processing. We apply the following retention periods per data category:

Relationship management

• Data: name, e-mail address, company name, telephone number.
• Retention period: a maximum of 2 years after the last contact.
• Legal basis: consent (GDPR, article 6(1)(a)).

Orders via the Worxspace configurator

• Data: contact details, registered company name, KvK number, address, company domain, chosen configuration, confirmation of authority, IBAN and name of the account holder, the SEPA mandate and the accepted documents (with version and time), and for the mandate also your IP address and the version of the mandate text.
• Retention period: a maximum of 2 years after the last contact if no agreement is concluded; if an agreement is concluded, 7 years after its end (statutory tax retention obligation). We retain the proof of your SEPA mandate in any case until at least 13 months after the last debit.
• Legal basis: performance of a contract or measures prior to entering into a contract (GDPR, article 6(1)(b)) and legal obligation (GDPR, article 6(1)(c)).

AI chat assistant DigiX

• Data: content of the chat messages and the data that you share in them yourself.
• Retention period: a maximum of 30 days after the last message in the conversation; after that, the conversation and the messages are deleted automatically.
• Legal basis: legitimate interest (GDPR, article 6(1)(f)).

Website security

• Data: IP address, browser and device data, behaviour on the page (Google reCAPTCHA) and a session ID (cookie csrfsessionid).
• Retention period: the cookie csrfsessionid until the end of the browser session; Google reCAPTCHA data in accordance with Google's privacy policy.
• Legal basis: legitimate interest (GDPR, article 6(1)(f)).

Marketing cookies

• Data: user ID, IP address, browsing behaviour and preferences.
• Retention period: until you opt out of cookies or a maximum of 1 year after your last visit to our website.
• Legal basis: consent (GDPR, article 6(1)(a)).

Statistical cookies

• Data: IP address, browsing behaviour, session duration, interactions on the website.
• Retention period: a maximum of 2 years, depending on the cookie settings.
• Legal basis: consent (GDPR, article 6(1)(a)).

Necessary cookies

• Data: cookie ID, stored cookie preferences and the security cookie csrfsessionid.
• Retention period: depending on the cookie settings, a maximum of 1 year.
• Legal basis: legitimate interest (GDPR, article 6(1)(f)).

Contact details in the context of complaints

• Data: name, contact details, content of correspondence.
• Retention period: a maximum of 5 years after the last correspondence, or longer if legally required.
• Legal basis: legal obligation or legitimate interest (GDPR, article 6(1)(c) and (f)).

After the retention period has ended, your data is securely deleted or anonymised, unless we are legally required to retain it for longer.

Confidentiality and disclosure to third parties

We treat your personal data confidentially. We may, however, provide the personal data that we collect via our website to third parties. This is done solely for specific purposes and in compliance with the applicable privacy legislation. For example, we may share your personal data with third parties that support us in our services, such as:

• Techone B.V., for the hosting of our website, the processing and sending of forms and e-mail, and ICT management;
• Google, for Google reCAPTCHA (protection against spam and abuse) and, only after your consent, Google Tag Manager and Google Analytics (statistics and marketing);
• Anthropic, as supplier of the AI model behind the chat assistant DigiX. The content of your chat messages is sent to Anthropic for this purpose.

We only provide personal data to third parties if this is necessary for the performance of our services, you have given prior consent for this, or this is legally required.

Transfers outside the EEA

Your personal data may in some cases be processed outside the European Economic Area (EEA), in particular in the United States by Google (reCAPTCHA, Google Public DNS, Google Tag Manager and Google Analytics), Microsoft (domain check) and Anthropic (chat assistant DigiX). Where this is the case, we ensure that appropriate safeguards have been put in place, such as the EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs) and additional security measures.

Data security

Careful security procedures are used to protect the processed personal data, including to prevent unauthorised persons from inadvertently gaining access to this data. In this way we ensure that only the necessary persons have access to your data and that access to your personal data is shielded. We take the following security measures:

• HTTPS connection: all data transfer takes place via a secure HTTPS connection.
• Encryption: personal data is stored and transmitted in encrypted form according to modern encryption standards.
• Access control: only authorised employees have access on the basis of the need-to-know principle, with strong passwords and two-factor authentication (2FA).

AI chat assistant DigiX

On our website you can ask questions to our chat assistant DigiX. The messages you type in the chat are sent to Anthropic, the supplier of the AI model that generates the answers, and stored by us in order to continue the conversation and improve the quality of the answers. Therefore, do not share sensitive personal data in the chat. Use of the chat is voluntary; the answers are informative and do not lead to automated decisions.

Domain check in the Worxspace configurator

If you enter a company domain in the Worxspace configurator, your browser checks this domain in order to advise on the right package. For this, your browser sends only the domain name directly to rdap.org, dns.google (Google Public DNS) and login.microsoftonline.com (Microsoft). These parties may also see your IP address in the process.

Google reCAPTCHA

The contact form and the Worxspace configurator are secured with Google reCAPTCHA v3. Google may process data such as your IP address and information about your browser and behaviour on the page to determine whether you are a human. The privacy policy and the terms of service of Google apply to that processing.

Cookies

On our website we use cookies to ensure that the site functions correctly and to optimise it. For example, this allows us to store your preferences. In addition, we use cookies to gain insight into your browsing behaviour, so that we can tailor content and advertisements to your interests.

Cookies are small information files that can be stored automatically on, or read from, your device (including a PC, tablet or smartphone) when you visit a website. This takes place via the web browser on the device. The information that a cookie obtains about your use of the website may be transferred to our organisation's own secure servers or to those of a third party.

Types of cookies

We use different types of cookies on our website to optimise functionality, statistics and marketing performance. Below you will find an overview of the three types of cookies that we use:

• Necessary cookies: necessary cookies help our website to function properly by enabling basic functions such as page navigation and securing forms. Without these cookies, the website cannot work correctly.
• Statistical cookies: statistical cookies collect anonymous data to give us insight into how visitors use the website. This information helps us to continuously improve the website and optimise the user experience.
• Marketing cookies: marketing cookies are used to track visitors across different websites. This enables us to show advertisements that better match individual preferences and interests, making advertisements more relevant and effective.

For a detailed overview of the specific necessary, statistical and marketing cookies that we use, with their purposes, retention periods and types, we refer you to the cookie banner on our website.

Profiling and automated decision-making

We do not use automated decision-making that has legal or similarly significant effects on users. We do, however, analyse browsing behaviour with the help of marketing cookies and analytical tools in order to optimise our website and advertisements. This form of profiling serves marketing purposes only and has no impact on your rights or personal situation.

Enabling and disabling cookies

When you visit our website, we ask for your consent to place cookies. This consent is recorded via a cookie banner, in which you are given the choice to accept or refuse cookies. Statistical and marketing cookies are only placed after you have given consent for this. When you visit our website, you can choose to:

• Accept all cookies: in this case, necessary, statistical and marketing cookies are placed.
• Accept cookies partially: you can enable or disable specific types of cookies, such as statistical or marketing cookies, according to your preferences. Only the cookies you have selected are placed, in addition to the necessary cookies that are always active to make the website function properly.
• Accept no optional cookies: if you choose not to accept any optional cookies, only the necessary cookies are placed. These cookies are essential for the correct functioning of our website and cannot be disabled.

Withdrawing consent

Most cookies have an expiry date. This means that they expire automatically after a certain period and no longer record any data about your site visit.

You can also choose to delete the cookies manually before the expiry date has passed. This can be done via the cookie banner, which you can reopen at any time to change your choice or withdraw your consent. In addition, you can always adjust your cookie preferences later via the browser settings, for example in Google Chrome, Firefox or Safari.

A distinction is made between first-party cookies and third-party cookies. First-party cookies are placed by the website you visit and help, for example, with remembering your preferences. Third-party cookies are placed by external parties, for example for advertising and tracking purposes. You can set in your browser which cookies you want to accept or block.

Links to other third-party websites

Our web pages contain links to other websites. This privacy and cookie statement does not apply to third-party websites that are connected to our website by means of links. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We therefore recommend that you read the privacy policy of these websites before using them.

Your legal rights

If you have questions or want to know which personal data we hold about you, you can always contact us. You can do this via the contact form on the website, by sending an e-mail to info@digiworxspace.nl, or by telephone on 010 - 8701360 Monday to Friday between 9.00 and 17.00.

You have the following rights:

• to receive an explanation of which personal data we have and what we do with it;
• access to the exact personal data we hold;
• having errors corrected;
• having outdated personal data deleted;
• withdrawal of consent;
• objecting to a particular use;
• portability of data;
• restriction of processing and data portability.

Please note that you always state clearly who you are, so that we can be sure that we do not amend or delete the data of the wrong person.

Changes to this privacy and cookie statement

We have the right to amend this privacy and cookie statement. Changes will be published on our website. We therefore recommend that you consult this policy regularly, so that you are aware of any changes.

Contact details

Digiworxspace B.V.
Mia van IJperenplein 82 | 3065 JK Rotterdam | The Netherlands
KvK: 42144437

Dutch Data Protection Authority (Autoriteit Persoonsgegevens)

Of course we are also happy to help you further if you have complaints about the processing of your personal data. Under privacy legislation you have the right to lodge a complaint with the Autoriteit Persoonsgegevens (the Dutch Data Protection Authority) about our processing of your personal data. You can contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).