Antivirus that a small IT team can actually run.

Legal

Privacy Policy

Last updated: 8 September 2026

Instituut voor Natuurvorsing B.V., trading as My Cloud Security Partner (“we”, “us”), respects your privacy. This policy explains which personal data we collect through this website and in the course of delivering our services, why we collect it, and what rights you have. We process personal data in accordance with the General Data Protection Regulation (GDPR / AVG).

1. Controller

Controller	Instituut voor Natuurvorsing B.V.
Address	Cortgene 18, 2951 ED Alblasserdam, Netherlands
Chamber of Commerce (KvK)	71178422
Email	support@mycloudsecuritypartner.com

We are not required to appoint a Data Protection Officer. Privacy questions and requests are handled at the email address above.

2. Personal data we process

• Contact and enquiry data — name, company, email address, telephone number and the content of your message when you contact us or request a demo.
• Customer administration data — contact details of your staff, contract details, billing address and payment information.
• Service data — when you use our endpoint protection software, technical data from managed devices such as device name, user account name, operating system, IP address, installed software, detection events and file metadata.
• Website data — technical request data such as IP address, browser type, referring page and timestamps, processed by our hosting and security provider.

We do not knowingly collect data from children, and we do not process special categories of personal data through this website.

3. Purposes and legal bases

Purpose	Legal basis (GDPR Art. 6)
Responding to enquiries and demo requests	Steps prior to entering a contract (Art. 6(1)(b)) or legitimate interest (Art. 6(1)(f))
Delivering, supporting and securing our services	Performance of a contract (Art. 6(1)(b))
Detecting and blocking malware and abuse	Legitimate interest in information security (Art. 6(1)(f))
Invoicing and financial administration	Legal obligation (Art. 6(1)(c))
Website security and availability	Legitimate interest (Art. 6(1)(f))
Marketing emails to existing customers or where you opted in	Consent (Art. 6(1)(a)) or legitimate interest (Art. 6(1)(f))

4. Our role when you use our software

When we deliver endpoint protection to your organisation, your organisation is the controller for the personal data on the managed devices and we act as processor on your behalf. Those activities are governed by a data processing agreement, which we conclude with every customer and which is available on request at support@mycloudsecuritypartner.com.

5. Cookies and analytics

This website is a static site and sets no tracking or advertising cookies. Strictly necessary cookies may be set by our hosting and security provider to keep the site available and to mitigate attacks; these are exempt from the consent requirement under Article 11.7a of the Dutch Telecommunications Act. [If you later add analytics, a chat widget, embedded video or advertising pixels, add a consent banner and describe those tools here.]

6. Sharing with third parties

We share personal data only where necessary, with categories of recipients including:

• hosting, CDN and DNS providers for this website (Cloudflare, Inc.);
• the software vendor(s) whose endpoint protection technology we deliver and operate ([vendor name(s)]);
• email, CRM, ticketing and accounting providers used to run our business ([list providers]);
• professional advisers and authorities, where we are legally required to disclose.

Each processor is bound by a data processing agreement. Where a transfer outside the European Economic Area is unavoidable, it takes place under an adequacy decision or the European Commission's Standard Contractual Clauses, with supplementary measures where required.

7. Retention

• Enquiries that do not lead to a contract: [12] months after the last contact.
• Customer administration: for the duration of the contract and [2] years thereafter.
• Invoices and financial records: 7 years, as required by Dutch tax law.
• Security and detection logs: [12] months, unless a longer period is needed to investigate an incident.

8. Security

We apply appropriate technical and organisational measures, including encryption in transit and at rest, role-based access control, multi-factor authentication for administrative access, logging and regular patching. If a personal data breach occurs, we notify the Dutch Data Protection Authority and affected individuals where the GDPR requires it.

9. Your rights

You have the right to access, rectify or erase your personal data, to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting processing already carried out. To exercise these rights, email support@mycloudsecuritypartner.com. We respond within one month. We may ask you to identify yourself so that we do not disclose data to the wrong person.

You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or with the supervisory authority in your country of residence.

10. Changes to this policy

We may update this policy to reflect changes in our services or the law. The current version is always published on this page with its date of last revision.