Privacy policy

Dikaris takes the protection of your personal data seriously. This policy explains which personal data we process when you visit our website or contact us, why we do so, and what rights you have. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and Dutch privacy law.

1. Who is responsible for your data

Dikaris, based in Enschede, The Netherlands, is the controller for the processing described in this policy.

• Email: dimitar.rangelov@dikaris.nl
• Phone: +31 616 048 126

2. Which personal data we process

When you contact us through the contact form, by email or by phone, we process the data you give us:

• your name and the organisation you work for;
• your email address and, if you provide it, your phone number;
• the content of your message and any further correspondence.

When you visit this website, our hosting provider may automatically record technical data such as your IP address, browser type and the date and time of your visit. This is needed to deliver the website and keep it secure.

3. Why we process your data and on what legal basis

• To answer your enquiry and to prepare or carry out an assignment. Legal basis: taking steps at your request before entering into a contract, and performing a contract (Article 6(1)(b) GDPR).
• To keep in touch with business contacts and to run a secure website. Legal basis: our legitimate interest (Article 6(1)(f) GDPR).
• To meet legal obligations, such as keeping financial records. Legal basis: legal obligation (Article 6(1)(c) GDPR).

4. Sensitive information

Please do not include special categories of personal data (for example health data) or data about criminal offences in the contact form or in a first email. If an assignment requires such information, we will agree a secure way to exchange it, and we will only process it where the law allows this (Articles 9 and 10 GDPR and the Dutch GDPR Implementation Act).

5. How long we keep your data

• Enquiries that do not lead to an assignment are deleted no later than 12 months after our last contact.
• Data relating to an assignment is kept for as long as necessary to carry it out and to meet our legal obligations. Financial records are kept for 7 years, as required by Dutch tax law.
• Technical log data is kept no longer than necessary to operate and secure the website.

6. Who we share your data with

We never sell your personal data. We only share it with:

• service providers that support us, such as our website hosting, email and IT providers. They act as processors on our instructions, under a data processing agreement;
• public authorities, only where we are legally required to do so.

If a service provider processes data outside the European Economic Area, we make sure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses.

7. Cookies

This website does not use analytics, advertising or tracking cookies. If that changes, we will update this policy and ask for your consent where the law requires it.

8. How we protect your data

We take appropriate technical and organisational measures to protect your personal data against loss and unauthorised access. These include encrypted connections, restricting access to authorised people only, and secure storage of case information.

9. Your rights

You have the right to:

• access the personal data we hold about you;
• have incorrect data corrected;
• have your data deleted;
• restrict the processing of your data;
• object to processing based on our legitimate interest;
• receive your data in a structured, commonly used format (data portability).

To exercise these rights, email dimitar.rangelov@dikaris.nl. We respond within one month. We may ask you to confirm your identity before we act on your request.

10. Complaints

If you are not satisfied with how we handle your personal data, please contact us first. You also have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

11. Changes to this policy

We may update this policy from time to time. The latest version is always published on this page, with the date it was last updated.