Privacy policy
Who we are
Adso Security Consulting (sole proprietorship), KvK 42150046, De Nieuwe Erven 3, Unit 15233, 5431 NV Cuijk, Netherlands. Contact: contact@adsosecurity.com.
What we collect
- Just visiting: nothing from us. Cloudflare, which hosts this site, briefly keeps standard technical logs (such as IP addresses) for security.
- The Security Posture Check runs entirely in your browser — your answers never leave your device.
- The CISO waitlist form: your answers, name, email and optional phone or Signal handle. Submissions go through Cloudflare and are delivered straight to our inbox — no form service or other third party involved.
- If you email or message us: your address or number and whatever you write.
Why and on what basis
To reply to you, handle your waitlist request, and run the engagement if we work together (GDPR: steps taken at your request before a contract, the contract itself, or legitimate interest).
Where it's stored
Email, including form submissions, is handled by Proton AG (Switzerland — a country the EU considers adequate for data protection). The site and form run on Cloudflare (US company with EU data centers, covered by EU-approved transfer safeguards).
Client portal
If you are a client, your project information — project names, status, tasks we choose to share, links to deliverables, and (where we run one) your security posture scores — is stored in our own Cloudflare account (under the EU-approved transfer safeguards described above) so you can follow your engagement at adsosecurity.com/portal. Signing in uses a one-time code sent to your email by Cloudflare Access; we never see or store a password. We keep this data for the duration of the engagement plus the 7-year business-record obligations above, and remove portal access when an engagement ends.
How long
Waitlist entries and emails: as long as relevant to our contact — ask and they're deleted. Business records (invoices, contracts): 7 years, as Dutch tax law requires.
Sharing
We don't sell or share your data with anyone, except the providers named above or where the law requires it.
Your rights
You can ask to see, correct or delete your data: contact@adsosecurity.com. You can also complain to the Dutch data protection authority (Autoriteit Persoonsgegevens).