Privacy statement

Openet B.V. is the controller for the personal data described here. This statement covers openet.nl. It does not cover the sites of other companies in the group, which publish their own.

Draft. This text has not yet been reviewed by counsel and is published so the site is not launched without it.

What this website collects

Nothing. openet.nl is a set of static pages. There is no contact form, no account, no comment field and no newsletter sign-up, so there is no point at which the site asks you for personal data or receives it.

We run no analytics and no advertising or tracking technology of any kind. We do not build profiles of visitors and we do not attempt to identify you. What our hosting providers necessarily see in order to deliver a page is described under Third parties below.

Cookies and local storage

Two things are stored in your browser. Neither identifies you and neither is used to track you.

A security cookie. The site is delivered through Cloudflare, which sets a cookie named __cf_bm when you request a page. It tells automated traffic apart from human visitors, expires after thirty minutes, cannot be read by JavaScript, and carries no identifier that follows you to any other site. It is a security measure rather than analytics: we do not read it and we receive nothing from it.

A language preference. The site stores one value in your browser’s local storage, under the key openet-lang, which records whether you chose Dutch or English so the choice survives to your next visit. It holds nothing but the two letters nl or en, it never leaves your device, and it is not readable by us or by anyone else.

Under Article 11.7a of the Dutch Telecommunications Act both are strictly necessary — one to deliver the service you asked for, one to keep the site secure — so no consent banner is required. Clearing your browser’s site data removes both.

Third parties

No third-party content is embedded in these pages. Fonts, images, styles and scripts are all served from openet.nl itself, so loading a page contacts no advertising network, no analytics service, no font service, no embedded video, no map widget and no social plug-in.

Two providers deliver the site. It is hosted on DigitalOcean’s App Platform, with the origin server in Frankfurt, and served through Cloudflare’s content delivery network, which DigitalOcean operates in front of it. Delivering a page necessarily means both see the request: your IP address, the page asked for and the time. They act as processors on our instructions and not for their own purposes.

Their server and edge logs are kept briefly, for delivery and for security, and are not used to analyse visitors.

Data you send us directly

If you write to info@openet.nl or telephone us, we hold what you send: your name, your contact details and whatever the message contains. The lawful basis is our legitimate interest in answering correspondence, or the steps taken at your request before entering a contract.

We keep business correspondence for as long as the relationship is live and for a reasonable period afterwards, and longer where Dutch tax and company law requires it — seven years for records bearing on our accounts. We do not sell correspondence and we do not use it for marketing to people who have not asked for it.

Your rights

Under the GDPR you may ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to erase it, ask us to restrict or stop processing it, and ask for it in a portable form. Where processing rests on legitimate interest you may object to it.

Write to info@openet.nl. We answer within one month. If you are not satisfied you may complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl.

Transfers and security

Correspondence and our own records stay within the European Economic Area, and the origin server is in Frankfurt. Cloudflare answers from whichever of its locations is nearest to you, which is usually inside the EEA but is not guaranteed to be; transfers beyond it rest on the safeguards in Cloudflare’s data processing agreement.

The site is served over HTTPS. Because the site itself collects nothing, the material risk sits in e-mail rather than in the website, and we treat correspondence accordingly.

Changes

If this statement changes we will replace it here and move the date below. There is no mailing list to notify.