Privacy & Cookie Policy

Privacy & Cookie Policy

Introduction

Governique Assurance ("we", "us" or "our") provides risk, controls and compliance services for regulated or operationally complex organisations. This policy explains how we collect, use, disclose, retain and protect personal data when you visit governiqueassurance.com, contact or contract with us, or interact with systems we operate for clients.

Company and privacy contact details

Company: Governique Assurance. Headquarters: Amsterdam, Netherlands. Website: governiqueassurance.com. Privacy email: privacy@governiqueassurance.com.

Our role in data processing

Governique Assurance is generally the controller for its own website, business administration and services offered directly. Where we handle personal data solely under a client’s documented instructions, the client is normally the controller and Governique Assurance acts as processor or service provider.

Personal data we collect

Depending on the service and your relationship with us, we may collect business contact data, correspondence, client and stakeholder contacts, policies, control records, audit evidence, risk assessments, incident materials, technical website data, cookie choices, security logs, and information you provide in enquiries or support requests.

How we collect personal data

We collect data directly from you; from your employer, client, authorised administrator or service partner; automatically from authorised websites, applications and security systems; and from public or licensed sources where lawful and relevant.

Why we process personal data

We process personal data to assess risks and controls, organise evidence, support audit readiness and continuity, administer secure workspaces, respond to enquiries, prepare proposals, manage contracts and suppliers, protect people and systems, comply with law and maintain required records. We do not sell personal data for money.

Legal bases

Where the EU GDPR, Dutch GDPR Implementation Act and applicable electronic-communications rules require a legal basis, we rely as appropriate on contract, legal obligation, consent, vital interests in a genuine emergency, and legitimate interests balanced against individual rights.

Sharing personal data

We disclose only what is reasonably necessary to authorised hosting, cloud, security, analytics, communications, payment, customer-support and professional-service providers; clients and authorised administrators; operational partners; advisers, auditors and regulators where appropriate.

International transfers

Where transfer restrictions apply, we use a lawful mechanism appropriate to the relevant jurisdiction, such as an adequacy decision, approved contractual clauses or another recognised safeguard.

Retention

We retain personal data only as long as needed for the purpose collected. Website enquiries and unsuccessful proposals are generally retained for up to 24 months after the last substantive contact, subject to legal, regulatory, dispute and security requirements.

Security

We use proportionate technical and organisational safeguards including access controls, authentication, encryption where appropriate, logging, monitoring, secure change processes, incident management, backup and recovery controls and supplier review.

Your privacy rights

Subject to applicable law, you may have rights to access, correct, delete or restrict personal data; object to certain processing; request portability; withdraw consent; change cookie choices; and lodge a complaint. Contact privacy@governiqueassurance.com.

Cookies and similar technologies

The site may use strictly necessary cookies for security, navigation, forms and privacy choices; preference cookies for requested settings; analytics cookies to understand aggregate use; and marketing cookies only when clearly identified and lawfully enabled. Non-essential cookies operate only after consent where required.

Direct marketing

We may send relevant business communications where permitted by law. You can opt out through the message or by contacting us. Service, security and transaction messages are not marketing.

Children

Our website and business services are not directed to children unless a specific service notice states otherwise. We do not knowingly collect a child’s personal data in breach of applicable requirements.

Changes to this policy

We may update this policy when our services, technology, law or processing change. The latest version will be published on governiqueassurance.com with its revision date.

Contact us

Questions, complaints or privacy requests may be sent to privacy@governiqueassurance.com or addressed to Governique Assurance, Amsterdam, Netherlands.