Privacy statement
We keep the personal data we process to a minimum. This statement explains what we collect when you use quantumsafeexperts.com, why, and what your rights are.
Last updated: 3 November 2026
Who we are
This website is run by ConsultingExperts B.V., trading as QuantumSafe. We are the controller for the personal data described here.
- Address: High Tech Campus 32, 5656 AE Eindhoven (also at de Rotterdam, Wilhelminakade 173, 3072 AP Rotterdam)
- Chamber of Commerce (KvK): 56065213
- VAT number: NL851962221B01
- Phone: 040-2405111
- Privacy questions: info@quantumsafeexperts.com
In short
- No tracking, no advertising and no analytics cookies.
- No cookie banner, because the public pages set no cookies at all.
- We never sell your data or use it for profiling.
- We only use what you send us to answer you.
What we process, and why
1. Visiting the website
Like every website, our hosting provider's web servers log technical data for each request: your IP address, the page requested, the date and time, and your browser type. We use this only to keep the website secure and working, for example to detect attacks or errors. This is our legitimate interest (Article 6(1)(f) GDPR). Our hosting provider keeps these logs for a short period, currently about a week, and then deletes them automatically. We do not use them to identify visitors.
2. Contacting us
If you contact us by e-mail or through the contact form, we receive what you send us: usually your name, e-mail address and message, and optionally your organisation and phone number. The contact form sends your message to us as an e-mail; it is not stored on the website. To stop spam, the website keeps a counter of how many messages were sent from the same connection in the past hour. It is linked to a scrambled (hashed) form of your IP address, not the address itself, and deleted within two hours.
We use this data only to answer your question and to follow up on it, for example by planning a workshop. The legal basis is taking steps at your request before entering into a contract, or our legitimate interest in answering you (Article 6(1)(b) and (f) GDPR). We keep this correspondence only as long as we need it to handle your question and any follow-up, and delete it when it is no longer needed. If it becomes part of an assignment, the statutory retention periods for our business records apply (in the Netherlands, generally seven years).
3. Blog
Reading the blog requires no personal data. A post usually shows the name of the colleague who wrote it; authors can choose to publish without their name.
Some posts may contain a video from YouTube or Vimeo. We embed these in privacy-enhanced mode (YouTube's "no-cookie" player and Vimeo's "do not track" setting). Nothing is loaded from YouTube or Vimeo until you press play. Once you do, the provider may process your IP address and device data under its own privacy policy.
4. Blog administration (employees only)
Our colleagues sign in to the blog administration with their Microsoft 365 work account. We then process their name and e-mail address to show who wrote a post and to manage access. This page sets one cookie, which only keeps the colleague signed in, and it expires after eight hours of inactivity. This cookie is strictly necessary, so no consent is needed for it.
Cookies
The public pages of this website set no cookies and load no tracking scripts, fonts or other content from third parties. The only cookie is the sign-in cookie for the blog administration described above. If this ever changes, for example because we start using analytics, we will update this statement first and ask for your consent where the law requires it.
Who else processes your data
We use a small number of service providers, who process data only on our behalf and under a data processing agreement:
- TransIP (the Netherlands): web hosting, including the server logs.
- Microsoft (Microsoft 365): e-mail, and sign-in for the blog administration.
Microsoft may process data outside the European Economic Area. Where it does, this is covered by the safeguards the GDPR requires, such as the EU Standard Contractual Clauses and the EU-US Data Privacy Framework. We do not share your data with anyone else, unless we are legally obliged to.
Security
ConsultingExperts holds the NIS2-SC10 Basic certificate of the NIS2 Supply Chain programme. As a security consultancy we practise what we preach. The website is served only over HTTPS with strict security headers. The blog administration is protected by our Microsoft 365 sign-in, including its multi-factor authentication, and only colleagues we have given access can use it.
Report a data breach
Do you suspect a data breach involving us? Please report it straight away to info@quantumsafeexperts.com or call +31 6 518 563 33.
Your rights
You have the right to access the personal data we hold about you, and to have it corrected or deleted. You may also restrict or object to its processing, and ask for a copy in a portable format. Send your request to info@quantumsafeexperts.com. We respond within one month.
If you are not satisfied with how we handle your data, please let us know. You also have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.
Changes
We may update this statement, for example when we add a new service. The date at the top shows when it last changed.