Who we are
co-one is responsible for processing personal data as described in this privacy statement.
iunxi Group
Verlengde Duinvalleiweg 102
1361 BR Almere, The Netherlands
Chamber of Commerce number: 90533194
Phone: +31 88 54 00 500
Email: info@co-one.com
co-one comprises the companies iunxi, Infield ICT, DataMobility, and Veducon.
What data we process and why
When you contact us
When you fill out a contact form, schedule an introductory call, or phone or email us, we process your name, email address, phone number, organization, job title, and the content of your message.
Purpose: to answer your question and stay in touch with you.
Legal basis: performance of a contract or, in the preparatory phase, our legitimate interest in responding to your request.
Retention period: 24 months after your last contact with us.
When you apply for a job
When you apply, we process your contact details, resume, cover letter, and any other information you share during the process.
Purpose: to assess whether there’s a match.
Legal basis: taking steps prior to entering into an employment contract.
Retention period: up to four weeks after the process concludes. With your consent, we’ll keep your details for up to one year for future openings.
When you’re a customer or contact us on a customer’s behalf
We process contact and job-role details of our customers’ employees, along with data generated in delivering our services, such as support tickets and account information.
Purpose: delivering our services, billing, and account management.
Legal basis: performance of the contract and our legitimate interest in maintaining a good customer relationship.
Retention period: for the term of the contract and 24 months thereafter. Financial records are kept for seven years to comply with tax retention requirements.
As the administrator of your IT environment
In managing IT infrastructure, cloud environments, and applications for our customers, we may have access to systems containing personal data. In that situation we are a processor, not a controller. The customer determines which data is processed and for what purpose. We set out those arrangements in a data processing agreement.
When you receive our newsletter
We process your name, email address, and data about how you interact with our mailings, such as whether you open a message or click on it.
Purpose: to keep you informed about developments, services, and insights.
Legal basis: your consent, or our legitimate interest if you’re a customer.
You can unsubscribe at any time via the link at the bottom of every mailing.
When you visit our website
We process your IP address, browser type, device information, and your behavior on the site.
Purpose: to keep the site running, secure, and improving.
Legal basis: legitimate interest for essential functionality, and your consent for analytics and marketing cookies.
Cookies and similar technologies
Our website uses cookies. We distinguish between:
Essential cookies keep the site working and secure. We always place these.
Analytics cookies give us insight into how the site is used, so we can improve it.
Marketing cookies let us see which content is relevant and show targeted communications.
Among other tools, we use HubSpot for marketing automation and tracking website visits, along with Google Analytics and the LinkedIn Insight Tag for analytics purposes.
You can delete or block cookies through your browser settings.
Sharing with others
We don’t sell your data. We only share data when it’s necessary:
- With suppliers who process on our behalf, such as our hosting, email, and CRM partners. We enter into data processing agreements with them.
- Within the co-one group, when needed to deliver our services.
- With regulators or law enforcement, when we’re legally required to do so.
Some of our suppliers are located outside the European Economic Area. When we transfer data to those countries, we do so on the basis of an adequacy decision by the European Commission or through standard contractual clauses, supplemented with appropriate additional safeguards.
Security
We take data security seriously. co-one works in line with ISO 27001 and ISO 9001, meets NEN 7510 for information security in healthcare, and complies with the NIS2 Directive. In practice, this means encrypted connections, access management on a need-to-know basis, logging and monitoring, and regular audits.
Spotted a vulnerability or suspect a data breach? Get in touch at bjorn.bats@co-one.com.
Your rights
You have the right to:
- Request access to the data we process about you
- Have inaccurate data corrected
- Have your data deleted
- Have processing restricted
- Object to processing based on legitimate interest
- Receive your data in a common format or have it transferred
- Withdraw consent you’ve given, without affecting the lawfulness of earlier processing
Send your request to info@co-one.com. We’ll respond within one month. To prevent misuse, we may ask you to verify your identity.
Disagree with how we handle your data? You can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
Changes
We update this statement when our services or regulations call for it. The current version is always available on this page, with the date of the most recent change shown at the top.
