This statement describes how Venimo complies with the General Data Protection Regulation (GDPR) and how we protect the privacy of our customers. Last updated: February 21, 2026
1. Introduction and applicability
The General Data Protection Regulation (GDPR) has been applicable in all EU member states since May 25, 2018. This regulation governs the processing of personal data and gives individuals more control over their data.
2. Data controller
Venimo is the data controller for the processing of personal data in the context of our hosting services.
Contact details data controller
- Company name: Venimo
- Chamber of Commerce: 80893619
- Email: privacy@venimo.nl
- Phone: +31 (0)85 060 1002
3. Categories of data subjects
We process personal data of the following categories of data subjects:
- Customers: Persons who use our hosting services
- Prospects: Persons interested in our services
- Website visitors: Persons who visit our website
- Contact persons: Persons who contact us
4. Processing purposes and legal bases
| Processing purpose | Legal basis | Retention period |
|---|---|---|
| Delivery of hosting services | Performance of agreement | Duration contract + 7 years |
| Customer service and support | Performance of agreement | 3 years after last contact |
| Billing and accounting | Legal obligation | 7 years (fiscal retention) |
| Website optimization | Legitimate interest | 2 years |
| Fraud prevention | Legitimate interest | 5 years |
5. Data protection by design
We apply the principles of 'privacy by design' and 'privacy by default':
- Privacy is considered from the design of new systems
- Data Protection Impact Assessments (DPIA) for risky processing
- Minimization of data collection
- Default privacy-friendly settings
6. Security measures
6.1 Technical measures
- Encryption: SSL/TLS for data transport, AES-256 for storage
- Access control: Multi-factor authentication, role-based access
- Network security: Firewalls, intrusion detection, DDoS protection
- Monitoring: 24/7 security monitoring, log analysis
- Backups: Automated, encrypted backups
6.2 Organizational measures
- Comprehensive privacy and security procedures
- Regular privacy and security training for employees
- Need-to-know principle for access management
- Confidentiality obligations for all employees
7. Rights of data subjects
Under the GDPR, data subjects have various rights:
- Transparency - Clear and understandable privacy information
- Access and portability - Access to all processed personal data
- Correction and deletion - Ability to correct and delete data
- Objection and consent - Right to object to processing
8. Processing agreements
With all processors who process personal data on our behalf, we conclude processing agreements that comply with Article 28 GDPR.
9. Data breaches
We have procedures in place for handling data breaches:
- Immediate notification to privacy officer
- Notification to DPA within 72 hours (if applicable)
- Information to data subjects in case of high risk
- Documentation of the incident
10. Complaints and disputes
If you are not satisfied with how we handle your personal data, you can contact us at privacy@venimo.nl or file a complaint with the Data Protection Authority.
Contact
- Privacy Officer: privacy@venimo.nl
- Phone: +31 (0)85 060 1002