Legal
Privacy & cookie statement
This statement explains what personal data Embris B.V. processes when you visit embris.nl or contact us, why, and what rights you have. It covers this public website only. The Embris learning platform at embris.ac will have its own privacy policy when it opens.
1. Who we are
Embris B.V.
Meerkollaan 84, 5613 BW Eindhoven, the Netherlands
Chamber of Commerce (KvK): 42185323
VAT: NL870089699B01
Email: info@embris.ac
Embris B.V. is the controller for the processing described here, within the meaning of the General Data Protection Regulation (GDPR).
2. What we process and why
| Situation | Data | Purpose & legal basis | Kept for |
|---|---|---|---|
| Visiting the website | IP address, browser and device information, requested page, date and time (technical server logs) | Delivering the site securely and protecting it against abuse. Legitimate interest (art. 6(1)(f) GDPR). | Kept by our hosting provider only as long as needed for security and troubleshooting, under its retention policy. We do not store or analyse these logs ourselves. |
| Emailing us | Name, email address and anything you choose to write | Answering your question and following up. Legitimate interest (art. 6(1)(f)): being able to answer and follow up on messages sent to us. Where you ask about working with us, steps before a contract at your request (art. 6(1)(b)). | As long as needed to handle your message, and at most 2 years after the last contact unless a contract follows |
| Applying for a role | CV, motivation, contact details and anything else you send | Assessing your application. Steps before an employment or collaboration agreement (art. 6(1)(b)). | Up to 4 weeks after the procedure ends, or up to 1 year if you consent (art. 6(1)(a)) so we can contact you about future roles |
You are not obliged to give us personal data. Without it, we cannot answer your email or assess your application.
We do not sell personal data, do not use it for advertising, and do not take automated decisions about you.
3. Cookies and tracking
embris.nl does not use analytics, advertising, social-media or other tracking cookies, and does not load third-party trackers or fonts. That is why you do not see a cookie banner.
Our hosting and security provider may place a strictly necessary cookie to tell real visitors apart from automated attacks. Such cookies are functional, do not track you across websites, and do not require consent under the Dutch Telecommunications Act (art. 11.7a).
4. Who we share data with
We only use service providers that process data on our behalf and under a data processing agreement:
- Cloudflare, Inc. hosts and protects this website.
- Google (Google Workspace) handles our email.
If you contact us through LinkedIn, LinkedIn processes those messages under its own privacy policy, as an independent controller.
These providers may process data outside the European Economic Area, including in the United States. Where that happens, transfers are covered by the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses. We do not share your data with anyone else unless we are legally required to.
5. Your rights
You have the right to access, correct or delete your personal data, to restrict or object to its processing, and to data portability. Where we rely on your consent, you can withdraw it at any time. Email info@embris.ac and we will respond within one month. We may ask you to confirm your identity first.
Right to object. Where we rely on legitimate interest, you can object at any time, on grounds relating to your particular situation, by emailing info@embris.ac. We will then stop, unless we have compelling legitimate grounds that override your interests or need the data for legal claims.
If you are unhappy with how we handle your data, please tell us. You can also lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.
6. Security
The site is served only over an encrypted connection (HTTPS) and holds no accounts, forms or databases. Access to our mailboxes is limited to the people who need it.
7. Changes
We will update this statement when our website or processing changes, for example if we add a contact form or analytics. The date at the top shows the latest version.