Privacy Policy

How we collect, use, and protect your personal information

Last updated: August 22, 2025

1. Introduction

ICT4MKB, operated by Sergen Ilhan, is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and protect your personal information when you use our website and services.

We comply with the General Data Protection Regulation (GDPR) and Dutch data protection laws.

2. Data Controller

The data controller for your personal information is:

  • Name: Sergen Ilhan
  • Business: ICT4MKB
  • Email: info@ict4mkb.com
  • Phone: +31 68 270 6090
  • Country: Netherlands

3. Information We Collect

3.1 Information You Provide Directly

  • Contact information (name, email address, phone number)
  • Business information (company name, industry, size)
  • Communication preferences
  • Information in emails, calls, or meetings

3.2 Information Collected Automatically

  • Website usage data (pages visited, time spent)
  • Technical information (IP address, browser type, device type)
  • Cookies and similar technologies (with your consent)

4. How We Use Your Information

We use your personal information for the following purposes:

4.1 Service Provision

  • Providing Microsoft technology services and support
  • Responding to your inquiries and requests
  • Scheduling and conducting consultations
  • Project management and delivery

4.2 Communication

  • Sending service-related communications
  • Providing technical updates and security alerts
  • Sharing relevant industry insights (with your consent)

4.3 Legal Compliance

  • Compliance with legal and regulatory requirements
  • Record keeping for business and tax purposes

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contract performance: To fulfill our service agreements
  • Legitimate interests: For business operations and service improvement
  • Consent: For marketing communications and non-essential cookies
  • Legal compliance: To meet regulatory requirements

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your data in the following limited circumstances:

  • Service providers: Trusted third parties who assist in service delivery (under strict confidentiality agreements)
  • Microsoft: When necessary for license management or support
  • Legal requirements: When required by law or to protect legal rights

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Encryption of data in transit and at rest
  • Access controls and authentication measures
  • Regular security assessments and updates
  • Secure data backup and recovery procedures
  • Employee training on data protection

8. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

  • Active client data: For the duration of our business relationship plus 7 years for legal/tax purposes
  • Inquiry data: 2 years after last contact (unless you become a client)
  • Website analytics: 26 months (Google Analytics default)
  • Marketing communications: Until you unsubscribe or object

9. Your Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right of access: Request copies of your personal data
  • Right to rectification: Request correction of inaccurate data
  • Right to erasure: Request deletion of your data
  • Right to restrict processing: Limit how we use your data
  • Right to data portability: Receive your data in a portable format
  • Right to object: Object to processing based on legitimate interests
  • Right to withdraw consent: For processing based on consent

To exercise these rights, contact us at info@ict4mkb.com. We will respond within 30 days.

10. Cookies and Tracking

We use cookies and similar technologies to improve your experience on our website. We distinguish between:

Essential Cookies

  • Required for website functionality
  • Language preferences
  • Security features

Analytics Cookies (with consent)

  • Google Analytics for website improvement
  • Usage statistics and performance monitoring

You can manage your cookie preferences through our cookie banner or your browser settings.

11. International Data Transfers

We primarily process data within the European Union. When we use services that may transfer data outside the EU (such as Microsoft services), we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions by the European Commission
  • Certification schemes and codes of conduct

12. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal compliance. We will notify you of any material changes by:

  • Posting the updated policy on our website
  • Sending email notifications to existing clients
  • Updating the 'Last updated' date at the top of this policy

14. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

  • Email: info@ict4mkb.com
  • Phone: +31 68 270 6090
  • Subject line: "Privacy Policy Inquiry"

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we have not handled your personal data appropriately.