Privacy statement

This is the privacy statement for Gridwise Engineering & Services B.V. (Gridwise Engineering & Services), with its registered office at Concourslaan 17, 9727 KC Groningen, Netherlands. Gridwise Engineering & Services is listed in the Dutch business register under number 02038628.

We are strongly committed to protecting your personal data. You can read in this privacy statement how we handle your personal data. Gridwise Engineering & Services respects your privacy and complies with the General Data Protection Regulation (GDPR) and the Dutch legislation implementing the GDPR. This privacy statement applies to:

• visitors to our website

We have a separate privacy statement for job applicants, which you can read (in Dutch) here.

Personal data means all information that says something about you directly or that can be traced back to you as an individual. Gridwise Engineering & Services only processes the personal data we need to perform our work and only if we have a lawful basis for doing so. Gridwise Engineering & Services processes personal data on the following lawful bases:

• where necessary to comply with the law;
• where necessary to execute a contract (agreement) between you and Gridwise Engineering & Services;
• where Gridwise Engineering & Services has a ‘legitimate interest’ (sound reason) in processing your data;
• where you have given Gridwise Engineering & Services permission (‘consent’) to process your personal data, like when you consent to the placement of cookies when visiting our website, for example. If you have given us consent to process certain personal data, you may withdraw your consent at any time and we will stop processing your data for that specific purpose.

Gridwise Engineering & Services always adheres to the principle that personal data is to be processed in a manner that is lawful, fair and transparent to you.

We collect the following information on visitors to our websites:

If you submit a responsible disclosure: 

If you become aware of a vulnerability or weak spot in an IT system or on this website and wish to report this, you can do this by submitting what’s called a ‘responsible disclosure’ to Gridwise Engineering & Services. For this we ask you for your name and email address. 

Cookies:

Personal data can also be collected by cookies, small text files that are sent to and stored on your computer. Gridwise Engineering & Services uses cookies on this website. See our cookie statement for detailed information on the use of cookies on the Gridwise Engineering & Services website. If you do not want to accept cookies from Gridwise Engineering & Services, you can disable them through your browser. The Help section of your browser will explain how to do this. You can still visit our website even if you disable cookies.

Via social media, we collect the following information:

We use the Coosto platform to monitor public posts on social media, blogs, forums, and news websites. This helps us understand social trends, customer questions, and public opinions that are relevant to our communication and services.
Coosto only collects publicly available data from these platforms, so no information is taken from private profiles or private messages. Examples of data that may be collected include usernames, profile photos, location data, and the content of public posts. We use this information solely to analyze and improve our communication and services. All data is processed in accordance with the GDPR and aligned with the purposes described in this privacy statement. Where possible, the data is anonymized.

Gridwise Engineering & Services keeps personal data for as long as necessary for the purposes for which this information was collected. In some cases, we are legally required to retain records for a minimum period, such as the fiscal retention periods. We keep visitor data for no longer than six months.

If you have any questions about how long we keep particular data, you can send us an email at [email protected].

Gridwise Engineering & Services takes appropriate technical and organisational measures to protect personal data against theft, misuse, unauthorised access, disclosure, alteration and/or destruction. These are some examples of the measures we take:

• We store personal data on computer systems in controlled environments with restricted access.
• We use encryption and other security technologies to protect data during transmission.
• We arrange regular security audits and risk assessments.
• Our staff are instructed on data protection and security protocols.

Processing of personal data by data processors

Gridwise Engineering & Services sometimes engages a third party to provide or perform a service. If this party has access to your personal data, the third party is considered to be a data processor. Gridwise Engineering & Services has implemented the necessary contractual and organisational measures to ensure that the data processor only processes your personal data for the agreed purposes, as clearly set out in the data processing agreement we have concluded with them. 

Sharing your personal data with third parties other than data processors

Gridwise Engineering & Services only shares your personal data with third parties to comply with legal obligations or after you have given consent for this.

Gridwise Engineering & Services aims to only use data processors located in the European Economic Area (EEA). If Gridwise Engineering & Services decides to transfer personal data for processing by a party located outside the EEA, Gridwise Engineering & Services will take the necessary data protection and security measures.

As a data subject, you have the following rights:

• Right to be informed: you can ask Gridwise Engineering & Services about which personal data it processes and its reasons for doing so.
• Right of access: you can ask Gridwise Engineering & Services to provide you access to your personal data.
• Right to rectification: if the personal data Gridwise Engineering & Services holds about you is incorrect and/or incomplete, you can ask Gridwise Engineering & Services to correct and/or supplement this.
• Right to be forgotten: you can ask Gridwise Engineering & Services to delete your personal data, in which case Gridwise Engineering & Services will assess whether there are grounds for fulfilling your request.
• Right to restriction of processing: you can ask Gridwise Engineering & Services to restrict the processing of your personal data, which you may do, for example, if the data is inaccurate or the processing is unlawful.
• Right to object: you can object to the processing of your personal data due to your specific situation, in which case Gridwise Engineering & Services will comply with your request unless there are compelling reasons to continue processing your personal data.

If you wish to exercise any of these rights, you can send an email to [email protected]. Gridwise Engineering & Services will let you know as soon as possible, but in any case within one month, how we have handled your request and, if applicable, provide you with the requested information. Depending on the complexity of your request or the number of requests Gridwise Engineering & Services receives, Gridwise Engineering & Services can extend this period by two months, in which case Gridwise Engineering & Services will inform you of the longer response period.

If you believe that Gridwise Engineering & Services has not sufficiently addressed your request, you can file a complaint with the Dutch Data Protection Authority.

Gridwise Engineering & Services may amend this privacy statement from time to time and so we advise you to consult it regularly on Gridwise Engineering & Services’s website to see the latest version. If Gridwise Engineering & Services amends its privacy statement, we will revise the date at the bottom of the privacy statement.

For complaints, queries or comments about the use of personal data, you can send us an email at [email protected].

Last updated: 12 March 2026

We pay a lot of attention to the safety and security of our information systems. However, if you find a weakness or something that could be improved, we would like you to inform us as soon as possible.

Form report Responsible Disclosure