version 1.0, September 2026

 

Ninjible B.V. (“Ninjible”, “we”) attaches great importance to the protection of your personal data. In this privacy statement we explain which personal data we process, for what purpose, on what basis, how long we keep it and which rights you have. We process personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable laws and regulations.

 

The controller for the processing described in this statement is:

Ninjible B.V.

Amalialaan 126,

3743 KJ Baarn

Chamber of Commerce no.: 81883579 · VAT no.: NL862256872B01

Phone: 085 30 35 658 · Email: info@ninjible.com · Website: ninjible.com

If you have questions about privacy and data protection, you can contact us via info@ninjible.com.

 

We process personal data when you visit our website, contact us, use our (AI) services, request a quotation, enter into an agreement with us, apply for a job or sign up for our newsletter or other communications. In addition, we process personal data on behalf of our clients as a processor (see section 9).

 

- First and last name, job title and company name

- Business contact details: email address, phone number, (visiting and invoice) address

- Data you provide in correspondence or during conversations

 

- Invoicing details, bank account number and VAT number

- Data about the agreements concluded with you and the services delivered

 

- IP address, device and browser data

- Data about your use of the website via cookies and similar technologies (see section 8)

 

Name, contact details, CV, motivation and other data you provide in the context of an application

 

We process your personal data exclusively for specific purposes and on the basis of one of the legal bases of the GDPR:

 

Purpose	Legal basis
Performing the agreement and delivering our services	Performance of the agreement
Drawing up and sending quotations and maintaining customer contact	Performance of the agreement / legitimate interest
Invoicing and financial administration	Legal obligation / performance of the agreement
Improving and securing our website and services	Legitimate interest
Sending newsletters and commercial communications	Consent / legitimate interest
Handling applications	Consent / legitimate interest
Complying with legal obligations	Legal obligation

 

When we process data on the basis of consent, you can withdraw this consent at any time. This does not affect processing that took place before the withdrawal.

 

We keep personal data no longer than necessary for the purposes for which it was collected, or for as long as we are legally required to do so. As a guideline we use:

- Customer and agreement data: for the duration of the agreement and up to a maximum of seven years thereafter.

- Financial and administrative data: seven years, on the basis of the statutory tax retention obligation.

- Data of prospects and newsletter subscribers: until you unsubscribe or withdraw your consent.

- Application data: up to a maximum of four weeks after the procedure has been completed, or up to a maximum of one year with your consent.

- Website data and cookies: in accordance with the retention periods stated in our cookie policy.

 

We do not sell your personal data to third parties. We only share data if this is necessary for our services or to comply with a legal obligation. Think of:

- Hosting and cloud providers and other IT suppliers, including our hosting partner, who make our services and infrastructure possible.

- Suppliers of software for administration, communication, email and analytics.

- External advisors such as accountants, and authorities to which we are legally obliged to provide data.

 

With parties that process personal data on our behalf (processors) we conclude a data processing agreement in which appropriate arrangements on security and confidentiality are recorded. We process personal data in principle within the European Economic Area (EEA). If data is processed outside the EEA, we ensure appropriate safeguards, such as the standard contractual clauses of the European Commission.

 

We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. Think of encrypted connections, access security, authorisation policy, monitoring and periodic backups. Should there be a data breach with risk to data subjects despite our measures, we act in accordance with the statutory notification obligation.

 

Our website uses cookies and similar technologies. Cookies are small text files that are placed on your device. We use: Functional and necessary cookies, which are needed to make the website work properly. No consent is required for these. Analytical cookies, to measure and improve the use of the website. Marketing and tracking cookies, which we only place after your consent. You can adjust your cookie preferences at any time via the cookie settings on our website and delete cookies via your browser settings.

 

In the context of our services (such as development, hosting and maintenance of websites and applications) we also process personal data on behalf of our clients. In those cases our client is the controller and Ninjible acts as processor. We record the arrangements on this in a data processing agreement. This privacy statement does not cover those processing operations; the privacy policy of the relevant client applies to them.

 

Under the GDPR you have the following rights with regard to your personal data: Right of access to the personal data we process about you. Right to rectification of incorrect or incomplete data. Right to erasure (“right to be forgotten”). Right to restriction of processing. Right to data portability. Right to object to processing based on legitimate interest or for direct marketing. Right to withdraw a given consent. You can submit a request via info@ninjible.com. We respond within one month. To verify your identity we may ask for additional information.

 

Do you believe that we do not handle your personal data carefully? Please contact us first, so that we can look for a solution together. You also have the right to lodge a complaint with the supervisory authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl). 12. Changes We may amend this privacy statement from time to time, for example in the event of new developments or changed laws and regulations. The most current version can always be consulted on ninjible.com. This version dates from September 2026.