Privacy statement.

1. Introduction

This privacy policy applies to all processing of personal data by NewWorks B.V. (hereinafter: “NewWorks”, “we”, “us” or “our”), via the website www.newworks.ai and all associated subdomains, as well as in the provision of our services.

NewWorks respects your privacy and acts in accordance with the General Data Protection Regulation (GDPR), the Dutch GDPR Implementation Act (UAVG) and other applicable privacy legislation. We are not responsible for the privacy policy of other websites and sources.

Controller

2. Which personal data we collect

When you complete a form on our website, contact us, or use our services, we may collect and process the following personal data:

• First and last name
• Email address
• Telephone number
• Company name and job title
• The content of your message or question
• IP address and browser data (via cookies)
• Data you provide yourself in the context of a project or assignment

If you do not complete a form and do not accept cookies, we do not process any personal data, with the exception of technically necessary data for the operation of the website.

3. Purposes and legal bases of processing

We process your personal data solely for the following purposes, on the basis of the legal bases stated:

Performance of the contract (Article 6(1)(b) GDPR)

• Providing our AI advisory, development, implementation and training services
• Handling your contact requests and answering questions
• Drawing up and sending quotations and invoices

Consent (Article 6(1)(a) GDPR)

• Sending newsletters and marketing communications
• Placing analytical cookies

Legitimate interest (Article 6(1)(f) GDPR)

• Improving and optimising our website and services
• Analysing visitor behaviour on the website
• Securing our systems and preventing fraud

Legal obligation (Article 6(1)(c) GDPR)

• Complying with tax and administrative retention obligations

4. Cookies

Cookies are used on the website www.newworks.ai. Cookies are small text files that are placed on your device when you visit the website. We use the following types of cookies:

Functional cookies (necessary)

These cookies are essential for the operation of the website. They enable navigation and ensure that your preferences are saved. No consent is required for these.

Analytical cookies

Using services such as Google Analytics, we collect anonymised data about visitor behaviour on our website. This helps us improve the website. These cookies are only placed with your prior consent.

We do not currently place any marketing or advertising cookies. You can adjust your cookie preferences at any time via the cookie settings on our website.

5. Sharing personal data with third parties

NewWorks does not share your personal data with third parties, unless this is necessary for the performance of the contract, or where we are legally obliged to do so. We may share your data with:

• Hosting and IT service providers (for managing our website and systems)
• Accounting and administration (for invoicing and financial obligations)
• External AI platforms and cloud providers (only where necessary for project delivery, always with an appropriate data processing agreement and in accordance with the GDPR)
• Government authorities (where legally required)

With all external processors we conclude a data processing agreement that meets the requirements of the GDPR. We never sell your personal data to third parties.

6. Transfers outside the European Economic Area

Your personal data is preferably processed within the European Economic Area (EEA). If transfer to countries outside the EEA is necessary (for example when using certain AI platforms or cloud services), we ensure that appropriate safeguards are put in place, such as Standard Contractual Clauses (SCC) or an adequacy decision of the European Commission.

7. Retention periods

We do not retain your personal data longer than is necessary for the purposes for which it was collected. The following retention periods apply: contact details from forms are retained for up to 12 months after the last contact, unless a contract follows; client and project data is retained for the duration of the contract and for up to 2 years thereafter for any aftercare; tax and accounting data is retained for the legally required period of 7 years.

8. Security of personal data

We take the protection of your personal data seriously and put in place appropriate technical, physical and organisational measures to prevent misuse, loss, unauthorised access, unwanted disclosure and unlawful alteration. This includes, among other things, encrypted connections (SSL/TLS), restricted access to data, secure storage and periodic evaluation of security measures.

9. Your rights

Under the GDPR you have the following rights in relation to your personal data:

• Right of access: you can request which personal data we process about you
• Right to rectification: you can request that incorrect data be corrected
• Right to erasure: you can request that your data be deleted
• Right to restriction of processing: you can request that the processing be restricted
• Right to data portability: you can request to receive your data in a structured format
• Right to object: you can object to processing based on legitimate interest
• Right to withdraw consent: you can withdraw consent given earlier at any time

You can submit a request via info@newworks.ai. We respond to your request within 30 days. We may ask you to identify yourself before we process your request.

10. Complaints

If you have a complaint about compliance with this privacy policy or about the processing of your personal data, we ask you to first contact us via info@newworks.ai. If we cannot resolve it together, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, www.autoriteitpersoonsgegevens.nl).

11. Changes to this privacy policy

NewWorks reserves the right to amend this privacy policy. The most recent version is always available on our website. In the event of significant changes, we will proactively notify you. We advise you to consult this privacy policy regularly.

12. Governing law

This privacy policy is governed by Dutch law.

13. Contact

For questions about this privacy policy, you can contact: