Privacy Statement and Cookie Policy of Unhack Yourself (hereinafter referred to as: ‘Privacy Statement‘ and ‘Cookie Policy’)
Privacy Statement
Unhack Yourself BV, hereinafter referred to as: ‘Unhack Yourself’, is the supplier of the Unhack Yourself System and associated applications, hereinafter referred to as: the ‘UY System’. Unhack Yourself respects the privacy of all its customers and processes all personal data processed by it in accordance with the General Data Protection Regulation, hereinafter referred to as: the ‘GDPR’, the Privacy Statement and Cookie Policy and all other applicable legislation and regulations. By means of this Privacy Statement, Unhack Yourself wishes to inform all parties that come into contact with Unhack Yourself or with the UY System about the way in which Unhack Yourself handles the personal data of individuals, hereinafter referred to as: the ‘Data Subjects’, which data are processed by Unhack Yourself in its capacity as Processor or Controller within the meaning of the GDPR. Unhack Yourself sets out the following in this Privacy Statement:
- General contact information;
- Collecting personal data;
- Purpose of processing personal data;
- Basis for processing personal data;
- Categories and types of personal data;
- Retention periods;
- Sub processors;
- Storage of personal data;
- Access to personal data; and
- Rights of data subjects.
1. General (contact) information
Name and contact details Unhack Yourself:
- Unhack Yourself B.V.
- Jan Massenstraat 20, 1411 RW Naarden, The Netherlands
This email address is being protected from spambots. You need JavaScript enabled to view it. ,- +31 6 51991035
Name and contact details Sub processors:
- IJsfontein B.V., Kattenburgerstraat 5, Pand 024, 1018 JA Amsterdam, The Netherlands
- Greenhost B.V., Johan van Hasseltkade 202, 1032LP Amsterdam, The Netherlands
2. Collecting personal data
Unhack Yourself obtains the personal data from the Data Subjects, whether or not via an authorised third party, by the Data Subject:
- Using or intending to use of the services of Unhack Yourself;
- Creating an account;
- Completing the questionnaires;
- Using the UY System;
- Having a business relationship with Unhack Yourself;
- Completing a contact form on the Unhack Yourself website;
- Leaving his or her data at one of the Unhack Yourself offices or through other usual channels such as email and/or telephone;
- Enrolling for a course, session or experience at Unhack Yourself; and
- Applying for a job at Unhack Yourself.
Most of the data are provided by the Data Subject, whether or not through an authorised third party. The data involved depends on the specific services provided. Unhack Yourself collects no personal data via the cookies on the Unhack Yourself website (unhackyourself.com).
3. Purpose of processing personal data
Unhack Yourself processes the personal data for the following purposes:
- Logging into and securing the UY System;
- Generating results summaries of Data Subjects;
- Visually displaying Unhack Yourself individual results;
- Saving the data entered;
- Data analysis for improvement of the UY System;
- Communication with Data Subjects;
- Executing the agreement with Data Subjects;
- Application procedures;
- Laws and regulations; and
- Providing proper and efficient services.
4. Principles governing the processing of personal data
Unhack Yourself is the provider of the UY System with the associated applications. Unhack Yourself processes the personal data of Data Subjects in order to enter into or perform the agreement which is concluded, directly or indirectly, with Data Subjects. Unhack Yourself also processes personal data if required to do so by law, because it has a legitimate interest in doing so or if permission has been given.If a Data Subject has given Unhack Yourself permission to process his or her personal data for certain purposes, the Data Subject may revoke this permission at any time in the same manner as it was provided by him or her.In the event that Unhack Yourself processes personal data on the grounds of its legitimate interest, the Data Subject has the right not to complete these data or to object free of charge to the processing.
5. Categories and types of personal data
Unhack Yourself will process the following categories of personal data for the purposes described above:
- Name and address details such as first and last name, initials, title, gender (salutation), email address, address, postcode, town/city, telephone number and similar information required for communication;
- An administration number that is linked and does not contain any other information than the data described above;
- Login details and passwords, such as usernames, email address and first and last name;
- The results of the questionnaires completed by the Data Subjects;
- Nationality, country of residence, level of education, gender, job level, sector, work status, social status, residential environment, age category, date of birth;
- The results of the completed questionnaires, nationality, the generated end user profile, country of residence, level of education, gender, job level, sector, work status, social status, residential environment, age category, date of birth, motivation. These data together and/or combined with other data may be regarded as personal data;
- Curriculum Vitae (CV);
- Use of the UY System; and
Special personal data will not be processed.
6. Retention period
If Unhack Yourself acts as a Processor, it will apply the same retention period as the Controller, with the proviso that Unhack Yourself has instructed the Controllers to apply a retention period of 10 years.In the case of processing where Unhack Yourself acts as a Controller, it will not retain the data longer than necessary for the purpose for which they were collected. Unhack Yourself applies a retention period of 10 years in this respect. After this period the data will be destroyed by Unhack Yourself, unless it is required to retain the data for a longer period of time in order to comply with a statutory obligation.If the agreement between an authorised third party and the Data Subject ends, Unhack Yourself will take over the role of Controller as data controller. From that moment, Data Subjects should address Unhack Yourself directly. In that case, Unhack Yourself will retain the personal data and profile reports of the Data Subjects, using the above mentioned retention period. Unhack Yourself will take appropriate organisational and technical measures to protect the personal data of the Data Subjects.Data of job applicants will be retained for a maximum of one month after completion of a selection procedure, unless the Data Subject has given permission for the data to be retained for a longer period or the job application results in an employment contract. In that case, the data will be deleted at the latest after 10 years, unless a statutory obligation obliges Unhack Yourself to retain the data for a longer period of time.
7. Sub processors
Unhack Yourself uses the following subprocessors for hosting and maintaining the UY System:
IJsfontein BV
IJsfontein is a software developer. Unhack Yourself uses IJsfontein’s services to manage, maintain and develop the UY system.Unhack Yourself has an subprocessor agreement with IJsfontein. The sub-processor agreement between Unhack Yourself and IJsfontein can be viewed by emailing a request for review to
Greenhosting BV:
Amazon is a hosting provider that provides storage services. Unhack Yourself uses Greenhost’s services to store data from the UY System. The data from the UY System is stored by Greenhost in their data centre In The Netherlands.Amazon is committed to privacy. An overview of all privacy measures taken can be found at: https://greenhost.nl/privacy. In addition, Unhack Yourself has an subprocessor agreement with Greenhost. The subprocessor agreement between Unhack Yourself and Greenhost can be viewed by emailing a request for review to
8. Storage of personal data
Unhack Yourself is a Dutch company that also operates internationally. All data processed by Unhack Yourself, whether or not via the UY System, are processed and stored only in the data centres of its subprocessors and only in the European Economic Area (EEA).
9. Access of personal data
Only authorised employees of Unhack Yourself and of subprocessor, responsible for managing the database have access to the personal data. Employees of sub-processors have to abide by what is agreed upon in the sub-processor agreement.Employees of Unhack Yourself will only have access to personal data if they have signed a non-disclosure agreement. Employees of Unhack Yourself are aware of the security risks and their obligations with regard to the protection of personal data.Within the UY System there are two levels of the right to view the personal data of an account.
- Level 1 Admin: The right of an authorized employee of Unhack Yourself to view the Personal Information, Results archive and Subscription form of an account. This right to view personal data is solely for the purpose of preparation of coaching sessions, upon express consent of the Data Subject;
- Level 2: The Data Subject's right to view and/or change all results, personal information and/or subscription form within his or her own personal account.
10. Rights of Data Subjects
Under the GDPR, the Data Subject has the following rights:
- The right to data portability. (This is the Data Subject’s right to receive personal data and to transmit the data unhindered to another Controller or the right to request that personal data be transmitted directly to another Controller);
- The right to be forgotten. (This is the Data Subject’s right to be ‘forgotten’ in the UY System);
- Right of access. (This is the Data Subject’s right to access the personal data concerning them which are being processed);
- The right to rectification and supplementation. (This is the Data Subject’s right to modify or supplement the Data Subject’s personal data which are being processed);
- The right to restriction of processing. (This is the Data Subject’s right to have less of his or her data processed);
- The right with regard to automated decision-making and profiling. (This is the Data Subject’s right to human intervention in automatic decisions with legal effect);
- The right to object to the data processing. Unhack Yourself has adjusted its systems, processes and internal organisation to these rights so that it can respond properly, whether or not via an authorised third party, to the requests of Data Subjects.
In the event of complaints relating to the manner in which Unhack Yourself processes personal data, the party concerned must first contact Unhack Yourself (see above under 1. ‘General contact information’). In addition, the parties concerned have the right to submit a complaint to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via its website: https://autoriteitpersoonsgegevens.nl/en.
11. Amendments
Unhack Yourself reserves the right to amend its Privacy Statement and Cookie Policy. At the time of the amendment, the new policy will automatically be in force and replace the previous version. Since amendments may be made, Unhack Yourself advises all parties that come into contact with Unhack Yourself or the UY System to regularly review the Privacy Statement and Cookie Policy. This statement was last amended on 16 oktober 2023.
12. Contact details
For questions and/or comments about this Privacy Statement and Cookie Policy, please contact
Cookie Policy
Unhack Yourself collects no personal data via the cookies on the Unhack Yourself website (unhackyourself.com).