• Nederlands

Privacy

Privacy statement

Which personal data Twentynext collects through this website, why we do so, how long we keep it and who we share it with.

Who we are and how to reach us

Twentynext is the controller for the personal data collected through this website.

Do you have a question about this statement or about your data? Email info@twentynext.nl.

What data we collect, and why

We collect personal data at the moment you complete a form on our website yourself. Our forms run on Gravity Forms. Below you will find, per form, which data we ask for, why, and where the submission goes.

Contact form

On the page /en/contact-en/ we ask for: your choice of subject, name, email address, telephone number (optional) and your message. We use this data to answer your question. The submission goes to info@twentynext.nl.

Data Maturity Scan

On the page /en/data-maturity-scan-en/ you first work through a self-assessment of sixteen questions. Those sixteen answers stay in your browser, technically in your browser’s sessionStorage, and are not sent to Twentynext.

Only when you request a report yourself do you complete a form with: your name, business email address, company name (optional) and telephone number (optional). With that request we also send the scores per dimension calculated from your answers, not the individual answers themselves. This submission goes to sales@twentynext.nl.

Application form

On the page /en/apply/ we ask for: your name, email address, telephone number (optional), the vacancy you are applying for, a motivation (optional) and your CV (pdf, doc or docx). The submission, including your CV as an attachment, goes to info@twentynext.nl.

With every submission

For every submission, on each of the forms above, our form system automatically also stores your IP address and the time of sending. Submissions are kept in the website database. If you consent to measurement in the cookie banner, we additionally record, with our own cookie (tnx_acq), through which source or campaign you arrived and which steps you take on the site (for example: scan started, report requested), under a random number, without name or email address. If you then request a report or send a message, we link that submission to that origin. We keep this origin data for ninety days.

The grounds on which we may process your data

For the contact form and the report request from the Data Maturity Scan we process your data on the basis of a legitimate interest: you take the initiative to contact us, and we have an interest in being able to answer that question. For the application form the basis is the preparation of a possible employment contract. For measuring website use through Google Tag Manager and Leadinfo we ask for your consent in advance; you can withdraw it at any time.

How long we keep your data

We do not keep your data longer than necessary. The periods below apply to the forms above. Our form system enforces them automatically: once the period ends the submission is deleted, without anyone having to act.

Application data, including your CV, is deleted no later than four weeks after the application procedure has ended. If your response does not lead to a procedure, the system deletes your submission automatically no later than sixty days after receipt. If you would like us to keep your data longer for a future vacancy, we ask for your consent separately.

Contact and scan data is kept for twenty-four months from the moment of sending; after that the system deletes it automatically. Email correspondence arising from your message falls under our ordinary handling of business correspondence.

Who we share your data with

We do not pass your data on to other parties, other than to the service providers listed below who help run our website, and unless we are legally obliged to do so.

  • Google (through Google Tag Manager and Google reCAPTCHA): Google is based in the United States. See our
    cookie statement
    for exactly which data this concerns.
  • Leadinfo: a Dutch service that recognises, from your IP address, which company is visiting our website. See the cookie statement as well.
  • OpenAI (measurement pixel and Conversions API of ChatGPT Ads): only when you reached our site through an advertisement in ChatGPT and gave consent in the banner. We then pass on OpenAI’s click reference and the type of event (for example 'report requested'), without your name or email address, so that OpenAI can attribute the advertisement. OpenAI is based in the United States. See the cookie statement as well.

How we secure your data

CVs received through the application form are stored in a folder on the website that cannot be guessed from a predictable URL. The download link to a CV only works for staff who are logged in to the website.

In addition, the entire website is secured with an encrypted connection (https), access to the administration environment is limited to personal accounts with two-factor authentication, and our forms are protected against automated misuse.

Your rights

You have the right of access, rectification, erasure, restriction of processing, objection and data portability regarding your personal data. Would you like to exercise one of these rights? Email info@twentynext.nl. We respond as soon as possible.

Filing a complaint

Do you disagree with how we handle your data? Please contact us first at info@twentynext.nl. You also always have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes

We may amend this statement, for example when we add a new service or when a detail above changes. Last updated: 4 September 2026.

Work with us

Realise your project together?

The people who build it also run it afterwards. Eindhoven, since 2014.

Martijn van Grieken

Martijn van Grieken

Director Data & AI

Get in touch