Privacy statement

This Privacy Statement is drafted by XYZ Dynamics B.V., a private company with limited liability organized and existing under the laws of the Netherlands, having its corporate seat at Eindhoven and its official address at (5627 SZ) Eindhoven, at Verdunplein 4, registered with the Dutch trade register of the Chamber of Commerce under number 73577979, from now on “we” or “us”. under the trade name XYZ Dynamics (“XYZ Dynamics” or “XYZ” or “we” or “us”).

This Privacy Statement is applicable to the processing of all personal data of users who visit the website of XYZ Dynamics (the “Website”) according to the norms of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“General Data Protection Regulation” or “GDPR”).

At XYZ, protecting your privacy is in our best interest. This Privacy Statement is meant to give you insight regarding the personal data we collect from you when you browse the Website and how we process it.

Who is responsible for processing your personal data?

XYZ is controller regarding the processing of your personal data. XYZ processes your personal data only for the purposes and means, as further explained in this Privacy Statement.

What are the legal bases for processing your personal data?

We may only process your personal data if we have a legal basis to do so. Legal bases for processing your personal data are:

  • your consent;
  • the processing of your data is necessary for the execution of an agreement;
  • the processing of your data is necessary to comply with a legal obligation; and
  • when such processing, in accordance with Article 6(1)(f) of the GDPR, is necessary for the defense of the legitimate interests of XYZ or of a third party, unless your interests or fundamental rights and freedoms outweigh those interests of XYZ or that third party.

What kinds of personal data does XYZ process?

XYZ collects and processes various types of personal data in order to offer you high quality services, including the following personal data:

Contact details: When you sign up for XYZ’s digital newsletter, by filling in a contact or job application form, or when you place a reservation, you will be asked to enter information such as your first name, last name, phone number, email address and address. We only process this data in order to provide you with the asked information or for processing your reservation.

IP-address and your use of the Website: upon each visit to the Website your (fixed or temporary) IP address is detected. We process these data for technical and functional management in order to ensure the Website is easy to use.

Cookies-related information: cookies will collect information when you visit the Website related to your use of the Website, depending on which categories of cookies you have given consent to. For more information, please read the Cookie Statement below.

The purpose of processing your personal data

In most of the situations we use your personal data to inform you about XYZ. More specifically, we process your data for the following purposes:

  • to contact you to answer your questions and/or requests;
  • to process your reservation;
  • To keep track of our administration;
  • to develop and improve our communication methods and the functionality of the Website;
  • to provide information to you and to manage your registration to our newsletter or other communications;
  • to authenticate your identity in case you contact us by electronic means or otherwise; and
  • to process and keep you informed about your job application.

We will not further process your personal data in a way that is incompatible with the above-mentioned purposes, unless we are obligated by law to do so.

Automated decision making

Your personal data will always be processed by a human being. XYZ will not take any decisions based on automated processing that may affect you personally.

Transfer of personal data to affiliated companies

Part of the processing of your personal data may include sending your data to one or more companies affiliated with XYZ, to the extent this is necessary or relevant for handling your request.

Transfer of personal data to third parties

XYZ will not provide your personal data to third parties, unless:

  • you have given your explicit consent to do so;
  • it is necessary in connection with an agreement established between you and XYZ;
  • XYZ is compelled to cooperate in a valid legal process, such as the serving or receiving of a subpoena, complying with a request of the courts or initiating legal proceedings;
  • XYZ believes you have done something that is in conflict with the terms of use of the Website;
  • If we make use of the services of third-party service providers, we will make appropriate arrangements to ensure that data protection is at least equal to the security level implemented by XYZ. We always conclude a data processing agreement if your data is transferred to third parties.

Transfer of personal data outside the European Union (including the EEA)

Insofar as we, or the third parties referred to above, process your personal data outside the European Economic Area, XYZ has provided appropriate safeguards.

How long do we retain your personal data?

The retention period for storing personal data varies, depending on the type of personal data and the purpose for which it was collected. We do not store personal data beyond the retention period permitted by applicable law.


XYZ has implemented the necessary security measures to protect against the loss, unlawful use and alteration of the data you provide. These safety measures are constantly being improved in line with technological developments.

What kind of rights are you entitled to?

According to the GDPR, you have certain rights concerning your personal data collected and processed by us. These rights enable you to retain control over the information concerning you, preventing unlawfulness or inaccuracy, and ensure transparency and trust between you and us.

Regarding the processing of your personal data, you have the following rights:

  • Right to information: you have the right to request access to your personal data processed by us at any time. We kindly ask you to specify what personal data you would like to receive.
  • Right to rectification: you have the right to have inaccurate or incomplete personal data corrected and to be informed of the correction. We will also inform the recipients of the data about the adjustments made to any incorrect data, unless such notification is impossible or involves a disproportionate effort.
  • Right to be forgotten: you have the right to require us to delete your personal data from our records, provided that we are not required or authorized by applicable law or regulation to further process your data.
  • Right to restriction of processing: you have the right to ask us for the restriction of processing of personal data concerning you where one of the following grounds applies:
  • the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data;
  • personal data have been unlawfully processed and you request the restriction of their use instead of erasure;
  • personal data are no longer needed to be processed by us and you require them for the establishment, exercise or defense of legal claims.
  • Right to data portability: where permitted by applicable law or regulation you have the right to receive from us the personal data that you have provided to us, free of charge and in a readable format.
  • Right to object: you have the right to object to the processing of your personal data at any time. We reserve the right to keep processing your personal data under compelling legitimate interests. You are entitled to object to processing for direct advertising at any time, which will cease upon request.
  • Right to withdraw consent: in the event that we need your consent for the processing of your personal data, you have the right to withdraw your consent.

If you wish to exercise your rights, you can contact us at any time via We will respond to your request as soon as possible and ultimately within one month or, in exceptional cases, three months.

Do you have a question?

Getting started with us?