Privacy Statement ISACA Netherlands

This privacy statement explains how ISACA Netherlands handles the processing of your personal data, why we collect this data and how we handle it.

We attach great importance to the careful handling of your personal data and ensure that the personal information you provide us with is treated confidentially. An exception to this is the disclosure of name, membership number, and registration date in the public registry.

In short, we:

• only use your personal data for the purposes for which it was provided;
• do not share it with third parties, except in the case of public registry data or legal obligations;
• manage and secure it with care.

If you have questions that are not answered in this privacy statement, suggestions or comments about its content, or complaints about the way we handle your personal data, please feel free to contact us at:

ISACA Netherlands
info@isaca.nl

Scope

This privacy statement applies to the registration, administration and websites of ISACA Netherlands.

Purposes of Data Processing

We process personal data exclusively for the purposes defined in our data processing objectives:

1. Membership Management and Administration
   The management of the membership registry, and member administration is carried out by ISACA Global, in accordance with the statutes of ISACA Netherlands. ISACA Global is responsible for processing the personal data of members. ISACA Netherlands periodically receives relevant data from ISACA Global to support its activities and member services.
   For membership management, standard personal and contact details are collected, supplemented with information about employment and billing address. This data is retained for a maximum of seven years after termination of membership, in line with our policy on re-registration and member transfers.
2. Course, Training, and Event Registration
   When you register for courses, training sessions, symposia, events, or order publications, your data is recorded and stored in accordance with relevant financial and administrative obligations. If necessary, we request additional information specific to the activity.
3. Continuing Education (CE) and Quality Research
   Data provided in the context of Continuing Education (CE) or quality research is retained according to the retention periods established in the relevant regulations.
4. Newsletters and Communication
   You can subscribe to newsletters and updates on our website. You may unsubscribe at any time via the unsubscribe link in the newsletter or through your profile page on our website.

Sharing Data with Third Parties

To provide our services, we use third parties such as hosting providers and backup services. These parties act as ‘processors’ and may only process data on instructions from ISACA Netherlands. We have agreements with all our processors regarding the security and handling of personal data.
Additionally, personal data from the public registry may be provided to third parties upon request. In some cases, we may be legally required to disclose data to competent authorities. We never sell personal data to third parties.

Security

ISACA Netherlands has implemented appropriate technical and organizational measures to protect the personal data you provide against loss, misuse, and unauthorized access.

Website Use

When visiting our website, technical details such as visited pages, IP address, time, and browser type are recorded in log files. This data is used solely to improve the website and our services and is retained for a maximum of 12 months.

If you have further questions about this privacy statement, please contact us via info@isaca.nl.