Data Security
Internet B.V. ensures that personal data is properly secured. The techniques available for this purpose are continuously updated. Nevertheless, this security may unexpectedly be breached, for example as a result of a hack. In that case, a data breach has occurred and the data may fall into the wrong hands. Below is our procedure explaining what you can do and what we do when a data breach is identified.
Data Breach Notification Obligation
All organisations in the Netherlands are required to report data breaches to the Dutch Data Protection Authority if they result in a risk to the persons concerned. We must also inform the person or persons affected by the data breach if there is a possibility of serious adverse consequences for them. The Dutch Data Protection Authority is the supervisory authority in the field of privacy.
What Is a Data Breach?
A data breach is a breach of the security of personal data, as a result of which personal data becomes accessible to someone who is not authorised to access that data, or as a result of which data is lost without a backup of the data being available.
This may involve the hacking of Internet BV’s digital systems, whereby personal data is stolen, but it may also involve a stolen laptop, tablet or smartphone containing personal data, or a lost USB drive containing files.
Have You Discovered a Data Breach?
Have you received confidential documents or gained access to or been able to view personal data through one of our websites that was not intended for you? We ask you to report this via this link or by calling 0031 492 37 00 88.
To enable us to remedy the breach as quickly as possible, the following information may be helpful. However, we ask you not to share the data breach with others:
- screenshots;
- a description of the data visible to you;
- the steps required to reproduce the breach.
If you actively misuse a data breach or personal data that you have received in error, we will report this to the police.
What Do We Do in the Event of a Data Breach?
As soon as we become aware of a data breach, we will take immediate action by carefully investigating which data has been leaked and whether the person concerned may have suffered harm as a result of the breach.
If there is a genuine risk that the privacy of the affected person or persons has been infringed, we will report the data breach to the Dutch Data Protection Authority. We will also inform the affected person or persons and assist in minimising the risk of damage resulting from the data breach.
Data Breach Register
We make every effort to prevent data breaches. Should a data breach nevertheless occur, it will be recorded in the Data Breach Register.
This register records the date on which the breach was discovered, what data was leaked, the possible consequences, the measures taken, who was informed and whether or not the breach was reported to the Dutch Data Protection Authority.