Trust Alliance Compliance Solutions handles your personal data with care and complies with the General Data Protection Regulation (GDPR). This statement explains which data we process through trustalliance.com, why we do so and what rights you have.
Version: 1 October 2026
1. Who we are
Trust Alliance Compliance Solutions (TACS) is the controller for the processing of your personal data as described in this statement.
- Address: Peperstraat 1, 5211 KM 's-Hertogenbosch, the Netherlands
- Chamber of Commerce (KvK): 17212429
- VAT: NL8185.39.215.B01
- Email: info@trustalliance.com
We have not appointed a Data Protection Officer. Please send any privacy questions to info@trustalliance.com.
2. Which data we process
Data you enter in our request form:
- name, organisation and job role
- business email address and (optionally) phone number
- your area of interest (an introductory scan or a general introduction) and your message
- your agreement to this privacy statement
Data we record automatically:
- when you submit a request: the time, the page on which you completed the form and the campaign details in the link (UTM parameters), so we know which campaign brought you to us
- only with your consent through cookies: data about your visit, such as IP address, device and browser details and pages viewed (see section 7)
Data from other contact: what you tell us by email, phone or in a meeting.
We do not ask for special categories of personal data, such as data about health or religion. Please do not include such data in the free text field. Our website is aimed at professionals and not at persons under the age of 16.
3. Purposes, legal bases and retention periods
| Purpose | Data | Legal basis (GDPR) | Retention period |
|---|---|---|---|
| Handling your request for an introduction or introductory scan and contacting you | Form data, source page, UTM parameters | Your request, prior to a possible contract (Art. 6(1)(b)) | 2 years after last contact if you do not become a client |
| Relationship management, such as sending our newsletter and invitations to events | Name, organisation, job role, email address | Legitimate interest: maintaining business relationships (Art. 6(1)(f)) | Until you unsubscribe, at most 2 years after last contact |
| Performing assignments and invoicing | Contact and billing details | Performance of a contract and legal obligation (Art. 6(1)(b) and (c)) | 7 years (statutory tax retention) |
| Website statistics through Google Analytics 4 | Website visit, pseudonymised | Consent (Art. 6(1)(a)) | 14 months |
| Measuring and targeting advertising through the LinkedIn Insight Tag | Website visit, linked to your LinkedIn profile if you are logged in | Consent (Art. 6(1)(a)) | According to LinkedIn's policy, cookies at most 180 days |
Every newsletter contains an unsubscribe link. You can also unsubscribe by emailing info@trustalliance.com.
4. Introductory scans and assignments
For an introductory scan or assignment, you may provide us with data about a third party, such as a customer, supplier, business partner or its directors and owners. This processing is not covered by this website statement. We set out the arrangements, including the use of specialised partners and tools, in a separate engagement letter.
5. Who we share data with
We never sell your data. We only share it in the following cases:
- Service providers that process data on our behalf (processors): the hosting of our website and database, Microsoft 365 for email and HubSpot for managing our relationships. We have agreed security and confidentiality terms with these parties.
- Google and LinkedIn, only after your consent through the cookie banner. LinkedIn partly acts as an independent or joint controller; see LinkedIn's privacy policy.
- Our technology partners (such as the providers of the solutions we represent), only if you give your explicit prior consent, for example for a product demonstration.
- Public authorities, where we are legally required to do so.
6. Transfers outside the European Economic Area
We store your data within the EU. Some service providers, such as Google, LinkedIn, Microsoft and HubSpot, belong to US groups. As a result, data may in certain cases be accessed or processed outside the EEA. In those cases we ensure appropriate safeguards, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
7. Cookies
Our website uses:
- functional cookies, needed for the website to work and to remember your cookie choice. These do not require consent.
- analytical cookies from Google Analytics 4, to measure how the website is used. We only place these with your consent.
- marketing cookies through the LinkedIn Insight Tag, to measure the effect of our LinkedIn campaigns and show you relevant ads. We also only place these with your consent.
You can change or withdraw your choice at any time through the cookie settings at the bottom of every page. More information is available in our cookie statement.
8. Security
We take appropriate technical and organisational measures to protect your data against loss and unlawful use. For example, traffic to our website runs over a secure connection (HTTPS) and only staff who need the data for their work have access.
9. Your rights
You have the right to:
- access your data
- have incorrect data corrected
- have your data erased
- have processing restricted
- receive your data in a common format (portability)
- object to processing based on legitimate interest, including receiving our newsletter
- withdraw your consent at any time, without affecting earlier processing
Send your request to info@trustalliance.com. We will respond within one month. To prevent misuse, we may ask you to confirm your identity.
10. Automated decision-making
We do not make decisions based solely on automated processing that significantly affect you.
11. Complaints
If you have a complaint about how we handle your data, please contact us first so we can find a solution together. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl.
12. Changes
We may update this statement, for example when our services or the law change. The latest version is always available on this page, with the date at the top.