Privacy and data protection
Privacy statement
We only process personal data needed to answer questions, provide our services, keep the website secure and, after permission, measure website usage.
Last updated: 19 August 2026Who is responsible?
Corefocus.ai is responsible for the processing described in this statement. Corefocus.ai is a trading name of Rob Niemantsverdriet Consultancy, established in Rotterdam and registered with the Dutch Chamber of Commerce under number 76171515. Send questions to info@corefocus.ai.
Which data do we process?
Through the contact form we may receive your name, work email, organization, optional phone number, message, language and newsletter choice. Through the application form we receive your first name, last name, address, phone number, email address, selected role, LinkedIn URL or CV and any additional information. For security, we temporarily process technical data such as a hashed sender indicator and time window. After separate permission, Google Analytics may process page, interaction, device category and campaign source data. Completed form content is never sent to Analytics.
Purposes and legal bases
We use contact details to handle your request and take possible pre-contractual steps. We use application data to assess your suitability for a role and contact you during the application process. We use security data based on our legitimate interest in preventing abuse. Newsletter data and Analytics are processed only with permission, which you may withdraw at any time.
Retention
Contact requests and applications are retained for up to 24 months after receipt and are then removed automatically, unless longer retention is needed for a contract or legal obligation. Newsletter details are used until you unsubscribe. After that, we retain only evidence of consent and withdrawal for as long as needed to demonstrate compliance, no later than five years after the last message. Rate-limit data expires after no more than 20 minutes. Google Analytics retention is configured for 14 months.
Service providers and transfers
We use Google Cloud in the Netherlands region for hosting and storage. We use Google Analytics for consent-based website analysis. Once email notifications are enabled, we use Resend to deliver notifications about new requests. These providers may process data outside the European Economic Area under their applicable contractual and security safeguards.
Your rights
You may request access, correction, deletion, restriction, portability or object to processing. You may withdraw permission at any time. Email info@corefocus.ai. You may also complain to the Dutch Data Protection Authority. We do not make solely automated decisions with legal effects based on website data.
Security and changes
We restrict access, use encrypted connections and keep secrets outside source code. No security measure is absolute. We update this statement and the date above when processing changes materially.