Privacy Statement – A.E.T. Europe B.V.

A.E.T. Europe B.V.

Last updated: September 16, 2026

1. Introduction

A.E.T. Europe B.V. (“AET”, “we”, “us”) is committed to protecting your personal data and respecting your privacy. This Privacy Statement explains how we collect, use, store, share, and secure your personal data when you interact with us, including through our websites, services, or communications. All processing of personal data is carried out in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Dutch law.

2. Who we are

Data controller:

A.E.T. Europe B.V.

IJsselburcht 3, 6825 BS Arnhem, The Netherlands

info@aeteurope.com | Tel: +31 26 365 33 50

For questions about how we handle personal data, or to exercise your data protection rights, please contact our Privacy Officer at info@aeteurope.com.

3. Categories of personal data we process

We may collect and process the following categories of personal data:

  • Website usage data: IP address, device type, browser info, pages visited, timestamps
  • Communication data: email address, name, phone number, content of correspondence
  • Commercial interaction: company name, billing information, purchases, contract status
  • Marketing and preferences: consent and opt-out status, form submissions, requested content, topics of interest, and source or campaign information
  • Software download request data: first name, last name, email address, company name, card type or certification authority, download timestamp, and technical data collected via Google reCAPTCHA

We do not intentionally collect or process special category data (Art. 9 GDPR), nor do we knowingly collect data from children.

4. How we collect your data

We collect personal data through the following means:

  • When you visit our website (via cookies and server logs)
  • When you contact us (email, phone, contact form)
  • When you request support, quotations, or product trials
  • When you subscribe to newsletters or marketing communications
  • When you purchase or use our products or services
  • When you submit website forms, download content, complete assessments, register for events, or request other resources or services
  • When you submit a software download request form on our website

Software Download Requests

When you use a software download page on our website (such as the SafeSign Identity Client download page), we collect personal data through the download request form and through Google reCAPTCHA, which is used to prevent automated abuse of the download facility.

  • Form data collected: first name, last name, email address, company name (optional), and card type / certification authority.
  • Data collected automatically: IP address, browser type, device information, and download timestamp.
  • Google reCAPTCHA: Google reCAPTCHA may collect hardware and software information (such as device and application data) and transmit this to Google for analysis. The use of reCAPTCHA is subject to Google’s Privacy Policy (policies.google.com/privacy) and Terms of Service (policies.google.com/terms). Data may be transferred to Google servers in the United States under the EU-U.S. Data Privacy Framework.

This data is processed for the purposes of facilitating the software download, verifying licensing compliance, providing technical support, and maintaining records of software distribution. A separate, more detailed Download Privacy Notice is displayed on the download page itself.

5. Legal basis for processing

Under Article 6 of the GDPR, our processing activities are based on:

  • Performance of a contract: providing products, licenses, support, or facilitating software downloads under existing agreements
  • Legitimate interests: website administration and improvement, responding to business enquiries, providing requested non-contractual resources, business development, software distribution integrity, licensing compliance verification, and B2B marketing activities where permitted by applicable law
  • Compliance with legal duties: export control, tax, accounting, or regulatory obligations
  • Consent: electronic marketing communications, analytics, advertising technologies, and non-essential cookies where consent is required

Where processing relies on consent, you can withdraw it at any time without affecting prior lawful processing.

6. Purpose of processing

We process your personal data for the following purposes:

  • To provide and support our products and services
  • To respond to inquiries and customer support requests
  • To manage contractual relationships and licensing
  • To improve website performance and user experience
  • To fulfil requests submitted through our website, including downloads, assessments, registrations and requests for information
  • To send operational or service-related communications where necessary in connection with our products or services
  • To send marketing communications about our products, services, insights and events where permitted by applicable law and, where required, where you have provided your consent
  • To comply with applicable legal obligations
  • To facilitate software downloads and verify licensing status
  • To maintain records of software distribution for contractual compliance and security auditing

7. Cookies, tracking technologies, and reCAPTCHA

Our website uses cookies and similar technologies to ensure functionality, improve performance, and enable analytics or advertising, in accordance with our Cookie Statement.

Certain pages on our website (including software download pages) use Google reCAPTCHA to prevent automated abuse. Google reCAPTCHA may collect and transmit data to Google servers, including servers located in the United States. This transfer is covered by the EU-U.S. Data Privacy Framework. For details, see Google’s Privacy Policy at policies.google.com/privacy.

You can manage your cookie preferences or withdraw consent at any time via the cookie control icon or banner on our website. See our Cookie Declaration for a full list of cookies in use.

8. Data sharing and international transfers

We do not sell or rent personal data. Data may be shared with:

  • Hosting and IT infrastructure providers
  • CRM, form hosting and marketing automation providers, including HubSpot
  • Marketing, advertising and analytics providers, where applicable and subject to any required consent
  • Google LLC, in connection with reCAPTCHA on software download pages (see Section 7)
  • Professional advisers and auditors
  • Public authorities where legally required

Where personal data is processed outside the EEA, we use appropriate safeguards as required, including Standard Contractual Clauses (SCCs), adequacy decisions, or certification under an applicable data transfer framework.

9. Data retention

We retain personal data only as long as necessary for the purposes described above, or as required by law:

  • Website analytics: 14 months (Google Analytics, if consented)
  • Communications: up to 3 years after last contact
  • Contractual data: up to 7 years (legal obligation)
  • Marketing contact data: until consent is withdrawn or, as a general rule, after 24 months without relevant interaction
  • Consent and opt-out records: we may retain limited records of consent, withdrawal or objection for as long as reasonably necessary to demonstrate compliance and ensure that marketing preferences continue to be respected
  • Software download request data: up to 3 years from the date of download, or for the duration of the existing agreement with AET, whichever is longer
  • Download page technical data (IP, browser, timestamps): 12 months for security and auditing purposes

10. Your rights under GDPR

You have the following rights under Articles 12-22 of the GDPR:

  • Right to access your data
  • Right to rectification
  • Right to erasure (“right to be forgotten”)
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent (if applicable)
  • Right to lodge a complaint with a supervisory authority

To exercise these rights, contact our Privacy Officer at info@aeteurope.com with sufficient detail to identify yourself and your request. We will respond within one month.

11. Data security

We apply appropriate technical and organizational measures (TOMs) to protect your data, including:

  • TLS encryption of data in transit
  • Role-based access controls
  • Secure authentication protocols
  • Secure hosting and infrastructure arrangements appropriate to the nature and risk of the processing
  • Regular audits and ISO/IEC 27001:2022 certification

12. Changes to this statement

We may update this Privacy Statement to reflect legal changes, operational shifts, or security improvements. Significant changes will be notified on our website or via email where appropriate. The effective date is shown at the top of this document.

13. Contact and supervisory authority

If you have concerns or questions about our privacy practices, contact:

info@aeteurope.com

A.E.T. Europe B.V., IJsselburcht 3, 6825 BS Arnhem, The Netherlands

Tel: +31 26 365 33 50

If you are not satisfied with our response, you may file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at www.autoriteitpersoonsgegevens.nl.