Last updated: July 20 2026

1. Introduction

Ortec Finance B.V. and its affiliates (“Ortec Finance”, “we”, “our”, or “us”) is a “Controller”. This means that we are responsible for collecting and processing your personal data.

If you, or the person you represent, have any questions concerning this Privacy Statement, or data collection in particular, please contact us via the contact information provided at the end of this Privacy Statement.

2. Application of this Privacy Statement

Ortec Finance respects your privacy and is committed to protecting your personal data. This Privacy Statement will inform you as to how we look after your personal data when you (i) visit our website https://www.ortecfinance.com, (referred to as “our website” or “the website” in this Privacy Statement), (ii) an Ortec Finance office or Ortec Finance event, (iii) purchase a product or a service from Ortec Finance as Business Customer, and / or (iv) provide a product or a service to Ortec Finance as Business Relation.

In principle, we do not focus on provision of our services to and processing of personal data of individuals younger than 16 years. We also do not focus on individuals with a legal representative, such as guardianship. If, in exceptional cases, we do process personal data about such individuals, Ortec Finance will take into account the vulnerable position of these individuals. The manner in which individuals are informed about the processing will also be aligned with this group of individuals and where necessary, consent of the legal representative will be obtained by Ortec Finance.

3. What personal data do we process and for what purpose?

Personal data means any information about an individual based on which that person can be identified. We process (for example: collect, use, store and transfer) different categories of personal data for the purposes described in this Privacy Statement. The type of information we collect will depend on the circumstances and the context in which we process your personal data.

3.1. Online Visitors

We process data for providing, maintaining and improving our website and social media activities. For more specific information on the cookies and similar technologies used in this respect, please refer to our Cookie Statement.

  • The individuals involved. Online Visitors: people who visit our website or social media accounts.
  • The purpose of the processing. When an Online Visitor visits our website or social media account and / or contacts us, we may process your information for the following purposes:
    • Recruitment and selection;
    • Communication, marketing and business;
    • Analysis of Online Visitors;
    • Personalization and optimization of our online content;
    • Support of social media tools and plug-ins;
    • Maintenance, administration and security of our websites;
    • Investigation, analysis and statistics including market research;
    • Internal control and business operations;
    • Handling any requests, complaints and disputes;
    • Determining, exercising and defending our rights;
    • Handling a (possible) corporate reorganization, investment, divestment, merger and / or acquisition; and / or
    • Complying with legal obligations and professional regulations, and requests of authorized government institutions.

  • The personal data that is processed. We may process the following information:
    • Contact data, including your name, title, business and/or professional interests, business mobile telephone number and business e-mail address.
    • Technical data, including internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technologies on the devices you use to access the website.
    • Communication or interaction data, including your requests for information, calls, emails, in-person communications, feedbacks, survey responses, appointments.
    • Usage data, including information about how you use our website and social media account(s).
    • Marketing data, including your preferences in receiving marketing from us and your communication preferences.

    Special categories of personal data:
    In the context of the website or social media accounts we do not, in principle, process special categories of personal data.
  • Legal grounds for the processing. We base the use of the Online Visitor’s data on our legitimate interest in offering and securing our website and social media accounts, and pursuing the other processing purposes listed above. For the collection and use of certain categories of personal data collected via cookies and similar technologies, we will ask for your consent via the cookie banner on the website. For more information, please see the Cookie Statement regarding our website. If you want more information about this, you can contact us directly via our contact details stated at the end of this Privacy Statement.
  • Social media pages. Ortec Finance communicates and collects personal data via social media accounts on several social media platforms. Ortec Finance is also responsible for the content published on the Ortec Finance accounts. However, Ortec Finance is not responsible for any other data collected on and the further management of the social media platforms. For more information about how your personal data will be used by such social media platforms, we refer to the information already available on the websites of the suppliers of these platforms. Set out below are links to the privacy policies of the social media platform providers that may be engaged by us: Our website may contain links or buttons that allow you to interact with social media platforms. These social media features are not automatically loaded when you visit our website. The social media plug-ins will only be activated once you click on the relevant button or otherwise choose to interact with the feature. Only after such activation will your browser establish a connection with the server of the relevant social media provider. As a result, the provider may receive information about your visit to our website. For more information about how social media providers process personal data, please consult the privacy policies of the respective providers.

3.2. Newsletter Subscribers

  • The individuals involved. Subscribers of our Radar newsletter.
  • The purpose of the processing. When you sign up for our newsletter, we process your personal data for the following purposes:
    • Provide you with our newsletter
  • Personal data that is processed. When you subscribe to the Radar newsletter, we may process the following categories of personal data:
    • Contact data, including first name and last name, business email address, organisation and function.

    Special categories of personal data:
    In principle, we do not process any sensitive data about newsletter subscribers. This could be different when you provide us with sensitive data that we need to meet one of your requests.
  • Legal grounds for processing. We base the use of your personal data when you subscribe to our newsletter on one of the following legal grounds:
    • (Explicit) Consent. We process your personal data after obtaining your consent to do so for the purposes of sending you our newsletter.

3.3. Visitors of Ortec Finance offices

  • The individuals involved. Visitors of Ortec Finance offices.
  • The purpose of the processing. When you visit a Ortec Finance office, we will process your personal data for the following purposes:
    • Offering and optimising certain facilities (among others access to meeting areas or WiFi);
    • Access registration and access management;
    • Network management and network security (when using WiFi);
    • Investigating safety incidents;
    • Investigation, analysis and statistics;
    • Internal control and business operations;
    • Handling any requests, complaints and disputes;
    • Determining, exercising and defending our rights;
    • Protecting and securing our offices, assets, IT systems, (confidential) data and staff members;
    • Handling a (possible) corporate reorganization, investment, divestment, merger and / or acquisition;
    • Complying with legal obligations and professional regulations, and requests of authorised government institutions.
  • Personal data that is processed. When you visit an Ortec Finance office, we may process the following categories of personal data:
    • Contact data, including first name, middle name, last name, title, mail address, telephone numbers, organisation and function.
    • Communication or interaction data, including your requests for information, calls, emails, in-person communications, feedbacks, survey responses and appointments.
    • Visit data, including data about presence, including location, time of arrival and departure, type of appointment, Ortec Finance contact person, any other parties invited.
    • Usage data, including IP address, websites visited and other information when using WiFi.
    • CCTV data, including video images collected during your visit.

    Special categories of personal data:
    In principle, we do not process any sensitive data about visitors of our offices. This could be different when you provide us with sensitive data that we need to meet one of your requests. For example, communicating that a parking space for disabled individuals is required.
  • Legal grounds for processing. We base the use of your personal data when you visit an Ortec Finance office on one of the following legal grounds:
    • Legitimate interests. We process your personal data for managing your visit at the Ortec Finance office and pursuing the other processing purposes listed above.
    • (Explicit) Consent. Your (explicit) consent for the processing of certain additional information, such as special categories of personal data provided by you and required for the facilitation of a visit.

3.4. Visitors of Ortec Finance events

  • The people involved. Visitors of Ortec Finance events. We process personal data about (registered) participants of Ortec Finance events.
  • The purpose of the processing. We process personal data about participants of Ortec Finance events for the following purposes:
    • The information and communication about the events;
    • The organisation and facilitation of the events;
    • Marketing and business development, including making video or sound recordings for communication and marketing purposes;
    • Investigation, analysis and statistics;
    • Internal control and business operations;
    • Handling any requests, complaints and disputes;
    • Determining, exercising and defending our rights;
    • Protecting and securing our offices, assets, IT systems, (confidential) data and staff members;
    • Handling a (possible) corporate reorganization, investment, divestment, merger and / or acquisition;
    • Complying with legal obligations and professional regulations, and requests of authorised government institutions.
  • Personal data that is processed. In the context of Ortec Finance events, we may process the following categories of personal data:
    • Contact data, including first name, middle name, last name, title, email address, telephone numbers, organisation and function.
    • Communication or interaction data, including your requests for information, calls, emails, in-person communications, feedbacks, survey responses and appointments.
    • Financial data, including payment method, bank account information, payment card details and/or other payment information to process payments in connection with the events.
    • Visit data, including data about presence, including location, time of arrival and departure, type of event, Ortec Finance contact person, any other parties invited.
    • Usage data, including IP address, websites visited and other information when using WiFi.
    • CCTV data, including video images collected during your visit.
    • Event data

    Special categories of personal data:
    It is not our intention to process special categories of personal data in the context of event management. However, we can use video and sound recordings of events for marketing and business development, which could lead to accidental disclosure of special categories of personal data. Further, it is possible that you communicate special categories of personal data to us, for example when you communicate special dietary needs that could be indicative of your religious convictions or food allergies.
  • Legal grounds for processing. We base the use of your personal data in the context of Ortec Finance events on one of the following legal grounds:
    • Execution of the agreement. Insofar as the processing of personal data is required for the execution of an agreement that the relevant person is a party to, we base the processing on this ground.
    • (Explicit) Consent. Your (explicit) consent, for example when you indicate that you want to be kept up to date about future events or when you communicate special dietary needs.
    • Legitimate interests. Our legitimate interest for the organisation of events and the additional processing of personal data, including the information and communication about it and the other processing purposes mentioned above.

3.5. (Potential / former) Business Relations

  • The individuals involved. Business Relations: We process personal data about the contact persons and key personnel of (potential and former) Business Relations.
  • The purpose of the processing. We process personal data relating to Business Relations for the following purposes:
    • Approaching potential Business Relations;
    • Maintaining contact with (potential / former) Business Relations;
    • Receiving services from (potential / former) Business Relations;
    • Administrative purposes, including financial administration;
    • Marketing and business development;
    • Investigation, analysis and statistics;
    • Internal control and business operations;
    • Protecting and securing our offices, assets, IT systems, (confidential) data and staff members;
    • Handling any requests, complaints and disputes;
    • Determining, exercising or defending our rights;
    • Handling a (possible) corporate reorganization, investment, divestment, merger and / or acquisition;
    • Complying with legal obligations and professional regulations, and requests of authorized government institutions.
  • The data that is processed. We may process the following information:
    • Contact data, including first name, middle name, last name, title, email address, telephone numbers, organisation and function.
    • Communication or interaction data, including your requests for information, calls, emails, in-person communications, feedbacks, survey responses and appointments.
    • Financial data, including payment method, bank account information, payment card details and/or other payment information to process payments in connection with the events.
    • Business account data, including administration number.
    • Screening data, including in the context of our business relationship, it’s also possible that we process other personal data relating to the directors and key personnel of the relevant organizations, for example with regard to: the verification of someone's identity (name and address) and the natural individuals that are the ultimate beneficiary of the legal entities.

    Special categories of personal data:
    We do not, in principle, process special categories of personal data related to our Business Relations.
  • Legal grounds for the processing. We base the use of your personal data on one of the following legal grounds:
    • Execution of the agreement. Insofar as the processing of personal data is required for the execution of an agreement that the relevant person is a party to, we base the processing on this ground. This is for example applicable to the processing of personal data of an individual who directly signed the service agreement with us.
    • Legitimate interests. Our legitimate interest of receiving a service and in striving for the abovementioned purposes.
    • (Explicit) Consent. Incidentally, we base the processing of personal data on the (explicit) consent of the relevant person.
    • Legal obligation. Sometimes we do not process personal data on our own initiative, but to comply with a legal obligation to which we are subject. This is for instance when we keep personal data for a longer period of time to comply with a legal retention obligation.

3.6. (Potential) Business Customers

This section only applies where Ortec Finance processes personal data of (potential and former) Business Customers for their own purposes, such as commercial, administrative, compliance or business development purposes. In those situations, Ortec Finance acts as a Controller. Where Ortec Finance processes personal data on behalf of their Business Customers in the context of providing their services to them, Ortec Finance acts as a Processor. In that case, the relevant Business Customer qualifies as the Controller with respect to such personal data.

  • The individuals involved. (Potential and former) Business Customers: We process personal data about contact persons and key personnel of (potential and former) Business Customers.
  • The purpose of the processing. In the context of our service provision we generally process personal data for the following purposes:
    • Approaching, contacting and creating quotations for potential Business Customers.
    • Maintaining contact with (former) Business Customers;
    • Providing services to (former) Business Customers;
    • Administrative purposes, including financial administration;
    • Marketing and business development;
    • Investigation, analysis and statistics;
    • Protecting and securing our offices, assets, IT systems, (confidential) data and staff members;
    • Handling any requests, complaints and disputes;
    • Determining, exercising or defending our rights;
    • Handling a (possible) corporate reorganization, investment, divestment, merger and / or acquisition;
    • Complying with legal obligations and professional regulations, and requests of authorised government institutions.
  • Personal data that is processed. In the context of our service provision to Business Customers we generally process the following personal data:
    • Contact data, including first name, middle name, last name, title, email address, telephone numbers, organisation and function.
    • Communication or interaction data, including your requests for information, calls, emails, in-person communications, feedbacks, survey responses and appointments.
    • Financial data, including payment method, bank account information, payment card details and/or other payment information to process payments.
    • Business account data, including: administration number.
    • Screening data, including data relating to the directors and key personnel of the relevant organisations, for example with regard to: the verification of someone's identity (name and address) and the natural individuals that are the ultimate beneficiary of the legal entities.

    Special categories of personal data:
    In the context of our service provision to Business Customers we do not intentionally process special categories of personal data.  
  • Legal grounds for processing. We base the use of your personal data in the context of our business relation on one of the following legal grounds:
    • Execution of the agreement. Insofar as the processing of personal data is required for the execution of an agreement that the relevant individual is a party to, we base the processing on this ground. This is for example applicable to the processing of personal data of an individual who directly signed a contract with us.
    • Legitimate interests. Our legitimate interest in the execution of our service provision and striving for the above-mentioned purposes.
    • Consent. On an incidental basis, the processing of personal data is based on the (explicit) consent of the relevant individual. If this is the case, you will be separately informed about this.
    • Legal obligation. Sometimes we do not process personal data on our own initiative, but to comply with a legal (screening) obligation to which we are subject.

4. How is your personal data collected?

We obtain your personal data in various ways:

  • Provided by the individual. Some data we receive straight from you, for example when you contact us (via our website, enter into a contract (for the provision or supply of products and services), sign up to receive the newsletter or when you enter into a business relationship with us.
  • Obtained internally. It is possible that we obtain your personal data from other Ortec Finance systems.
  • Obtained from third parties. We could also obtain personal data about you from other individuals or external parties. Examples include your colleagues or other parties who are involved with our mutual relationship, and public registers of company directors and participating interests.
  • Automatically obtained. Some personal data we obtain automatically, for example by using cookies and similar techniques. For more information about cookies and similar techniques, go to the Ortec Finance Cookie Statement.
  • Derived. Certain personal data we do not receive directly, but can be derived from the information already in our possession.

In principle you are under no obligation to provide any information about yourself to us. However, refusal to supply certain information could have a negative influence on, for example, our service provision to you or the functionality of the services that you use from us. We may, for instance, require your signature to conclude an agreement and certain parts of our website may function less in case cookies are blocked.

If the provision of certain personal data is a legal or contractual obligation or an essential requirement for concluding an agreement with us, we will separately provide additional information about this for as far as this is not clear in advance. In this case we will also inform you about the possible consequences if this information is not provided.

5. With whom do we share your personal data?

We only process your personal data for the purposes referred to in this Privacy Statement. We may share your personal data with the categories of recipients set out below.

  • Authorized third parties, such as (other) Business Relations, including (IT) service providers, external auditors and/or subcontractors of Ortec Finance;
  • A competent public authority government, regulatory or fiscal agency where it is necessary to comply with a legal or regulatory obligation to which the relevant Ortec Finance is subject to or as permitted by applicable local law.

We will take all steps reasonably necessary to enforce the privacy and security of your personal data in accordance with applicable data protection law. For example: we have contracts in place with the third parties and require them to treat your personal data lawfully and permit them to only process your personal data for specified purposes and in accordance with our instructions.

6. How long do we hold your personal data?

In general, Ortec Finance does not keep personal data for longer than is necessary in relation to the purposes for which we process the personal data. There could however be exceptions applicable to the general retention terms.

Exception: shorter retention period. If an individual exercises certain privacy rights, it is possible that we retain it for a shorter period of time.

Exception: longer retention period. In certain situations, we process personal data of individuals for a longer period of time than what is necessary for the purpose of the processing. This is for instance the case when we have to process personal data for a longer period of time:

  • Retention obligation. To comply with a minimum retention period or other legal obligation to which Ortec Finance is subject;
  • Procedure. Personal data which is necessary in relation to a legal procedure;
  • Freedom of expression. When further processing of personal data is necessary in order to exercise the right to freedom of expression and information;
  • Consent. For example: With the Job Applicant's consent, we retain their data for one year as of finalization of the application procedure instead of 4 weeks.v

7. How do we protect your personal data?

We have implemented security measures to protect your personal data, such as encryption technologies and authentication systems with due regard to the current state of the art to protect your personal data against risks.

We will make our best efforts to prevent your personal data from being accidentally lost, used or accessed altered or disclosed in an unauthorised way. In addition, we limit access to your personal data to those authorized employees, group companies and (other) Business Relations and other third parties who have a need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and the competent supervisory authority/-ies of a breach where we are legally required to do so.

8. Do we transfer your personal data to countries outside the European Economic Area?

If necessary, we transfer personal data to group companies, Business Relations and other third parties located outside the European Economic Area (EEA). For example, Ortec Finance transfers personal data to the United States of America, Canada, Switzerland, Singapore, Australia and UK. In case the data is processed outside the EEA, the transfer is legitimized in the manner described below. You can find an overview of the EEA countries here.

The transfer of personal data to a third party outside the EEA can in the first place be legitimized based on an adequacy decision of the European Commission, in which it is decided that the (part within the) third country in question ensures an adequate level of data protection. On the website of the European Commission, you can find an overview of the adequacy decisions that have been taken.

If personal data is transferred to a country outside the EEA for which there is no adequacy decision, we agree on the applicability of the relevant version of the Standard Contractual Clauses with the relevant party. This is a standard contract to safeguard the protection of personal data, which is approved by the European Commission, in which the parties fill out the appendices. Where appropriate, additional safeguards are taken.

You can contact us if you want additional information about the way in which we legitimize the transfer of personal data to countries outside the EEA. Our contact details are stated at the end of this Privacy Statement.

9. What are your privacy rights?

Based on the General Data Protection Regulation ("GDPR"; (EU) 2016/679) you have various privacy rights. To what extent these rights can be exercised, may depend on the circumstances of the processing, such as the manner in which we process the personal data and the legal ground for the processing. Below we included a summary of the relevant privacy rights under the GDPR. For more information about this, you can visit the website of the European Commission.

We will respond to all requests without undue delay. If our full response will take more than a month due to the complexity or number of requests, we will inform you of this. Furthermore, please note that we may request more information to confirm the identity of the person filing the request – thus from you or your legal representation – before acting on any request.

Applicable privacy rights. In relation to our processing of your personal data, the below privacy rights apply.

  1. Right of access. This concerns the right to request access to your personal data. This enables you or your legal representation to receive a copy of the data we hold about you (but not necessarily the files themselves). We will then also provide further specifics of our processing of personal data. For example, the purposes for which we process the data, where we got it from, and with whom we share it.
  2. Right to rectification. This concerns the right to request rectification of the data that we hold about you. This enables you or your legal representative to have any incomplete or inaccurate data corrected.
  3. Right to erasure. This concerns the right to request erasure of the data. This enables you or your legal representation to ask us to delete or remove personal data where: (i) the data is no longer necessary, (ii) the processing activities have been objected to, (iii) the data has been unlawfully processed, (iv) the data has to be erased on the basis of a legal requirement, or (v) where the data has been collected in relation to the offering of information society services. However, we do not have to honor such requests in all cases.
  4. Right to object. This concerns the right to object to the processing of personal data where we are relying on legitimate interest as processing ground (see above). Insofar as the processing of the data takes place for direct marketing purposes, we will always honor an objection. For processing for other purposes, we will also cease and desist processing, unless we have compelling legitimate grounds for the processing which override your interests, rights and freedoms or that are – for example - related to the institution, exercise or substantiation of a legal claim. If such is the case, we will inform you about our compelling interests and the balance of interests made.
  5. Right to restriction. The right to restriction of processing means that Ortec Finance will continue to store personal data at your or your legal representation’s request but may in principle not do anything further with it. In short, this right can be exercised when we do not have (or no longer have) any legal grounds for the processing of the data or if this is under discussion.
  6. Automated decision-making. This concerns the right not to be subject to a decision based solely on automated processing, which significantly impacts the Individual. In this respect, please be informed that when processing your data, we do not make use of automated decision-making.
  7. Right to withdraw consent. You can withdraw your consent for a specific processing activity at any time. However, the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
  8. Right to complaint. This concerns the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of the Individual’s habitual residence, place of work or where an alleged infringement took place. Please be referred to the website of the European Data Protection Board (EDPB) for an overview of the supervisory authorities and their contact details. However, we would appreciate the chance to deal with any concerns before the supervisory authority is approached, so please contact us beforehand.

You can exercise your rights by addressing the requests to: Ortec Finance, to the attention of the Privacy Officer, PO box 2891, 3000 CW Rotterdam or email: security@ortec-finance.com.

10. Contact us

Our legal team is responsible for overseeing questions in relation to this Privacy Statement. If you have any questions about this Privacy Statement, including any requests to exercise your legal rights, please contact our legal team via the contact information stated below. E-mail is our preferred method of communication as it allows us to respond to queries faster.

contact@ortecfinance.com

Ortec Finance B.V.
Boompjes 40
3011 XB Rotterdam
The Netherlands

11. Changes to the Privacy Statement

We may change this Privacy Statement from time to time to accommodate new technologies, industry practices, regulatory requirements or for other purposes. The latest version can always be consulted via the website. Important changes will also be communicated proactively.

Version: July 2026

X
Cookies help us improve your website experience.
By using our website, you agree to our use of cookies.
Confirm