← Back to homepage
AVG / GDPR compliant

Privacy & Opt-out

We process data only to the extent necessary. Below you'll find our full privacy statement and the option to opt out of all data processing.

Last updated: Maart 2026

Contents

1. Who is responsible for your data?

HES Consultancy International is the data controller for hes-consultancy.nl. Contact details:

2. What data do we collect?

2a. Data you provide directly

  • Name, company and email — via the partner registration form or CMO→FMO scan
  • Your answers to the CMO→FMO compliance questionnaire

2b. Data collected automatically

  • Behavioural signals: scroll depth, time on page, CTA clicks — stored in session storage only
  • UTM parameters from incoming links — used for attribution only
  • Page URL and referrer at the moment of Slack alert (score ≥ 90)

We do not use Google Analytics, Facebook Pixel or any third-party tracking scripts. No IP addresses are permanently stored.

3. Why do we process data?

  • Legitimate interest (Art. 6(1)(f) AVG): to identify B2B prospects and follow up on qualified business interest
  • Contract performance (Art. 6(1)(b) AVG): to deliver the CMO→FMO report and programme deliverables
  • Consent (Art. 6(1)(a) AVG): where explicitly given in the partner form

4. How long do we retain data?

  • Session behavioural data: deleted when the browser tab is closed
  • CMO→FMO scan results: stored in PocketBase for 12 months, then permanently deleted
  • Partner registration data: retained until partnership ends or you opt out
  • Slack alert data: no persistent storage — Slack messages are subject to Slack's own retention policy

5. Your rights under the AVG / GDPR

  • Right of access — request a copy of all data we hold about you
  • Right to rectification — request correction of inaccurate data
  • Right to erasure ('right to be forgotten') — use the opt-out form below
  • Right to object to processing based on legitimate interest
  • Right to lodge a complaint with the AP: autoriteitpersoonsgegevens.nl

We respond to all valid requests within 30 days.

6. SignalMesh — behavioural scoring

hes-consultancy.nl uses a proprietary behavioural scoring system ('SignalMesh') to identify high-intent B2B visitors. This system:

  • Tracks anonymous behavioural signals (scroll, time on page, CTA clicks) within your browser session only
  • Assigns a score of 0–100 based on engagement signals
  • Sends a notification to our Slack workspace when a session score exceeds 90/100, including the page URL and referrer
  • Does NOT store IP addresses, track across sessions or link to personal identifiers unless you submit a form
  • Uses sessionStorage (not cookies) — cleared automatically when you close the browser tab

Legal basis: Legitimate interest (Art. 6(1)(f) AVG). You can opt out using the form below.

7. Cookies & local storage

  • hci_lang (localStorage) — language preference EN/NL. No personal data.
  • hci_signal (sessionStorage) — SignalMesh session score. Deleted on tab close.

We set no tracking cookies, advertising cookies or third-party cookies of any kind.

Data deletion request

Opt-out or data deletion request

Fill in the form below. We process all requests within 30 days and send a confirmation.

Or email directly: mbhes@hes-consultancy-international.com — Subject: 'AVG request'