Privacy Statement I-SEC International Security B.V.

1. Introduction & scope

I-SEC offers specialized B2B security services to clients in the aviation security industry and critical infrastructures. In the context of its activities, I-SEC sometimes collects, stores, and provides personal data or processes it in other ways.

Ensuring the privacy and security of personal data in accordance with applicable data protection laws is our highest priority. Our Privacy Statement gives general information about how I-SEC handles personal data, and it describes your rights regarding this processing according to the General Data Protection Regulation («GDPR»).

I-SEC International Security B.V. is the data controller for the processing activities described in this statement. If you interact with another I-SEC entity (e.g. I-SEC Nederland B.V. or I-SEC TECH B.V.), a different controller may apply, and you should refer to that entity’s privacy statement.

2. What is personal data?

I-SEC respects the privacy of its employees, customers, and visitors of the website.

Personal data is all data that discloses your identity that is unique to you and can be traced directly or indirectly to you as a person. Examples are name, home address, phone number, date of birth, etc. More information concerning the protection of your personal data can be found on the website of the authorities responsible for enforcing the GDPR, for the Netherlands this is https://autoriteitpersoonsgegevens.nl

3. Your Rights

The GDPR aims to make data processing more transparent and give you greater control over how your data is handled.

Considering the basic principles your rights are:

• Right to be informed: Through our Privacy Policy and this Privacy statement we inform you of the data we collect and how we use it.
• Right of access: You may ask us which personal data we hold about you and how we use it. We will also inform you about the purpose of the processing, how long we will keep your data, and with whom it may be shared.
• Right to rectification: You are able to modify your personal data in case the data is not up to date or accurate.
• Right to erasure: You may ask us to delete your personal data, for example if the data is no longer needed or if you withdraw your consent. This right is not absolute: in some cases, we are legally required to retain certain data or may have other legitimate grounds to keep it.
  If we are unable to comply with your request, we will inform you of the reason.
• Right to restrict processing: You can ask us to temporarily stop using your personal data while we investigate a request you made, such as correcting inaccurate data or assessing an objection. During this time, we may still store your data but will not actively use it.
• Data portability: You may request a copy of the personal data you have provided to us, in a machine-readable format, so you can transfer it to another organization. This applies when we process your data based on your consent or a contract, and the processing is automated.
• Right to object: You have the right to ask us to stop processing your personal data. However, we cannot comply with every request as I-SEC is obligated to save and store some personal data due to applicable law regulations.
• Right not to be subject to automated decision-making (including profiling): I-SEC does not engage in automated decision-making that produces legal or similarly significant effects on individuals within the meaning of Article 22 of the GDPR.

Please note that certain rights may be limited where we are legally required to retain your data or where other legitimate grounds apply under the GDPR.

4. Legal grounds for processing personal data

I-SEC only processes your personal data where a legal basis under the GDPR applies. Depending on the situation, the legal grounds under Article 6(1) of the GDPR may include:

• Consent: for example, when you submit a contact form or sign up for updates.
• Performance of a contract: such as processing necessary to enter into or perform an employment contract.
• Legal obligation: such as compliance with tax, labor, or security legislation.
• Legitimate interest: for example, improving our recruitment processes, handling complaints, or maintaining internal security procedures.

I-SEC will always inform you of the specific legal basis relevant to the processing of your personal data, and whether providing your data is a legal or contractual requirement or necessary to enter into a contract.

5. How we use your data

Website use & cookies

Our website only uses essential cookies that are necessary for its secure and proper functioning. These cookies do not collect personal data and are not used for tracking, analytics, or marketing purposes. No consent is required for their use.

When you visit our website, certain technical data is automatically recorded in server logs. This includes your IP address, the date and time of your visit, your browser type, operating system, and the pages you accessed. This data is processed solely to ensure the security and proper functioning of the website. The legal basis for this processing is our legitimate interest.

Additional personal data is only processed if you actively provide it to us, for example by submitting a contact form or applying for a job. In those cases, we will inform you separately about the purpose and legal basis of the processing.
When transmitting data via our website, Secure Socket Layer «SSL» encryption is used. The padlock in your browser’s address bar indicates that you are using an encrypted connection. Even after you have shared your data with us, the stored information is secured by technical and organizational measures to prevent loss and misuse. The technical measures protecting your information are regularly reviewed and improved as necessary.

Contact Form

You can use the contact form on our website to get in touch with us, for example to ask a question or request information. The personal data you provide through the form will only be used to respond to your request.

The legal basis for processing this data is our legitimate interest (Article 6(1)(f) GDPR) in handling your inquiry efficiently.

Job Applications

If you apply for a job with I-SEC, you will be asked to provide personal data such as your name, address, CV, motivation letter, and references. For some positions or locations, you may be redirected to a third-party recruitment platform used by our subsidiaries.

As I-SEC operates in high-security environments such as airports, background screening is mandatory for all employees. This screening is conducted by the Dutch General Intelligence and Security Service (AIVD) or other relevant national authorities, depending on the jurisdiction.

The legal basis for processing your application data is the performance of pre-contractual measures. For the processing of data required for background checks, the basis is compliance with a legal obligation.

6. Data Security

Within the I-SEC group, each subsidiary is responsible for implementing privacy compliance at the operational level. Trained privacy and security professionals are assigned locally to monitor legal developments, maintain privacy awareness, and ensure that personal data is processed in accordance with the GDPR and local regulations. I-SEC International provides overarching guidance and coordination where needed.

Risk assessments and internal audits are regularly conducted to evaluate and strengthen our privacy and security practices.

Personal data held by I-SEC is protected by appropriate technical and organizational measures designed to prevent unauthorized access, loss, or misuse. Data transmissions via our website are encrypted using Secure Socket Layer (SSL) technology. These security measures are periodically reviewed and updated. These same safeguards also apply to any third-party processors acting on our behalf.

7. Data breach

In the unfortunate but unlikely event we were not able to protect your personal data; a so-called data breach may have occurred. I-SEC will report a data breach with the regulator. In case the data breach has a serious impact on your privacy, I-SEC will inform you as soon as possible. We will let you know the details of the data breach and what I-SEC can do to minimize the damage.

8. Retention period and data sharing

We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected. For example, data related to job applications, information requests or complaints will be stored only as long as needed to process your request. In the case of an employment relationship, data is retained for the duration of the contract and in accordance with legal retention obligations.

Where specific legal obligations apply, such as tax, labor, or aviation regulations, we retain personal data for the period required by law.
Your personal data will not be shared with third parties unless necessary to fulfil your request or comply with a legal obligation. In such cases, we may share your data with parties such as airport authorities, airlines, customs, or national authorities. If sharing is not legally required, we will ask for your consent before doing so.

9. Questions, requests, or complaints

In case you have any questions concerning the protection of your personal data or if you want to make use of any of the data subject rights, you may get in touch with I-SEC or one of the subsidiaries.

When you think you have found weaknesses of possible breaches in our systems, we kindly ask you to contact us as soon as possible so we can constrain and solve the issue immediately.

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. In the Netherlands, this is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), which can be contacted via www.autoriteitpersoonsgegevens.nl

You can contact our Data Protection Officer (DPO) at any time by using the following contact details:
I-SEC International Security B.V.
H.Walaardt Sacréstraat 425-5
1117 BM, Schiphol Oost
The Netherlands
Email: dpo@i-sec.com

10. Disclaimer

This statement will occasionally change, for example because there are changes in legislation or when our website is undergoing adjustments. I-SEC may change the content of this statement always and without prior notice. This statement was last modified in June 2025.

I-SEC International Security B.V., H. Walaardt Sacréstraat 425-5, 1117 BM, Schiphol Oost, The Netherlands.

© 2025 I-SEC International Security B.V.