Privacy Policy

Last updated: April 1, 2026

EDIH NN believes it is important that personal data be processed carefully, securely, and transparently. In this privacy and cookie statement, we explain what personal data we process, why we do so, with whom we share data, and what rights you have.

This statement applies to the use of our website, forms, newsletters, events, social media channels, CRM activities, and digital tools, including the Digital Maturity Assessment (DMA) and other tools developed by or for EDIH NN.

EDIH NN stands for European Digital Innovation Hub Northern Netherlands. EDIH NN helps small and medium-sized enterprises (SMEs) and other organizations in the Northern Netherlands with digitalization, AI, cybersecurity, autonomous systems, skills and training, financing, and access to knowledge, networks, and testing facilities.

Project Details

Project Name: European Digital Innovation Hub Northern Netherlands
Project Acronym: EDIH NN 2.0
Call: DIGITAL-2025-EDIH-EU-EEA-08
Topic: DIGITAL-2025-EDIH-EU-EEA-08-CONSOLIDATION-STEP
Service: CNECT/A/04

EDIH NN 2.0 is a European collaborative project carried out by a consortium of organizations. Central coordination is handled by the lead partner:

NV NOM Investment and Development Corporation for the Northern Netherlands

For joint project activities, the consortium organizations of EDIH NN 2.0 are joint data controllers within the meaning of the General Data Protection Regulation (GDPR). This means that they jointly determine the purposes and means of processing personal data within the joint project activities of EDIH NN.

The consortium consists of:

For certain activities, a single consortium organization may act as the independent data controller, for example, when that organization organizes an event on its own, maintains its own contact registry, or uses its own systems. When a party processes personal data exclusively on behalf of EDIH NN, we establish appropriate arrangements for this purpose, such as a data processing agreement.

NV NOM serves as the central point of contact for privacy questions regarding EDIH NN 2.0.

Do you have questions about this privacy and cookie statement or about the processing of your personal data? Please contact us at:

info@edih-nn.nl

We process personal data when you:

Depending on the situation, we may process the following data:

We ask that you do not share any special categories of personal data with us—such as medical information, social security numbers, political opinions, religious beliefs, or information regarding criminal convictions—unless it is strictly necessary and has been clearly agreed upon in advance.

We process personal data for the following purposes.

When you contact us, we process your data to answer your question, send you information, or schedule a follow-up appointment.

Examples of data: name, organization, email address, phone number, and the content of your message.
Legal basis: legitimate interest or performance of a contract or pre-contractual relationship.

We may send you emails about our services, events, training sessions, articles, programs, or relevant developments related to digitization, AI, cybersecurity, and autonomous systems.

When you sign up for a newsletter or mailing list, we use your information to send you these communications and to improve our communication with you. Every email includes an option to unsubscribe.

For existing business contacts, we may inform you about similar services or activities offered by EDIH NN, to the extent permitted by law. You can unsubscribe at any time.

Examples of data: name, organization, email address, area of interest, registration, click-through and open rates.
Legal basis: consent or legitimate interest.

When you register for an event, we process your data to record your participation, send you practical information, maintain attendance lists, and contact you afterward if necessary.

Examples of data: name, organization, position, email address, phone number, participation details, dietary preferences if necessary, and any evaluation data.
Legal basis: performance of a contract, legitimate interest, or consent.

EDIH NN uses HubSpot for customer relationship management, forms, email marketing, social media planning, campaigns, and contact follow-up. HubSpot tracks contact information, communication history, form submissions, event registrations, interests, and interactions with our website and emails.

We use this data to better understand what information or support may be relevant to businesses and stakeholders. This allows us to communicate more effectively, follow up on inquiries, and improve the effectiveness of our activities.

Examples of data: name, email address, organization, job title, contact interactions, form submissions, newsletter preferences, event participation, website and email interactions.
Legal basis: consent, legitimate interest, or performance of a contract.

EDIH NN uses digital tools such as the Digital Maturity Assessment (DMA) and possibly other assessments or tools to provide companies with insight into their digital maturity, opportunities, risks, and next steps.

The information you enter into these tools is used to provide a report, advice, or follow-up action. The results are intended to offer support and advice, not as a fully automated decision regarding individuals.

Examples of data: contact person’s name, organization, job title, company information, answers to assessment questions, scores, recommendations, and reports.
Legal basis: performance of a contract, legitimate interest, or consent, depending on the context.

EDIH NN may refer companies and contacts to relevant partners, research institutions, field labs, technology providers, funding organizations, or other organizations within the EDIH ecosystem. We do this only when it is relevant to your inquiry, participation, or service.

Examples of data: contact information, organizational information, inquiry, area of interest, and relevant context for the referral.
Legal basis: consent, legitimate interest, or performance of a contract.

EDIH NN is made possible in part by public and European funding. Therefore, we must be able to demonstrate which activities were carried out, how many organizations were reached, and what results were achieved.

Whenever possible, we report data in aggregated or anonymized form. When personal data is required for monitoring, auditing, or accountability purposes, we limit its use to what is necessary.

Examples of data: participation data, organization name, region, type of service, date of participation, project results, and administrative data.
Legal basis: legal obligation, task in the public interest, legitimate interest, or fulfillment of grant and project obligations.

We use analytical tools to understand how our website is used and how we can improve our information and services. Cookies, pixels, or similar technologies may be used for this purpose.

Examples of data: pages visited, click behavior, device and browser data, IP address, session data, and cookie IDs.
Legal basis: consent or legitimate interest, depending on the type of cookie and the settings.

EDIH NN uses LinkedIn for visibility, knowledge sharing, event promotion, and interaction with target audiences. When you comment on our posts, follow us, send us a message, or interact with our LinkedIn page, we may process data that you make available through LinkedIn.

When we use LinkedIn tracking or advertising features, we do so only in accordance with applicable cookie policies and consent settings.

Examples of data: profile name, job title, organization, comments, private messages, interaction data, and campaign statistics.
Legal basis: legitimate interest or consent.

We process data to keep our website, systems, forms, CRM, tools, and communication channels secure and to prevent misuse, spam, data breaches, or unauthorized access.

Examples of data: log files, IP address, technical data, access rights, and security incidents.
Legal basis: legitimate interest or legal obligation.

We share personal data only when necessary for our services, collaborations, legal obligations, or project accountability.

We may share data with:

We enter into a data processing agreement with parties that process personal data on our behalf. When multiple parties jointly determine the purpose and means of processing, we establish agreements regarding joint responsibility.

EDIH NN may use digital tools, analyses, AI applications, or algorithmic support to make its services more efficient and effective. Examples include assessments, analyses, reports, segmentation, or support for communication and knowledge sharing.

We use these tools carefully and transparently. The results of tools such as the DMA are intended as advice or support. They are not used to make fully automated decisions that have legal consequences for individuals or significantly affect them in a similar manner.

When we deploy AI systems that are subject to specific legislation, we assess in advance the risks, applicable obligations, required documentation, human oversight, transparency, and security measures.

Our website uses cookies and similar technologies. Cookies are small files that are placed on your device or read information from it when you visit our website.

We use the following categories of cookies.

These cookies are necessary for the website to function properly, for example, for security, form functionality, or to remember cookie preferences. No consent is required for these cookies.

Analytical cookies help us understand how visitors use the website. We use Google Analytics and possibly Microsoft Clarity, among other tools, to gain insight into website usage, performance, and areas for improvement.

When analytical cookies are configured to be privacy-friendly and have little impact on your privacy, we may place them without your consent. For more in-depth analysis, session recordings, heat maps, or tracking, we ask for your consent.

Marketing and tracking cookies are used to track visitors, measure the effectiveness of campaigns, or make ads and content more relevant. Examples include tracking via LinkedIn, HubSpot, or other marketing tools.

We only place these cookies after you have given your consent.

We use Google Tag Manager to manage scripts and tags on our website. Tag Manager itself is intended as a management tool. Other tools can be activated through Tag Manager, depending on your cookie preferences.

We use Google Search Console to monitor the discoverability and technical performance of our website. This tool is primarily focused on website management and search performance.

Microsoft Clarity can be used to gain insights into user behavior on the website, for example through heat maps and session analysis. When Clarity uses cookies or tracking that require consent, we will not activate them until consent has been given.

HubSpot may set cookies for forms, website analytics, CRM integrations, email marketing, and personalization. Depending on the type of cookie, we may ask for your consent.

When we use the LinkedIn Insight Tag or similar LinkedIn features for campaign measurement, retargeting, or conversion tracking, we do so only with your consent.

You can adjust your cookie preferences at any time via [insert link to cookie settings]. You can also delete or block cookies through your browser settings.

Please note: if you block cookies, some parts of the website may not function properly.

Tracking pixels or click tracking may be used in newsletters and marketing emails. This allows us to see whether an email has been opened and which links have been clicked. We use this information to improve our communications and better tailor them to the interests of our target audiences.

You can unsubscribe at any time using the unsubscribe link at the bottom of our emails. You can also configure your email program so that images are not loaded automatically.

We do not retain personal data longer than is necessary for the purpose for which it was collected, unless we are required to retain the data for a longer period due to legal obligations, grant conditions, audit requirements, or legitimate interests.

We adhere to the following guidelines:

We periodically review whether data is still necessary.

We take appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, unintended disclosure, and unauthorized alteration.

This includes access control, secure connections, authorizations, logging, agreements with suppliers, data minimization, periodic audits, and raising awareness within the project team.

Your Privacy Rights

Under the GDPR, you have various rights. You may ask us to:

Would you like to exercise your rights? Please contact us at info@edih-nn.nl.

NV NOM acts as the central point of contact on behalf of EDIH NN 2.0. If your request concerns data processing for which another consortium organization is responsible, we will ensure that your request is forwarded internally to the appropriate organization.

We may ask you to verify your identity. We generally respond within one month. In complex cases, this period may be extended in accordance with the GDPR.

If you are not satisfied with how we handle your personal data, please let us know. Contact us at info@edih-nn.nl.

You also have the right to file a complaint with the Dutch Data Protection Authority.

We may update this privacy and cookie policy if our services, the tools we use, applicable laws, or our operating procedures change. The most current version is always available on our website.

This privacy and cookie policy was last updated on April 1, 2026.