Privacy statement

This is the privacy statement for HyWay 27.

We are strongly committed to protecting your personal data. You can read in this privacy statement how we handle your personal data. HyWay 27 respects your privacy and complies with the General Data Protection Regulation (GDPR) and the Dutch legislation implementing the GDPR. This privacy statement applies to:

• visitors to our website

Personal data means all information that says something about you directly or that can be traced back to you as an individual. HyWay 27 only processes the personal data we need to perform our work and only if we have a lawful basis for doing so. HyWay 27 processes personal data on the following lawful bases:

• where necessary to comply with the law;
• where necessary to execute a contract (agreement) between you and HyWay 27;
• where HyWay 27 has a ‘legitimate interest’ (sound reason) in processing your data;
• where you have given HyWay 27 permission (‘consent’) to process your personal data, like when you consent to the placement of cookies or subscribe to a newsletter when visiting our website, for example. If you have given us consent to process certain personal data, you may withdraw your consent at any time and we will stop processing your data for that specific purpose.

HyWay 27 always adheres to the principle that personal data is to be processed in a manner that is lawful, fair and transparent to you.

We collect the following information on visitors to our websites:

If you use our contact form:

Depending on the fields that appear on the contact form, you provide us with the following personal data: your name, company name, landline/mobile phone number (optional), and email address. We need this data to handle your query, complaint or comment and to be able to contact you.

If you submit a responsible disclosure: 

If you become aware of a vulnerability or weak spot in an IT system or on this website and wish to report this, you can do this by submitting what’s called a ‘responsible disclosure’ to HyWay 27. For this we ask you for your name and email address. 

Cookies

Personal data can also be collected by cookies, small text files that are sent to and stored on your computer. HyWay 27 uses cookies on this website. See our cookie statement for detailed information on the use of cookies on the HyWay 27 website. If you do not want to accept cookies from HyWay 27, you can disable them through your browser. The Help section of your browser will explain how to do this. You can still visit our website even if you disable cookies.

Gasunie keeps personal data for as long as necessary for the purposes for which this information was collected. In some cases, we are legally required to retain records for a minimum period, such as the fiscal retention periods. We keep visitor data for no longer than six months.

If you have any questions about how long we keep particular data, you can send us an email at [email protected].

HyWay 27 takes appropriate technical and organisational measures to protect personal data against theft, misuse, unauthorised access, disclosure, alteration and/or destruction. These are some examples of the measures we take:

• We store personal data on computer systems in controlled environments with restricted access.
• We use encryption and other security technologies to protect data during transmission.
• We arrange regular security audits and risk assessments.
• Our staff are instructed on data protection and security protocols.

Processing of personal data by data processors

HyWay 27 sometimes engages a third party to provide or perform a service. If this party has access to your personal data, the third party is considered to be a data processor. HyWay 27 has implemented the necessary contractual and organisational measures to ensure that the data processor only processes your personal data for the agreed purposes, as clearly set out in the data processing agreement we have concluded with them. 

Sharing your personal data with third parties other than data processors

HyWay 27 only shares your personal data with third parties to comply with legal obligations or after you have given consent for this.

HyWay 27 aims to only use data processors located in the European Economic Area (EEA). If HyWay 27 decides to transfer personal data for processing by a party located outside the EEA, HyWay 27 will take the necessary data protection and security measures.

As a data subject, you have the following rights:

• Right to be informed: you can ask HyWay 27 about which personal data it processes and its reasons for doing so.
• Right of access: you can ask HyWay 27 to provide you access to your personal data.
• Right to rectification: if the personal data HyWay 27 holds about you is incorrect and/or incomplete, you can ask HyWay 27 to correct and/or supplement this.
• Right to be forgotten: you can ask HyWay 27 to delete your personal data, in which case HyWay 27 will assess whether there are grounds for fulfilling your request.
• Right to restriction of processing: you can ask HyWay 27 to restrict the processing of your personal data, which you may do, for example, if the data is inaccurate or the processing is unlawful.
• Right to object: you can object to the processing of your personal data due to your specific situation, in which case HyWay 27 will comply with your request unless there are compelling reasons to continue processing your personal data.

If you wish to exercise any of these rights, you can send an email to [email protected]. HyWay 27 will let you know as soon as possible, but in any case within one month, how we have handled your request and, if applicable, provide you with the requested information. Depending on the complexity of your request or the number of requests HyWay 27 receives, HyWay 27 can extend this period by two months, in which case HyWay 27 will inform you of the longer response period.

If you believe that HyWay 27 has not sufficiently addressed your request, you can file a complaint with the Dutch Data Protection Authority.

HyWay 27 may amend this privacy statement from time to time and so we advise you to consult it regularly on HyWay 27’s website to see the latest version. If HyWay 27 amends its privacy statement, we will revise the date at the bottom of the privacy statement.

For complaints, queries or comments about the use of personal data, you can send us an email at [email protected].

Last updated: 20 August 2025