Privacy statement

This is the privacy statement for HyNorth, with its registered office at Concourslaan 17, 9727 KC Groningen, Netherlands. HyNorth is listed in the Dutch business register under number 86125877.

We are strongly committed to protecting your personal data. You can read in this privacy statement how we handle your personal data. HyNorth respects your privacy and complies with the General Data Protection Regulation (GDPR) and the Dutch legislation implementing the GDPR. This privacy statement applies to:

• visitors to our website

Personal data means all information that says something about you directly or that can be traced back to you as an individual. HyNorth only processes the personal data we need to perform our work and only if we have a lawful basis for doing so. HyNorth processes personal data on the following lawful bases:

• where necessary to comply with the law;
• where necessary to execute a contract (agreement) between you and HyNorth;
• where HyNorth has a ‘legitimate interest’ (sound reason) in processing your data;
• where you have given HyNorth permission (‘consent’) to process your personal data, like when you consent to the placement of cookies when visiting our website, for example. If you have given us consent to process certain personal data, you may withdraw your consent at any time and we will stop processing your data for that specific purpose.

HyNorth always adheres to the principle that personal data is to be processed in a manner that is lawful, fair and transparent to you.

We collect the following information on visitors to our websites:

If you submit a responsible disclosure: 

If you become aware of a vulnerability or weak spot in an IT system or on this website and wish to report this, you can do this by submitting what’s called a ‘responsible disclosure’ to HyNorth. For this we ask you for your name and email address. 

Cookies:

Personal data can also be collected by cookies, small text files that are sent to and stored on your computer. HyNorth uses cookies on this website. See our cookie statement for detailed information on the use of cookies on the HyNorth website. If you do not want to accept cookies from HyNorth, you can disable them through your browser. The Help section of your browser will explain how to do this. You can still visit our website even if you disable cookies.

HyNorth keeps personal data for as long as necessary for the purposes for which this information was collected. In some cases, we are legally required to retain records for a minimum period, such as the fiscal retention periods. We keep visitor data for no longer than six months.

If you have any questions about how long we keep particular data, you can send us an email at privacy@gasunie.nl.

HyNorth takes appropriate technical and organisational measures to protect personal data against theft, misuse, unauthorised access, disclosure, alteration and/or destruction. These are some examples of the measures we take:

• We store personal data on computer systems in controlled environments with restricted access.
• We use encryption and other security technologies to protect data during transmission.
• We arrange regular security audits and risk assessments.
• Our staff are instructed on data protection and security protocols.

Processing of personal data by data processors

HyNorth sometimes engages a third party to provide or perform a service. If this party has access to your personal data, the third party is considered to be a data processor. HyNorth has implemented the necessary contractual and organisational measures to ensure that the data processor only processes your personal data for the agreed purposes, as clearly set out in the data processing agreement we have concluded with them. 

Sharing your personal data with third parties other than data processors

HyNorth only shares your personal data with third parties to comply with legal obligations or after you have given consent for this.

HyNorth aims to only use data processors located in the European Economic Area (EEA). If HyNorth decides to transfer personal data for processing by a party located outside the EEA, HyNorth will take the necessary data protection and security measures.

As a data subject, you have the following rights:

• Right to be informed: you can ask HyNorth about which personal data it processes and its reasons for doing so.
• Right of access: you can ask HyNorth to provide you access to your personal data.
• Right to rectification: if the personal data HyNorth holds about you is incorrect and/or incomplete, you can ask HyNorth to correct and/or supplement this.
• Right to be forgotten: you can ask HyNorth to delete your personal data, in which case HyNorth will assess whether there are grounds for fulfilling your request.
• Right to restriction of processing: you can ask HyNorth to restrict the processing of your personal data, which you may do, for example, if the data is inaccurate or the processing is unlawful.
• Right to object: you can object to the processing of your personal data due to your specific situation, in which case HyNorth will comply with your request unless there are compelling reasons to continue processing your personal data.

If you wish to exercise any of these rights, you can send an email to privacy@gasunie.nl. HyNorth will let you know as soon as possible, but in any case within one month, how we have handled your request and, if applicable, provide you with the requested information. Depending on the complexity of your request or the number of requests HyNorth receives, HyNorth can extend this period by two months, in which case HyNorth will inform you of the longer response period.

If you believe that HyNorth has not sufficiently addressed your request, you can file a complaint with the Dutch Data Protection Authority.

HyNorth may amend this privacy statement from time to time and so we advise you to consult it regularly on HyNorth’s website to see the latest version. If HyNorth amends its privacy statement, we will revise the date at the bottom of the privacy statement.

For complaints, queries or comments about the use of personal data, you can send us an email at privacy@gasunie.nl.

Last updated: 20 August 2025