Privacy statement

Data controller

Microdesk B.V.

Chamber of Commerce number

89490614

Registered address

Dillestraat 6, 2215 BM Voorhout, the Netherlands

Version

September 30, 2026

Scope

RabbitMon, license management, support and associated online services

This privacy statement describes how Microdesk B.V. processes personal data when offering, registering, licensing, securing and supporting RabbitMon and related software services. It is intended for business and individual users and should be read alongside the applicable license and terms of use.

Key point: the license infrastructure is hosted in the Netherlands. Totaldesk is engaged as a subprocessor for hosting and backups in an ISO 27001-certified environment.

1. Who is responsible?

Microdesk B.V. is the data controller for personal data it processes for its own purposes described below.

• Microdesk B.V.
• Chamber of Commerce number: 89490614
• Registered address: Dillestraat 6, 2215 BM Voorhout, the Netherlands
• Email for privacy inquiries: support@microdesk.nl

2. To whom and what does this statement apply?

This statement applies to visitors to our websites, applicants for and users of RabbitMon licenses, contacts at customers and partners, and people who contact us about sales, support or security reports.

When a business customer uses RabbitMon to monitor systems, networks, events or security information, that customer may itself be the data controller for certain processing activities. Where applicable, Microdesk B.V. then acts as a processor under its agreements with that customer.

3. What personal data do we process?

Depending on how the services are used, we may process the following categories of personal data:

• Identity and contact details, such as name, company name, country and email address.
• Account and license details, such as product, license type, registration date, expiration date and license key or signed license file.
• Technical identifiers of the installation, where necessary for activation, fraud prevention, security and support.
• Communications and support data, including inquiries, correspondence and diagnostic information supplied by the user.
• License-infrastructure logs and security data, such as timestamps, request status, IP address and error or security reports.
• Billing and payment details if a paid product or subscription is purchased. Payment details may also be processed by the selected payment service provider.

4. For what purposes do we use personal data?

• Registering and issuing software licenses.
• Checking license status, validity and product entitlements.
• Performing agreements and providing software, updates and support.
• Securing the license server, preventing abuse and investigating malfunctions or security incidents.
• Administration, billing and compliance with legal obligations.
• Communicating service notices, important changes and security information.
• Improving reliability and usability using aggregated or necessary technical information.

5. Legal bases for processing

We process personal data only where there is a valid legal basis. Depending on the circumstances, we rely on one or more of the following bases:

• Performance of a contract, for example for registration, licensing, delivery and support.
• Legal obligation, for example for tax records and statutory retention requirements.
• Legitimate interests, for example security, fraud prevention, business continuity and improvement of our services, taking into account the interests and rights of those concerned.
• Consent, where specifically required. Consent may be withdrawn without affecting the lawfulness of processing carried out before withdrawal.

6. Hosting, storage and security

The license server and its backups are hosted in the Netherlands. Microdesk B.V. uses Totaldesk as a subprocessor for hosting and backups. The environment in which these services are provided is ISO 27001-certified.

Microdesk B.V. takes appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, unwanted disclosure and unauthorized alteration. These measures may include access restrictions, logging, encrypted connections, backups, patch management and security monitoring.

ISO 27001 certification of the hosting environment supports a structured information security management system, but does not mean every security risk can be eliminated.

7. Subprocessors and recipients

We share personal data only where necessary for the purposes described, where required by law, or where another valid legal basis applies.

Where necessary, we enter into agreements with parties that process personal data on behalf of Microdesk B.V. concerning security, confidentiality, purpose limitation and compliance with the GDPR. An up-to-date list of subprocessors can be requested using the privacy contact details.

8. Transfers outside the European Economic Area

The license infrastructure managed by Microdesk B.V. is hosted in the Netherlands. If a particular integration or external service involves processing personal data outside the European Economic Area, we apply a valid transfer mechanism and appropriate safeguards insofar as the GDPR requires. We inform customers when such a transfer is relevant to the service they use.

9. Retention periods

We do not retain personal data longer than necessary for the purposes for which it was collected, unless a legal retention obligation or a justified need requires a longer period.

• License and customer data: for the duration of the agreement and afterwards for as long as necessary for administration, evidence, security or support.
• Financial records: for the applicable statutory retention period.
• Support and communication data: for as long as needed to handle, follow up on and substantiate the services provided.
• Technical and security logs: for a limited period appropriate for diagnosis, security and incident investigation.

Specific periods are established internally for each data category and may change if legislation, risks or services require it.

10. Rights of data subjects

To the extent permitted by the GDPR, you may request access, rectification, erasure, restriction of processing or data portability, or object to processing. Where processing is based on consent, you may withdraw that consent.

Send your request to support@microdesk.nl and include enough information for us to assess it. We may ask for further information to verify your identity. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

11. Automated decision-making

Microdesk B.V. does not make decisions based solely on automated processing of the personal data described in this statement that have legal effects or similarly significantly affect you, unless this is expressly communicated at a later date and permitted by law.

12. Cookies and website use

When our website uses cookies or similar technologies, we provide information through a separate cookie statement or notice. Essential cookies may be used to keep the website secure and functioning correctly. We request consent for non-essential cookies where required by law.

13. Personal data breaches and security incidents

We investigate suspected personal data breaches and take appropriate measures. When a breach must be reported, we notify the Dutch Data Protection Authority and inform affected individuals where required by law. Security reports can be sent to support@microdesk.nl.

14. Changes to this privacy statement

We may update this privacy statement when our services, processing activities or legal obligations change. The latest version will include a version date. We inform customers of significant changes through an appropriate communication channel.

15. Contact

For privacy questions, requests or complaints, please contact: