Privacy Policy

1. Data controller

The controller responsible for personal data processed through this website and in connection with our services is:

Keystone Beheer B.V.
trading as KSCG / Keystone Capital Group
Europalaan 28
5232 BC ’s-Hertogenbosch
The Netherlands
Chamber of Commerce no. 70534349
Email: info@kscg.nl

2. Personal data we may process

The personal data we process depends on how you interact with us and on the nature of any financing or advisory engagement.

3. Purposes of processing

We may process personal data for the following purposes:

4. Legal bases

KSCG processes personal data only where a valid legal basis applies. Depending on the circumstances, this may include the performance of a contract or steps taken at your request before entering into a contract, compliance with a legal obligation, our legitimate interests in managing professional relationships and financing enquiries, securing our systems and improving our services, or your consent where legally required.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

5. Website analytics and technical data

This website is hosted through Vercel and uses Vercel Web Analytics for aggregated information about website usage.

Technical data may be processed where necessary to deliver, secure and analyse the website. KSCG does not use this data to personally profile individual visitors.

6. Recipients

We only share personal data where necessary for the purpose for which it was collected, for the provision of our services or where required by law.

Recipients may include IT, hosting and email service providers, professional advisers, lenders and investors approached in connection with a specific transaction, and competent public authorities where legally required.

Where a third party processes personal data on behalf of KSCG, appropriate data protection arrangements are put in place where required.

7. Transfers outside the EEA

Personal data may be processed outside the European Economic Area when we use international service providers or work on cross-border transactions.

Where required by the GDPR, such transfers are based on an appropriate transfer mechanism, such as an adequacy decision or suitable contractual safeguards.

8. Retention

We retain personal data only for as long as necessary for the purpose for which it was collected.

The applicable retention period depends on the nature of the information, the duration of the business relationship or transaction, statutory retention obligations and the need to establish, exercise or defend legal claims.

Data that is no longer required and for which there is no legal or legitimate reason for continued retention is deleted or anonymised.

9. Security

KSCG applies appropriate technical and organisational measures to protect personal data against loss, unauthorised access, unauthorised alteration and other unlawful processing.

10. Your rights

Depending on the circumstances, you may have rights under the GDPR including access, rectification, erasure, restriction of processing, data portability and objection to processing.

Requests may be sent to info@kscg.nl. We may request additional information where necessary to verify your identity.

You also have the right to lodge a complaint with the Dutch Data Protection Authority or, where applicable, another competent European data protection authority.

11. Automated decision-making

KSCG does not use this website to make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

12. Changes to this Privacy Policy

We may update this Privacy Policy when our services, website or applicable legal requirements change. The most recent version will be published on this website.

Last updated: 16 September 2026.

Contact

Questions about privacy?

For privacy questions or requests relating to your personal data, please contact us at: