A number of Portbase employees have access to personal data. These are only employees who, by virtue of their position, need access to personal data to carry out their work. In this way and in combination with the information security measures mentioned below, Portbase ensures that the personal data can only be accessed by authorised persons. The personal data may only be used for the purposes specified in this Privacy Statement. In principle, Portbase does not share personal data with third parties. Portbase only shares personal data with service providers in IAMconnected; if you log in to an external service provider via IAMconnected because you want to use their services. In addition, Portbase’s software suppliers have access to its systems. Portbase has made agreements with these data processors to ensure sufficient guarantees are in place for the careful processing of personal data, in accordance with the GDPR and this Privacy Statement. Personal data is mostly stored within the European Union. Only data collected via cookies on Websites is processed in the United States. In that case and other possible cases where Portbase shares personal data with organisations in countries outside the European Economic Area (EEA), it takes the necessary measures required by the GDPR to protect this data, such as the necessary contractual, technical and organisational safeguards. If necessary, Portbase will still specifically ask your permission. Nevertheless, foreign authorities may require access to this personal data or it may not be easy for you to approach a judge in that country. You may withdraw your consent at any time. For the use of cookies, this can be done on the Portbase website via ‘Privacy Settings’. Your preference will be adjusted right away. This has no consequence for personal data that has already been processed.