Disclaimer

The terms of this disclaimer apply to this website.

By visiting this website and/or using the information offered on or via this website, you agree to the applicability of this disclaimer. In the event of any conflict between the terms and conditions of specific products and services ordered through this website and this disclaimer, the terms and conditions of these products and services shall prevail.

The information on this website is intended for general information only. No rights can be derived from the information on this website. Although we take care in compiling and maintaining this website and use sources that are considered reliable, Veste Services cannot guarantee the accuracy, completeness and topicality of the information provided. Veste Services also does not guarantee that the website will function error-free or uninterrupted. Veste Services expressly rejects any liability with regard to the accuracy, completeness, topicality of the information provided and the (undisturbed) use of this website.

Third party information, products and services

When Veste Services displays links to third-party websites, this does not mean that the products or services offered on or via these websites are recommended by Veste Services.

Veste Services accepts no liability and no responsibility for the content, use or availability of websites referred to or that refer to this website. Your use of such links is at your own risk. The information on such websites has not been further assessed by Veste Services for accuracy, reasonableness, topicality or completeness. Requests to place links to third-party websites on Veste Services.nl are tested against a number of criteria. Read more about the criteria and regulations of Veste Services' link policy.

Use information

Veste Services reserves all intellectual property rights and other rights with regard to all information offered on or via this website (including all texts, graphic material and logos). It is not permitted to copy, download or in any way publish, distribute or reproduce information on this website without prior written permission from Veste Services or the lawful permission of the copyright holder. You may print and/or download information on this website for your own personal use.

Changes

Veste Services reserves the right to change the information offered on or via this website, including the text of this disclaimer, at any time without further notice. It is recommended to periodically check whether the information offered on or via this website, including the text of this disclaimer, has changed.

Applicable law

Dutch law applies to this website and the disclaimer. All disputes arising from or in connection with this disclaimer will be submitted exclusively to the competent court in the Netherlands.

Responsible disclosure

It may unexpectedly happen that there is a weak spot in one of our systems. If you discover a security problem, we ask that you report it to us as soon as possible. This way, Veste Services can then take measures. This is called responsible disclosure.

How do I report a weakness in Veste Services' ICT system?

If you discover a vulnerability in Veste Services' ICT system, we ask you to:

• Please report it to us as soon as possible after discovering the vulnerability. The contact details are on the contact page.
• Provide sufficient information to reproduce the problem so that we can resolve it as quickly as possible. Typically, the IP address or URL of the affected system and a description of the vulnerability are sufficient, but more complex security issues may require more information.
• Leave contact details so that we can get in touch with you to work together towards a safe result. Leave at least an email address or telephone number.
• Do not share information about the security issue with others until it is resolved.
• Act responsibly with the knowledge of the security problem by not taking actions that go beyond what is necessary to demonstrate the security problem.
• You should realize that any information from Veste Services systems is subject to the obligation of confidentiality and that further disclosure of that information is punishable.

Do not abuse the discovery

If you discover a vulnerability, don't miss ituse of. For example:

• Placing malware.
• Copying, modifying, or deleting data or configurations from a system (an alternative to this is to create a directory listing or screenshot).
• Changes to be made to the system.
• Repeatedly accessing the system or sharing access with others.
• The use of so-called 'brute forcing' to gain access to systems.
• The use of denial-of-service attacks or social engineering.

What do we do in the event of a report of responsible disclosure?

Have you reported a weakness in our IT system? Then we will work on it as follows:

• If your report meets the above conditions, we will not attach any legal consequences to this report.
• We treat your report strictly confidential and do not share personal data with third parties without your permission, unless this is required by law or a court order.
• The NCSC will send you confirmation of receipt within 1 working day.
• The NCSC will respond to your report within 3 working days with an assessment of the report and an expected date for a solution.
• The NCSC will keep you informed of the progress. We will resolve the security problem you have identified in a system within 60 days at the latest. We will determine in mutual consultation when and how we will publish about this.