Stepstone Corporate Finance+ B.V. processes personal data of visitors to our website. This statement explains which data we process, why we process it and what rights you have.
Stepstone Corporate Finance+ B.V.
Suikersilo-Oost 33, 1165 MS Halfweg, the Netherlands
Chamber of Commerce number 78598400 · RSIN 861464618
info@stepstonecf.com
2. Data we process
2.1 Data you provide yourself
- Your name, email address, telephone number, company name and the content of your message, when you complete a form on our website or send us an email.
- If you apply for a position: your name, contact details, curriculum vitae and covering letter.
2.2 Data collected automatically
- IP address, browser, operating system and device type.
- Which pages you view, how long you stay, and which website referred you to us.
- Clicks, scrolling and mouse movement. We use Microsoft Clarity, which records sessions.
2.3 Identification of your organisation
Leadinfo and Leadboxer resolve your IP address to the organisation you work for and enrich it with publicly available company information. This tells us which companies visit our website and which pages they view. We use this to decide which parties to approach.
3. Purposes and legal bases
| Processing | Purpose | Legal basis |
| Contact form and email | Answering your question and maintaining contact | Performance of, or steps prior to, a contract, or legitimate interest |
| Applications | Assessing whether you fit the role | Legitimate interest in filling the vacancy |
| Google Analytics and Tag Manager | Measuring website use and improving the site | Consent |
| Microsoft Clarity | Analysing user behaviour through session recordings | Consent |
| Leadinfo and Leadboxer | Identifying business visitors for commercial follow-up | Consent |
| HubSpot | Recording and following up on contact details | Consent or legitimate interest |
| LinkedIn Insight Tag and Google Ads | Measuring advertising and building audiences | Consent |
| Log files and security | Protecting the website against misuse and outages | Legitimate interest |
4. Cookies
Our website places cookies and similar technologies. Our cookie policy sets out which ones, what they do and how long they are stored. You can change or withdraw your choice at any time through the cookie settings on our website.
5. How long we keep data
- Contact form messages and email correspondence: one year after the last contact.
- Application data: four weeks after rejection
- Analytics and visitor data: in line with the standard retention period of the service concerned.
- Security log files: in line with the period applied by our hosting provider.
We engage service providers that process personal data on our behalf:
- Bohlding — hosting, maintenance and management of the website.
- Microsoft — Microsoft 365 and Microsoft Clarity.
- HubSpot — customer relationship management and forms.
- Leadinfo and Leadboxer — identification of business visitors.
- Google — Analytics, Tag Manager and advertising.
- LinkedIn — advertising and conversion measurement.
- CookieYes — recording your cookie preferences.
We have concluded a data processing agreement with each of these parties setting out what they may do with the data. We do not sell your data.
7. Transfers outside the European Economic Area
HubSpot, Google, LinkedIn and Microsoft are US companies. Your data may therefore be processed outside the European Economic Area. We only allow this on the basis of a valid transfer mechanism: certification under the EU-US Data Privacy Framework, or the European Commission’s standard contractual clauses.
8. Security
We take appropriate technical and organisational measures to protect your data against loss and unlawful use. Our website uses an encrypted connection, access to data is limited to staff who need it, and our systems are kept up to date.
9. Your rights
You have the right to:
- access your data;
- have inaccurate data corrected;
- have your data erased;
- have processing restricted;
- receive your data in a common format or have it transferred;
- object to the processing;
- withdraw consent previously given, at any time.
Send your request to info@stepstonecf.com. We will respond within one month. To avoid disclosing data to the wrong person, we may ask you to identify yourself.
If you are not satisfied with how we handle your data, you may lodge a complaint with the Dutch Data Protection Authority via autoriteitpersoonsgegevens.nl.
10. Changes
We may amend this statement, for example when we start using new services. The current version is always available on our website. This version is dated 30 July 2026.