About
Privacy: NIS2 Guide
How nis2guide.net handles your data: what the forms collect, when a request goes to NIS2 providers, no analytics or ads, retention and your rights.
Summary
This notice explains what the forms on nis2guide.net collect, why, when a request goes to independent NIS2 providers, how long data is kept and how you can see, correct or delete it.
Reading any page of the site needs no account and no form. Data reaches the site only when you send one of its three forms.
nis2guide.net is an independent, provider-neutral reference on NIS2. It earns its revenue by passing provider requests, with the sender's consent, to independent NIS2 providers, and no company pays for placement. Every explanation on the site is free to read, and the reference on the NIS2 Directive works without any form.
Who Is Responsible for Your Data?
nis2guide.net, publisher of NIS2 Guide, decides how the data you send through its forms is used and is the controller of that data. Write to editorial@nis2guide.net for anything on this page: a question about this notice, about the data the site holds on you or about a request you sent. The site is run by its editorial team, the NIS2 Guide Editorial Team, and no individual person is named as its publisher. The same address handles corrections, page questions and every data request described below.
What Data the NIS2 Guide Forms Collect
The site collects only what you type into one of its three forms, plus the page you sent it from and the time you sent it. No account is created and no payment data is taken, because the site sells nothing to its readers. The IP address of your device is not stored with a submission. Table 1 lists the three forms, the fields each form asks for and whether its data ever leaves the editorial team.
| Form | Fields you enter | Stored with | Purpose | Leaves the editorial team? |
|---|---|---|---|---|
| Provider request on NIS2 compliance pages | Step or steps you need help with; service type; entity category, if known; Member State or States; sector; organisation size band; timing; description; email; company; consent box | Source page, time sent | Pass the request to independent NIS2 providers | Yes, only with your consent |
| Contact form or editorial@nis2guide.net | Email; name (optional); topic; page; message | Source page, time sent | Answer the message or correct a page | No |
| Newsletter (only where offered) | Source page, time sent | Send the newsletter | No |
Why Form Data Is Used
Form data is used for three purposes: to pass a provider request to independent NIS2 providers when you consent, to answer a message or correct a page, and to send the newsletter to readers who subscribe. The three purposes, one per form, are listed below.
- Provider request: the description, the scope details and your contact details go to providers who work on the service you describe, so that they can contact you.
- Contact message: the editorial team reads it, replies to the address you give and corrects the page where a primary source confirms an error.
- Newsletter: the subscribed address receives the newsletter and nothing else.
No form promises a reply time, a number of provider offers or legal advice.
When a Request Goes to Independent Providers
A provider request goes to independent NIS2 providers who work on the service you describe, and only after you tick the consent box on the form; without that consent it stays with the editorial team. You can withdraw consent by writing to editorial@nis2guide.net before the request is passed on, and the request then goes no further. The providers concerned are consultants, auditors, training providers, ISMS and GRC software vendors and managed security service providers.
No provider is named on this page, because the site names, ranks and recommends no provider anywhere. Requests go to independent providers. No company pays for placement; see our editorial policy.
Data That Is Never Passed On
Contact messages, corrections and newsletter addresses stay with the editorial team and are never passed to providers. A message sent through the contact form or to editorial@nis2guide.net is answered by the editorial team, even when it describes a NIS2 need. Only a provider request with a ticked consent box leaves the editorial team.
No Analytics, No Advertising, No Tracking Cookies
nis2guide.net runs no analytics service and no advertising network, so no analytics or advertising cookie is set when you read a page. No page carries advertising, and no page is sponsored by a provider or a vendor. If the site ever adds an analytics service or an advertising vendor, this notice changes first and names that vendor before it is used.
Where the Site Is Hosted and How Data Is Protected
The site is hosted on Cloudflare, and form submissions are stored in a database on the same platform that only the editorial team can read. Every page is served over HTTPS, so the data you type into a form travels encrypted between your browser and the site. The form endpoints accept submissions only: they never display stored data, and their error messages never reveal what another reader has sent.
How Long Data Is Kept
Provider requests and contact messages are kept for 24 months, and a newsletter address is kept until you unsubscribe. You can ask for earlier deletion at any time, and the editorial team then deletes the submission before the 24 months end.
Your Data Protection Rights
You can ask nis2guide.net at any time to show you the data it holds about you, to correct it, to delete it, to stop passing it on, or to give you a copy, and the site handles these requests as the General Data Protection Regulation, Regulation (EU) 2016/679, provides. Send the request to editorial@nis2guide.net or through the contact form from the address you used. The regulation has applied since 25 May 2018 (Article 99(2)); its text is published on EUR-Lex. The five requests and their articles are listed below.
- See your data: the right of access (Article 15).
- Correct your data: the right to rectification (Article 16).
- Delete your data: the right to erasure (Article 17).
- Withdraw consent to passing a provider request on: possible at any time (Article 7(3)).
- Receive a copy of the data you provided: the right to data portability (Article 20).
Name the form you used and the date you sent it, so that the editorial team finds the submission without asking you for further data.
Leaving the Newsletter
Send an email to editorial@nis2guide.net from the subscribed address, and the address is removed. Until then the address is used only to send the newsletter, never for provider requests or other mailings.
Changes to This Privacy Notice
When this notice changes, the date at the top of the page changes with it. A new vendor or a new kind of receiver appears in this notice before it takes effect, so the notice always names every party that receives form data. Who publishes the site and how it is run is set out on the page about NIS2 Guide.