Terms of use
These terms cover the website, not the service agreement
Two documents with two different jobs. This page governs what you are reading now. What we deliver, what it costs and what we are liable for is settled in an agreement you sign, not on a web page.
What this page is
These terms apply to the website, and only to the website
By using thinksmart.eu you accept the terms on this page. They cover the pages, the NIS2 check, the downloads and the contact forms.
They do not govern any service we deliver. Those run on the NLdigital Terms of Delivery and a signed service agreement, with a data processing agreement alongside it where we process personal data for you.
If this page and your agreement say different things, your agreement wins. We send that agreement with the quotation, so the limitation of liability is something you read before you sign rather than something you look for afterwards.
Which document governs what
Four documents, and the order they apply in
Procurement departments ask this first, so it is worth answering plainly rather than in a cross-reference.
| What it covers | Which document applies | Where you get it |
|---|---|---|
| Use of this website | These terms of use | This page |
| Personal data collected through this website | Our privacy statement | Published on this site |
| Cookies and consent | Our cookie statement | Published on this site |
| Delivery of a service | NLdigital Terms of Delivery | Sent with the quotation |
| Scope, service levels and liability | Your signed service agreement | Sent with the quotation, before signature |
| Personal data we process for you | The data processing agreement | Provided alongside the service agreement |
| A conflict between any of the above | The signed service agreement takes precedence | Held by both parties |
The NLdigital Terms of Delivery are the sector terms published by NLdigital, the Dutch trade association for the technology sector. We send the applicable version with every quotation and file it with the agreement, so nobody has to go and find it.
Information, not advice
Nothing on this site is legal advice, and none of it is a live feed
The regulatory pages describe how we read NIS2 and the national laws that implement it. They are written to be useful before a conversation, not to replace one.
The NIS2 check gives you an indication from a handful of questions; it does not classify your organisation. The transposition table records what we believe each national law said on the date printed under it.
Classification follows national law, per entity. Two companies in the same group and sector, established in two member states, can land in different categories, and only each country's competent authority settles it. That is why we scan per country rather than publishing one answer for Europe.
We review the transposition tracker monthly and every page carries the date it was last updated. Between two reviews a law can be amended and a deadline can move, so a page can be accurate on the day it was reviewed and wrong on the day you read it. If you find something out of date or simply wrong, write to info@thinksmart.eu and name the page. We correct it and change the update date.
What belongs to whom
The words and the brand are ours. The vendor logos are not.
The text, the images, the page designs and the Think Smart Europe and SmartCyber names belong to Think Smart Europe B.V. or to parties we licence them from. You may read the site, print a page and quote from it with attribution and a link. You may not republish a page as your own, and you may not use our marks to suggest a relationship that does not exist.
Vendor names and logos belong to their owners. They appear here to identify the platforms we implement and operate, and their presence does not imply an endorsement. If you hold one of those marks and want its use here changed, write to info@thinksmart.eu and we will act on it.
The site links out to regulators and to other third-party pages. We check a link when we publish it and we do not control what happens to it afterwards, so a page that is not ours is not our responsibility.
Responsible disclosure
If you find a weakness here, we want to hear about it first
A security company that is hard to report a vulnerability to has a problem worth reporting. This is the route in, what counts as in scope, and what we commit to in return.
Our policy and contact details are published at /.well-known/security.txt, in the RFC 9116 format. The address is security@thinksmart.eu. Encrypt with the key named in that file if the finding is sensitive.
In scope. thinksmart.eu and its subdomains, the contact and NIS2 check endpoints behind them, our mail configuration, and any of our own systems you reach from there.
Out of scope. Anything belonging to a client, a partner or a supplier, and anything hosted by a third party we do not control. Also out of scope: scanner output with no demonstrated impact, and a missing header with no exploit path.
What we ask. Tell us before you tell anyone else, and give us a reasonable period to fix it. Use the least access needed to demonstrate the issue. Do not alter or delete data, do not degrade the service for anyone else, and do not run denial-of-service tests or social engineering against our people.
What we commit to. We acknowledge a report within one business day, and we tell you what we did with it. We credit you by name if you want that and leave it out if you do not. We will not take legal action against anyone who stays inside this policy and acts in good faith, and we will not ask anyone else to.
There is no bug bounty and we do not pay for reports.
Availability
This website carries no uptime guarantee
We do not promise the site stays up. Pages change, move and are withdrawn. We may take the site down for maintenance, and we may restrict or withdraw a feature, the NIS2 check included, without notice.
None of that touches our service levels. Those are contractual, they are measured, and they sit in your service agreement, including the response commitment on priority alerts. This page is about the website.
Law, jurisdiction and identity
Dutch law applies, and a dispute goes to Amsterdam
These terms are governed by Dutch law, and a dispute about them or about the use of this site goes to the competent court in Amsterdam. That does not remove a consumer's right to bring a case in the country where they live.
We can change these terms. The version on this page is the one that applies.
This site is published by Think Smart Europe B.V. in Amsterdam. Part of our delivery capacity sits with our parent organisation in Bulgaria, in Sofia, Varna and Stara Zagora, inside the European Union and under the same management systems. Which entity does what is named in the service agreement.
Think Smart Europe B.V. Vijzelstraat 68, 1017 HL Amsterdam, the Netherlands Telephone +31 (0)20 210 1552 Enquiries and corrections: info@thinksmart.eu Security findings: security@thinksmart.eu
Our Chamber of Commerce and VAT numbers appear on our invoices and in the service agreement. They appear here as soon as they are verified.
If something on this page is wrong, tell us
Questions about these terms go to info@thinksmart.eu. Security findings go to security@thinksmart.eu, which is read by people who can act on them.