1. Our commitment
Arteco NV takes the security of its systems, and of the information entrusted to it by customers and partners, seriously. If you believe you have found a security vulnerability in a system or service of Arteco NV, we want to hear from you. This statement explains how to report it, what we ask of you and what you can expect from us.
It applies to the systems and services of Arteco NV that can be reached from the internet, including the websites under arteco-coolants.com. A vulnerability in a product or service of one of our suppliers should also be reported to that supplier.
2. How to report
Send your report by email to itsupport[@]arteco-coolants.com. Please include:
- a description of the vulnerability and where you found it: the system, address or URL concerned;
- the steps needed to reproduce it, with any proof of concept;
- the date and time you found it;
- how we can contact you. You may report anonymously, but we will then be unable to keep you informed.
Reports may be written in English, Dutch or French. You may also report a vulnerability to the Centre for Cybersecurity Belgium (CCB), which coordinates vulnerability disclosure in Belgium. If you wish to rely on the Belgian legal framework for reporting vulnerabilities, you must meet its conditions, which are explained on the website of the CCB.
3. What we ask of you
- Act in good faith, with the sole aim of finding and reporting the vulnerability.
- Do no more than is needed to demonstrate the vulnerability. Do not access, copy, change or delete data beyond that, and stop and tell us as soon as you encounter personal or confidential data.
- Do not disrupt our services: no denial-of-service tests, no phishing or other social engineering of our staff, no attempts to enter our premises, and no testing of laboratory or production equipment.
- Do not install malware or leave anything behind in our systems.
- Allow us a reasonable amount of time to assess and resolve the vulnerability before making any information public.
- Do not test systems that belong to third parties.
4. What we do
- We will let you know when we have received your report.
- We will give you an estimate of the time needed to assess and, where applicable, resolve the vulnerability.
- We will keep you informed of our progress and will let you know when the vulnerability has been resolved or the report has otherwise been closed.
- We treat your report and your contact details as confidential and do not share them without your consent, unless the law requires us to.
- If you wish, we name you as the finder when the vulnerability is published.
5. No legal action for good-faith reports
If you act in good faith and follow the rules in this statement, Arteco NV will not take legal action against you and will not file a complaint about your research. This commitment covers only the systems of Arteco NV. It cannot bind third parties or the authorities.
6. No reward
Arteco NV does not run a bug bounty programme and does not pay for reports. We do not respond to demands for payment in exchange for information about a vulnerability.
Last updated: November, 2026