Privacy statement
In short: I keep as little as possible, and I don’t sell anything. Below you can read what I keep, why, and for how long.
What I keep
| When | What data | What for | How long |
|---|---|---|---|
| You email or call me | Your name, email address or phone number, and what you tell me about your idea | To answer your question and, if you like, put together a proposal | 2 years after we last spoke |
| You become a client | Your name, company details, address, and what’s on the quote and invoice | To do the work and send the invoice | 7 years, as Dutch law requires |
| You accept cookies | Which pages you view, your device and browser, your country or region, and a cookie with a random number | To see which pages people read, so I can improve the site | 2 months |
| You visit this site | Your IP address, the time, and which page you request (the server log) | To keep the site secure and online | TODO |
| You pick a theme or cookie preference | Your choice: light or dark, cookies or no cookies | So the site remembers your choice. It stays in your own browser; I never see it | Until you clear your browser data |
Why I’m allowed to
The GDPR lists a few reasons for using personal data. These are mine:
- Answering your question: you got in touch and expect a reply. That’s a legitimate interest.
- Doing the work: it’s needed for our agreement. Keeping invoices is a legal obligation.
- Google Analytics: only with your consent. Without it, Google Analytics doesn’t load.
- The server log: a legitimate interest, to spot and stop misuse.
Cookies
This site doesn’t set any cookies of its own. Only if you click “Accept” does Google
Analytics load. It sets two cookies: _ga and _ga_1YJB7B5JDD.
They remember that you’ve visited before and last up to 2 years.
You can change your mind at any time. If you withdraw consent, I remove the cookies.
Google Analytics
Google Analytics shows me how many people visit the site and which pages they read. It doesn’t tell me who you are. This is how I’ve set it up:
- I have a data processing agreement with Google.
- Google may not use the data for its own purposes: “data sharing” is switched off.
- Google Analytics doesn’t store your IP address.
- The data is deleted after 2 months.
Google may process data in the United States. Google takes part in the EU-US Data Privacy Framework, which makes this allowed under European rules.
Who I share your data with
I never sell your data. A few companies process it for me, under agreements on how they handle it:
- TransIP, which runs my email;
- the company that hosts this website;
- Google, for Google Analytics (only with your consent).
Otherwise I only pass on your data when the law requires it, for example to the tax authorities.
Security
The site uses an encrypted connection (https). I only keep your data in places protected by a password, and nobody else has access to them.
Your rights
It’s your data. You can:
- ask which data I have about you;
- have data corrected if it’s wrong;
- have data deleted, unless the law says I have to keep it;
- object to how I use it;
- get a copy of your data to give to someone else;
- withdraw your consent for cookies.
Email me with what you’d like. You’ll get an answer within a month. Sometimes I’ll first ask you to show that the data really is yours.
Complaints
Not happy with how I handle your data? Let me know first and we’ll sort it out together. You can also file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.
Who I am
This site belongs to Protoconcept, the company of Kevin Assen. I’m responsible for what happens to your data.
Protoconcept
TODO: address
Chamber of Commerce TODO
+31 6 811 613 23
Changes
If anything changes in how I handle data, I’ll update this statement. The date at the top shows when that last happened.