Privacy policy

This privacy policy explains which personal data Marijn Herrebout processes when you visit this website or use the contact form, why it is processed, how long it is kept and which rights you have.

1. Who is responsible

Marijn Herrebout is responsible for processing personal data on this website. For questions or requests about your data, contact [email protected] or call 06 21137400.

2. Which data is processed

When you visit the website, the server receives technical request data, including your IP address, the time of the request, the requested address and browser information. The hosting provider may process this data to operate and secure the website; any server logs and their retention period depend on the hosting configuration.

If you use the contact form, we process the information you enter:

• name and email address;
• phone number, if provided;
• subject and message.

The system also uses your IP address temporarily to prevent misuse, such as spam and repeated submissions. This address is not stored in the message archive.

Only if you consent, the website processes pseudonymous analytics data: random visitor and session IDs, public pages visited, referring domain, active time and scrolling, broad device, browser and operating-system categories, and technical performance measurements. A country category may also be processed if the hosting configuration uses a trusted proxy for it. Clicks are stored only as a category or permitted public page path (such as phone, email, external link or an internal page); phone numbers and email addresses are not stored as click data. Error events contain no error message or form contents.

Analytics IDs do not directly identify you, but they make visits from the same browser recognisable while an ID remains valid. The analytics database does not store IP addresses, full user-agent strings, query strings, form values or message contents. This website has no accounts or sign-ups.

If you email or call me, you communicate through your own email or telephone service; that communication is not submitted through a form on this website.

3. Why and on what basis

Technical request data is processed on the basis of our legitimate interest in keeping the website available and secure. Information you provide in a message is used to respond to you. We rely on the need to handle your request and our legitimate interest in preventing misuse when processing contact messages.

Analytics is used only after you give consent, to understand and improve the use and performance of the website. We do not use data for advertising, marketing profiles, fingerprinting, session replay or tracking across websites.

4. How long data is kept

Contact-form messages are automatically deleted no later than one year after receipt, unless deleted earlier. The IP address used to prevent misuse is kept only briefly.

Copies of email notifications in our inbox or with an email provider are not removed by the website's automatic deletion and may have a different retention period.

Detailed analytics data is deleted after 90 days. Backups may retain copies for up to 14 additional days. Any technical server-log retention period is determined by the hosting configuration.

5. Sharing data

The hosting provider processes technical data to operate the website and may have access to data stored on the server. Analytics data is held in this website's database and may be included in normal server backups. Personal data is not sold.

For the contact form, Cloudflare processes the submitted details to send an email notification; our email provider also processes that notification. These providers may process data outside the European Economic Area. If you follow an external link, the destination website receives data associated with your visit there, such as your IP address and the requested page. Its own privacy policy applies. Data is also shared when legally required.

6. Cookies and analytics choices

The first-party ra_consent cookie remembers your analytics choice. This necessary preference cookie lasts up to one year, including when you decline analytics. Analytics cookies are set only after you consent: ra_visitor (up to 90 days) and ra_session (30 minutes). These HttpOnly cookies contain random IDs used for the pseudonymous measurements described above.

The private admin area also uses the necessary first-party sid cookie for the administrator session and protection of admin forms. It is scoped to /admin and expires after up to two hours; it is not used to track website visitors.

You can decline or withdraw consent using the Privacy settings button at the bottom right of the page. Withdrawal stops measurement and deletes analytics data associated with your current visitor ID. Do Not Track and Global Privacy Control are respected; analytics is disabled when either is enabled. No visitor or session IDs are created for analytics without consent.

7. Security

The website uses HTTPS and limits access to stored data to people who need it. The hosting provider processes technical data to operate the website. The contact form also has measures against spam and repeated submissions.

8. Your rights

You can request access to, correction or deletion of your personal data, ask for processing to be restricted, or object to processing. Send a request to [email protected] or call 06 21137400. A reply follows within one month.

9. Complaints

You may complain to your national data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

10. Changes

This privacy policy may be updated when the website or its data processing changes. The most recent version is on this page.