Privacy policy

Rodin de Grood values your privacy. This statement explains which personal data I process, why, and what rights you have.

Data controller

Rodin de Grood is responsible for processing personal data as described in this statement.

• Name: Rodin de Grood
• Place of business: Zoetermeer, the Netherlands
• Chamber of Commerce: 42100426
• Email: contact@rodindegrood.nl

Which data I process

When you fill in the contact form or email me, I process:

• your name;
• your email address;
• (optional) your company name;
• the service you are interested in;
• the content of your message.

On top of that I process data you provide yourself as part of an assignment or collaboration (invoicing and contact details, for example).

When you visit the website, technical data such as your IP address and browser information is processed too. The hosting provider records that in server logs, for the security and proper functioning of the site.

Purpose and legal basis

I use your data to:

• respond to your message and stay in touch with you;
• draw up a quote and carry out an assignment;
• keep the website secure and working properly;
• comply with legal obligations, such as the tax retention requirement.

The legal bases for this are the performance of a contract, my legitimate interest (to respond to your question and secure the site), and compliance with a legal obligation.

Retention periods

I do not keep your data longer than necessary. Messages sent through the contact form are kept for as long as needed to handle your question and follow up on any collaboration. Records and invoices are kept in line with the statutory seven-year tax retention period.

Sharing with third parties

I do not sell your data. I do work with service providers who process data on my behalf (processors):

• Netlify: hosting of the website and processing of the contact form (Netlify Forms).
• Strato: email hosting for my business email.

Data processing agreements have been concluded with these parties where required. Data is only shared with others when that is necessary for performance or legally required.

Processing outside the EEA

Netlify is based in the United States. Where personal data is processed outside the European Economic Area, that happens on the basis of appropriate safeguards, such as the European Commission’s standard contractual clauses (SCCs).

Cookies

This website places no tracking or marketing cookies by default. Only technically necessary data needed to display the site is processed.

Security

I take appropriate technical and organisational measures to protect your data against loss or unlawful use. The website is served encrypted over https, and access to your data is limited to what is necessary.

Your rights

You have the right to:

• access your data;
• have your data corrected or deleted;
• have the processing restricted;
• object to the processing;
• have your data transferred (data portability);
• withdraw consent you have given.

Send an email to contact@rodindegrood.nl for any of these. I respond within one month. You also have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Changes

I may amend this privacy policy. The most current version is always on this page, with the date of the latest change at the top.

---

Questions about your privacy? Feel free to get in touch.