Privacy policy

Who is responsible

Vanpey, a sole proprietorship in Maastricht, the Netherlands, KvK (Chamber of Commerce) 94132054, Heugemerstraat 223, 6229 AP Maastricht, info@vanpey.nl. Vanpey is responsible for processing personal data as described in this policy.

What data, and why

• Contact form and email. Your name, email address, optionally your company name and budget, and your message. I only use them to answer your question and, if we work together, to handle a quote or project. Legal basis: preparing or performing a contract (Art. 6(1)(b) GDPR), or my legitimate interest in replying to you (Art. 6(1)(f) GDPR).
• Projects and invoices. The name, address and payment details needed for invoicing. Legal basis: performing the contract and the legal duty to keep records (Art. 6(1)(b) and (c) GDPR).
• Technical data. The hosting provider logs your IP address and browser details on every visit, to keep the site secure and available. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

Cookies and statistics

This website sets no cookies and uses no analytics or advertising tools. Fonts are served from the same server as the site, so no data goes to Google or anyone else. The example websites under Work are concept projects; anything you type there is not sent anywhere.

Who I share data with

• Netlify hosts this website and processes the contact form. Netlify is a US company that takes part in the EU-US Data Privacy Framework.
• Apple (iCloud Mail) processes email sent to info@vanpey.nl.
• An accountant or the Dutch tax authority, when the law requires it.

I never sell your data and don't share it for marketing.

How long I keep data

• Messages that don't lead to a project: up to 12 months.
• Project and invoice records: 7 years, as Dutch tax law requires.
• Server logs: as long as the hosting provider keeps them, usually a few weeks.

Your rights

You can ask to see, correct or delete your data, restrict or object to how it is used, or ask for a copy to take elsewhere. Email info@vanpey.nl; you'll get an answer within a month. If you disagree with how I handle your data, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority in your own country.

Security

The whole site runs over an encrypted connection (https). I keep data in accounts protected by a strong password and two-step verification.

Changes

If anything changes in how I handle data, I update this policy. The date at the top shows when that last happened.