Controller identity & privacy requests
This website uses the trading name websiteredesign.nl. The legal entity, registered business address, Chamber of Commerce number and verified privacy contact must be confirmed before this policy is final. Do not send identity documents or sensitive information through the inquiry form. The Contact page currently contains unverified example business details.
What information is collected
Inquiry forms collect your name, business email, website URL, selected service or message, and any company name or optional phone number you provide. A submission timestamp and identifier are stored with the inquiry. We do not intentionally ask for special-category personal data. Hosting infrastructure may process IP addresses and technical request information to deliver and secure the website; IP addresses are not stored in the inquiry table.
Purposes & lawful bases
Inquiry details are used to respond to your request and discuss an audit, proposal or service. Processing necessary to take steps at your request before a contract may rely on GDPR Article 6(1)(b). Business-to-business correspondence and abuse prevention may require a documented legitimate-interest assessment under Article 6(1)(f). Statutory records may rely on a legal obligation. The controller must confirm which basis applies to each real activity; submitting an inquiry is not consent to marketing.
Retention & deletion
A fixed inquiry retention period has not yet been supplied and automatic deletion is not configured. The controller must set and implement a proportionate retention schedule before launch, including deletion of unsuccessful inquiries and handling of backups. Contract and accounting records may have different statutory requirements. Do not interpret this draft as a promise that records are automatically removed after an invented number of days.
Processors, hosting & international transfers
The website uses Lovable Cloud to store inquiries. The controller must verify the applicable hosting providers, processing agreements, subprocessor list, storage regions and any international-transfer safeguards. Microsoft Clarity is installed for optional heatmaps and session recordings. It loads only after fresh analytics consent and shares usage data with Microsoft; advertising storage is denied. Clarity may use _clck and _clsk cookies after acceptance. You can reject or withdraw consent through Cookie Preferences; withdrawal stops Clarity and reloads the page. Microsoft’s privacy statement is available at https://privacy.microsoft.com/privacystatement. The controller must verify Clarity processing terms, retention settings and international-transfer safeguards. Owner notification emails are not enabled. If a new processor or tracking tool is added, this notice and the consent request must be updated before it processes visitor data.
Your AVG/GDPR rights & device preferences
Subject to the applicable conditions, you may request access, correction, deletion, restriction, portability or object to processing. Consent can be withdrawn without affecting prior lawful processing. Identity verification must be proportionate. You may complain to the Dutch Autoriteit Persoonsgegevens. The usual response period is one month, with lawful extensions where applicable. A verified privacy-request address is still required before publication. Cookie Preferences in the footer reopens your choice; local storage holds cookie_consent as accepted or rejected and cookie_consent_version records which analytics disclosure you accepted, alongside the language preference. No optional tracking starts merely because you visit the site.