Privacy policy

This English version is a translation for your convenience. If the two versions differ, the German version applies.

Who is responsible

The controller responsible for processing your personal data on this website is:

Please send any questions about data protection straight to me. You will be talking to the same person who processes your data.

Moving to Switzerland: From 1 March 2027 based on Lake Zurich's Obersee (canton of Schwyz). Until then I work from the Netherlands and meet clients by video or in person when I visit. From 1 March 2027, the controller will be my business in Switzerland, and I will update this policy accordingly.

As my business is currently based in the Netherlands, the EU General Data Protection Regulation (GDPR, in Dutch: AVG) applies to everything described on this page. If you visit from Switzerland, the Swiss Federal Act on Data Protection (FADP, known in German as nDSG or revDSG) protects you as well.

When you visit this website

When you open a page, your browser automatically sends some technical details to the server. The hosting provider records them in log files:

• the IP address of your device
• the date and time of the visit
• the page you opened and the amount of data transferred
• the website you came from, if your browser passes this on
• your browser and operating system

Why: to keep the website running, to find errors and to fend off attacks. I do not analyse this information to identify you as a person, and I do not combine it with other data.

Hosting provider: Railway Corporation, USA (data centre in the EU West region, Amsterdam, Netherlands). Log files are kept for: at most 90 days, after which Railway deletes them automatically.

No cookies, no tracking

This website sets no cookies and stores no data about you in your browser. There are no visitor statistics, no advertising pixels and no profiles. That is why you do not see a cookie banner.

Fonts, images and graphics are stored on this website itself. Your browser loads them from here and does not connect to Google or any other third party to do so.

If that changes, for example through visitor statistics without cookies, I will update this policy before the change goes live.

Contact form and e-mail

When you write to me through the contact form, I process these details:

• your name and e-mail address
• your company and phone number, if you give them (optional)
• your message, the topic you chose and, if you came from a pricing page, the package and extras you selected

Why: to answer your enquiry, arrange a time for the first call and send you a quote. Nothing else. You will not end up on a newsletter, and I do not pass your details on.

How your message reaches me: the form sends your details to me as an e-mail. To send it, I use a service called Resend (Resend Inc., USA). The e-mail arrives in my mailbox at [Enter e-mail provider].

To protect against spam, the server keeps track of how often messages are sent from your IP address. This is held only in the server's working memory, is never stored permanently and disappears at the latest when the server next restarts. If a technical error occurs while sending, the server log may contain your e-mail address, so that I can still get back to you.

If you write to me directly at [email protected] or give me a call, the same applies: I use your details only to deal with your request. For messages on WhatsApp, see the WhatsApp section below.

Legal basis (GDPR): steps towards a possible contract at your request (Art. 6(1)(b)), otherwise my legitimate interest in answering your enquiry (Art. 6(1)(f)).

WhatsApp

You can also write to me on WhatsApp: through the button at the bottom right of every page, the buttons on the contact and imprint pages or the link in the footer. These are plain links. No WhatsApp code is embedded in this website, and as long as you do not click, WhatsApp learns nothing about your visit. Clicking sends no data to this website. It only opens WhatsApp, in the app or in your browser, with a short greeting already filled in. Your message only reaches me once you send it yourself.

If you write to me on WhatsApp, WhatsApp Ireland Limited (Merrion Road, Dublin 4, Ireland) and its parent company Meta Platforms Inc. (USA) process your phone number, your profile name, the content of your messages and metadata such as when a message was sent. They do this under their own responsibility and according to WhatsApp's privacy policy. Your data may be transferred to the USA. Meta is certified under the EU-U.S. Data Privacy Framework. [Check whether Meta is also certified under the Swiss-U.S. Data Privacy Framework]

Why: to answer your enquiry and, if it turns into a project, to coordinate it with you. Legal basis (GDPR): steps towards a possible contract or carrying out our contract (Art. 6(1)(b)), otherwise my legitimate interest in answering your enquiry (Art. 6(1)(f)).

I keep our chat only as long as I need it for your enquiry or our project and then delete it (see How long I keep data).

Prefer not to use WhatsApp? Simply write to me at [email protected] or use the contact form. You will get the same reply.

When I contact you

I also approach businesses in the region myself, by e-mail, phone or LinkedIn. I write every message individually and never send mass e-mails. I do not call numbers that are unlisted or marked with an asterisk in the Swiss phone directory (the sign that someone does not want marketing calls).

For this, I use business contact details from public sources: company websites, the Swiss commercial register (zefix.ch), phone directories such as local.ch and professional profiles such as LinkedIn. I store only what I need to get in touch: name, company, role, business e-mail address or phone number, and when we were in contact.

Not interested? A short ‘no, thank you’ is enough, on any channel. I respect it straight away and for good, do not contact you again and delete your data. To make sure it stays that way, I keep only a do-not-contact note with your e-mail address or phone number. I delete contacts who do not reply after 12 months at the latest.

Legal basis (GDPR): my legitimate interest in new business relationships (Art. 6(1)(f)). You can object to this at any time and without giving reasons (Art. 21 GDPR). The ‘no, thank you’ above is all it takes.

Who else sees your data

I do not sell data or pass it on for advertising. A few service providers process data on my behalf so that this website and my e-mail work. They may use the data only for me and only as I instruct:

• Hosting of this website: Railway Corporation, USA (data centre in the EU West region, Amsterdam, Netherlands)
• Sending the contact form: Resend Inc., USA
• E-mail mailbox: [Enter e-mail provider]

Only if you write to me on WhatsApp: WhatsApp Ireland Limited (Ireland) and Meta Platforms Inc. (USA). They do not work on my behalf but under their own responsibility, see WhatsApp.

If your enquiry turns into an order, your billing details go into my accounts. Authorities receive data only if the law requires me to hand it over.

Data outside the EU

My business is in the Netherlands. Switzerland recognises data protection there, as in the whole EU, as adequate. Resend is based in the USA, so your details from the contact form may be processed there. The EU only recognises data protection in the USA as adequate for companies certified under the EU-U.S. Data Privacy Framework, and Switzerland only for companies certified under the Swiss-U.S. Data Privacy Framework. For other companies, additional contracts are needed, for example standard contractual clauses recognised by the European Commission and the Federal Data Protection and Information Commissioner (FDPIC).

• Resend Inc., USA: [Check the basis: EU-U.S. and Swiss-U.S. Data Privacy Framework or standard contractual clauses]
• Hosting: Railway Corporation, USA (data centre in the EU West region, Amsterdam, Netherlands). Basis: standard contractual clauses in Railway's Data Processing Addendum.
• WhatsApp (Meta Platforms Inc., USA), only if you write to me there: Meta is certified under the EU-U.S. Data Privacy Framework. [Check whether Meta is also certified under the Swiss-U.S. Data Privacy Framework]

How long I keep data

I keep data only for as long as I need it or the law requires:

Security

The connection to this website is encrypted. You can tell by the ‘https’ in the address bar. Only I see your enquiries. I protect your data against loss and unauthorised access with appropriate measures, as data protection law requires.

Even so, there is no such thing as absolute security on the internet. So please do not send me particularly sensitive data through the form or on WhatsApp, such as health information or passwords.

Your rights

At any time, and usually free of charge, you can:

• ask which data I hold about you
• have incorrect data corrected
• have data deleted, unless the law requires me to keep it
• object to processing, for example to being contacted for marketing purposes
• receive your data in a common format

An e-mail to [email protected] is enough. I reply within 30 days, usually much sooner. So that your data does not end up with someone else, I may ask you to confirm your identity.

Complaints to a supervisory authority

If you are not happy with my reply, you can complain to a data protection authority. As long as my business is based in the Netherlands, the responsible authority is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), Postbus 93374, 2509 AJ Den Haag, Netherlands, autoriteitpersoonsgegevens.nl. If you live or work in another EU country, you can also contact the authority there.

From Switzerland, you can also contact the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch.

Legal bases under the GDPR

As long as my business is based in the Netherlands, the GDPR applies to all processing, wherever you visit this website from. It requires me to name a legal basis for each type of processing:

• Server log files: legitimate interest in a secure, working website (Art. 6(1)(f) GDPR)
• Enquiries by contact form, e-mail or phone: steps towards a possible contract (Art. 6(1)(b) GDPR), otherwise legitimate interest in answering your enquiry (point (f))
• Messages on WhatsApp: steps towards a possible contract or carrying out our contract (point (b)), otherwise legitimate interest in answering your enquiry (point (f))
• Contacting businesses: legitimate interest in new business relationships (point (f)); you can object at any time (Art. 21 GDPR)
• Keeping business records: legal obligation (point (c))

In addition to the rights listed above, you can ask me to restrict the processing of your data.

Changes

I update this policy when something changes, for example when I start using a new service provider. The version on this page applies. Who runs this website is set out in the imprint.

As of: 12 October 2026