Legal

Privacy policy

Last updated: 15 June 2026

A privacy policy explains, in plain language, which personal data we collect from you, why, how long we keep it and what rights you have. We keep it as short and honest as possible — no fine print to hide anything.

Who is responsible for your data?

The data controller for the data collected through this website is:

What data do we collect?

The only form on this website is the contact form. If you fill it in, we process:

• your name;
• your email address;
• your company name (optional);
• the content of your message.

We use this data for one purpose: to get in touch in response to your message and, where relevant, to send a no-obligation quote or proposal. We don't use your data for advertising and we never sell it to third parties.

Our hosting provider also processes some standard technical data (such as your IP address) to keep the website secure and available. That's normal web traffic and we don't link it to you as a person.

Why are we allowed to? (legal basis)

We process your data on two GDPR grounds:

• Performance of (or steps towards) a contract — you get in touch because you may want to work with us;
• Legitimate interest — we may reasonably respond to a message you send us yourself, and keep our website secure.

How long do we keep your data?

We keep the data from your contact message for up to two years after our last contact, so we can pick up an ongoing conversation properly. After that we delete it, unless we are legally required to keep it longer — think of the seven-year Dutch tax retention obligation for invoices and records.

Who do we share data with?

We use a few suppliers that process data on our behalf (processors):

• Netlify — hosts the website and handles contact-form submissions. A data processing agreement applies with Netlify. Processing may partly take place outside the EU; appropriate safeguards (standard contractual clauses) apply for that.
• Fonts and icons are loaded locally from our own server (self-hosted). No data is sent to external font services such as Google Fonts.

Otherwise we share your data with no one, unless we are legally obliged to.

Data inside AI solutions we build for clients

If you later have us build an AI solution or custom software, stricter rules apply to the data processed inside it, which we record separately:

• data stays within the European Union;
• data is not used to train AI models;
• we sign a separate data processing agreement with you for this, tailored to your situation.

What rights do you have?

Under the GDPR you have the right to:

• access your data;
• have incorrect data corrected;
• have your data erased;
• restrict processing;
• object to processing;
• transfer your data (data portability).

You also have the right to lodge a complaint with the supervisory authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). We'd of course rather hear it from you first, so we can sort it out together.

Making a request or asking a question

Send an email to info@nklaassens.nl. We'll respond as quickly as possible, and at the latest within the statutory four-week period.

Changes

We may update this privacy policy, for example when we start using new tools. The most current version is always on this page; the date at the top shows when we last updated it.