Privacy Policy

This Privacy Policy explains how Gelderblom Web & Media Consultancy ("Gelderblom", "we", "us" or "our") collects, uses and protects personal data when you visit our website or get in touch with us. We are committed to handling your information transparently and in accordance with the EU General Data Protection Regulation (GDPR) and applicable Dutch law.

1. Who we are

Gelderblom Web & Media Consultancy is a web and media consultancy based in Rotterdam, the Netherlands, and also operating from Malta. For the purposes of the GDPR, we are the data controller for the personal data described in this policy.

• Business name: Gelderblom Web & Media Consultancy
• Location: Rotterdam, Netherlands & Malta
• Chamber of Commerce (KvK) number: [KvK number]
• Contact: info@gelderblomconsult.eu

2. What data we collect

We only collect the personal data you choose to give us, plus a limited amount of technical data that is standard to operating a website.

Information you give us

When you complete the contact form on our website, we collect:

• Your name;
• Your email address;
• The service you are interested in (selected from a list);
• The message and any project details you provide.

If you email or call us directly, we will also process whatever information you choose to include in that communication.

Information collected automatically

Like most websites, our hosting provider may automatically log basic technical information such as your IP address, browser type and the pages you visit. This is used for security and to keep the website running reliably. We do not use this data to identify you personally.

3. How and why we use it

We use the personal data we collect to:

• Respond to your enquiry and correspond with you about your project;
• Provide quotes and deliver the services you ask for;
• Maintain records of our communications and business relationship;
• Keep our website secure and protect against spam and abuse;
• Comply with our legal and accounting obligations.

We do not sell your personal data, and we do not use it for automated decision-making or profiling.

4. Legal basis for processing

Under the GDPR, we rely on the following lawful bases:

• Consent: when you submit the contact form, you consent to us using your details to reply to you. You can withdraw consent at any time.
• Performance of a contract: where we are providing services to you or taking steps at your request before entering into a contract.
• Legitimate interests: to run and secure our website and to manage our business relationships, provided your rights do not override those interests.
• Legal obligation: where we must keep certain records (for example, for tax and accounting).

5. Sharing & processors

We keep your data confidential and only share it where necessary to operate our business. This may include trusted third-party service providers ("processors") who act on our behalf, such as:

• Our website hosting and email provider, who transmit and store contact-form submissions and correspondence;
• Professional advisers (for example, accountants) where required.

Contact-form enquiries are delivered to us by email and may be received in a standard email inbox (such as Gmail). We do not transfer your personal data outside the European Economic Area (EEA) unless a provider does so under appropriate safeguards permitted by the GDPR. We may also disclose data where required by law.

6. How long we keep data

We keep personal data only for as long as necessary for the purposes set out above. Enquiry correspondence is generally kept for as long as needed to handle your request and to maintain a reasonable record of our business relationship, after which it is deleted. Where the law requires us to retain certain records (for example, financial records), we keep them for the legally required period.

7. Cookies & analytics

Our website is intentionally lightweight. We do not use tracking cookies or third-party advertising cookies. We load web fonts from Google Fonts, which may involve your browser contacting Google's servers to retrieve those fonts. If we introduce analytics or other cookies in the future, we will update this policy and, where required, ask for your consent first.

8. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase your data ("right to be forgotten");
• Restrict or object to our processing;
• Data portability: receive your data in a portable format;
• Withdraw consent at any time, without affecting prior lawful processing.

To exercise any of these rights, contact us at info@gelderblomconsult.eu. We will respond within one month.

9. Security

We take reasonable technical and organisational measures to protect your personal data against loss, misuse and unauthorised access, including encrypted connections (HTTPS) on our website and secure transmission of contact-form messages. No method of transmission over the internet is completely secure, however, and we cannot guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The "last updated" date at the top of this page shows when it was last revised. We encourage you to review it periodically.

11. Contact & complaints

If you have any questions about this policy or how we handle your data, please contact us at info@gelderblomconsult.eu.

You also have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), if you believe your data has not been handled in accordance with the law.