Privacy statement

Casper Hollemans, trading as caspersoftware.nl, is the data controller for the personal data that comes in through this site. Registered with the Dutch Chamber of Commerce (Kamer van Koophandel) under number 93006764. You can reach me via the contact details at the bottom of this page.

This site places no cookies and uses no analytics or tracking software. Nothing is stored in your browser, and your behaviour on the site is not measured or profiled.

Every part of the site — images, styles and the typeface — is loaded from the domain itself. Viewing a page therefore sends no request at all to a third party, and your IP address ends up nowhere other than with the hosting provider that serves the page. If you submit the contact form, that is different; that is described below.

If you fill in the contact form, I process your first name, last name, e-mail address, the subject you selected and the content of your message. Only your e-mail address and the subject are required; the rest you fill in if you want to.

I use that data solely to answer your question and, if an assignment comes out of it, to stay in touch with you. The legal basis is the performance of, or preparation for, a contract, or my legitimate interest in being able to respond to a question.

Sending runs via Web3Forms, a service of Web3Creative, which receives the submission and forwards it to me by e-mail. Web3Creative acts as a processor under a data processing agreement. For storage and delivery it in turn engages AWS, Cloudflare and Hetzner, and for spam filtering CleanTalk and Akismet. Those last two receive your IP address and e-mail address in the process — that is needed to recognise automated submissions.

The form also contains a hidden field that only bots fill in; submissions in which that field has been filled are rejected.

Web3Creative operates from India, and the spam filters CleanTalk and Akismet are based in the United States. Data from the contact form may therefore be processed outside the European Economic Area. Those transfers are covered by the European Commission’s standard data protection clauses (Standard Contractual Clauses), which form part of the data processing agreement.

If you would rather avoid that, send a plain e-mail or call me. No form service is involved then.

The "Book an intro call" buttons lead to my calendar at Google Calendar. If you book an appointment there, Google processes the data you enter in that booking form — usually your name, e-mail address and the time you chose. Google’s privacy policy applies to that.

You do not have to use that route: e-mailing or calling works just as well.

The site is hosted on Cloudflare Pages. Like every web server, Cloudflare records technical data about incoming requests, including IP address, time, page requested and browser type. That happens in order to deliver the site and protect it against abuse, and those logs are short-lived.

Messages that do not lead to an assignment I keep for a maximum of twelve months, so that I can look up an earlier conversation if you get in touch again. After that I delete them.

If your message does lead to an assignment, I keep the related correspondence for as long as the assignment requires. Records subject to a statutory tax retention obligation I keep for seven years.

Separately from that, Web3Forms holds a submission in its own systems for a maximum of three years. That is independent of what I keep: even if I have already deleted your message, it may still be there. If you want it gone there too, let me know and I will file that request with them.

I do not sell your data and do not use it for marketing. It is only processed by the parties listed above: Web3Creative with its own sub-processors for sending the form, Google for the calendar and for my business e-mail via Google Workspace, and Cloudflare for the hosting of this site. Beyond that, I only share data where the law obliges me to.

You may ask what data I hold about you, have it corrected or have it deleted, and object to the processing. Send a message to the e-mail address below; I respond within four weeks.

If you disagree with how I handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

The site is reachable over HTTPS only and sends security headers that determine what a page may load and where a form may post to. If you do come across something that is not right, let me know — I appreciate it.

If something does go wrong with your data, I report it within 72 hours of becoming aware of it, to you and where necessary to the Dutch Data Protection Authority. The same deadline is contractually agreed with the parties that process on my behalf.