Last updated: January 2025
This Privacy Policy explains how BVOOC collects, uses, stores, and protects your personal data. I am committed to protecting your privacy and handling your data transparently and in compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.
This Privacy Policy applies to all users, including those located outside the European Union.
The data controller responsible for your personal data is:
For any questions about this Privacy Policy or your personal data, please contact me at the email address above.
BVOOC acts as an independent data controller for its own business operations and as a data processor when providing services on behalf of clients.
I only collect data that is necessary to provide my services. Depending on our interaction, this may include:
I use your personal data exclusively for the following purposes:
| Purpose | Legal Basis (GDPR) |
|---|---|
| Providing agreed services (website development, support) | Contract performance (Art. 6(1)(b)) |
| Communicating about your project | Contract performance (Art. 6(1)(b)) |
| Sending invoices and processing payments | Contract performance (Art. 6(1)(b)) |
| Managing accounts on your behalf | Consent (Art. 6(1)(a)) |
| Responding to inquiries | Legitimate interest (Art. 6(1)(f)) |
| Legal compliance and record-keeping | Legal obligation (Art. 6(1)(c)) |
I will never:
I may share your personal data with the following categories of third parties, solely for the purpose of providing my services:
| Provider | Purpose | Location | Safeguards |
|---|---|---|---|
| Cloudflare, Inc. | Domain registration, DNS management, website security | USA | SCCs, EU-US Data Privacy Framework |
| Netlify, Inc. | Website hosting | USA | Standard Contractual Clauses (SCCs) |
| Google LLC | Google Workspace (email, calendar, drive) | USA | SCCs, EU-US Data Privacy Framework |
| Meta Platforms, Inc. | WhatsApp communication | USA | SCCs, EU-US Data Privacy Framework |
Personal data may be processed in countries outside the European Economic Area (EEA), including the United States. Where required, appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms are used.
When your data is transferred outside the EEA, I ensure appropriate safeguards are in place:
You can request more information about these safeguards by contacting me.
I may also disclose your data:
This website (bvooc.com) uses strictly necessary cookies only. These are essential for the website to function and cannot be disabled. They do not track you or collect personal information for marketing purposes.
Examples of strictly necessary cookies:
If the website contains embedded content (e.g., YouTube videos, maps), those third parties may set their own cookies. I recommend reviewing their privacy policies:
You can control cookies through your browser settings:
Blocking all cookies may affect website functionality.
If I add analytics or other non-essential cookies in the future, I will:
I retain your personal data only as long as necessary for the purposes described in this policy:
| Data Type | Retention Period | Reason |
|---|---|---|
| Project files and correspondence | 2 years after project completion | Business records, potential support needs |
| Invoices and financial records | 7 years | Dutch legal requirement (fiscal administration) |
| Account credentials you shared | Deleted within 30 days after collaboration ends | No longer needed |
| Contact form inquiries | 1 year if no project results | Follow-up and business development |
| Support communications | Duration of Support Contract + 1 year | Service continuity |
After the retention period, data is securely deleted or anonymized.
As a data subject, you have the following rights:
You can request a copy of the personal data I hold about you.
You can request correction of inaccurate or incomplete data.
You can request deletion of your data, subject to legal retention requirements.
You can request that I limit how I use your data in certain circumstances.
You can request your data in a structured, commonly used format (e.g., CSV, JSON).
You can object to processing based on legitimate interests.
Where processing is based on consent (e.g., account access), you can withdraw consent at any time. This does not affect the lawfulness of processing before withdrawal.
To exercise any of these rights:
Response time: I will respond to your request within one month. If your request is complex, I may extend this by two additional months, but I will inform you within the first month.
Cost: Requests are free of charge. However, I may charge a reasonable fee for manifestly unfounded or excessive requests.
Verification: I may need to verify your identity before processing your request.
I take appropriate technical and organizational measures to protect your personal data:
In the event of a data breach that poses a risk to your rights and freedoms, I will:
My services are not directed at children under 16 years of age. I do not knowingly collect personal data from children. If you believe I have inadvertently collected data from a child, please contact me immediately.
My website may contain links to third-party websites. I am not responsible for the privacy practices of those websites. I encourage you to read their privacy policies before providing any personal data.
I may update this Privacy Policy from time to time. Changes will be:
I encourage you to review this policy periodically.
If you are not satisfied with how I handle your personal data, you have the right to lodge a complaint with the Dutch Data Protection Authority:
Autoriteit Persoonsgegevens
Postbus 93374
2509 AJ Den Haag
The Netherlands
Website: autoriteitpersoonsgegevens.nl
Phone: +31 (0)70 888 8500
I encourage you to contact me first so I can try to resolve your concern.
For any questions, concerns, or requests regarding this Privacy Policy or your personal data:
Email: bart@bvooc.com
Phone: +31 6 11 09 11 11
This Privacy Policy is effective as of January 2025.