SiteAanpakkersPrivacy policy
Who we are
SiteAanpakkers, based in Rotterdam (Chamber of Commerce 98038672, VAT ID NL868334571B01), designs, builds and maintains websites and web applications for entrepreneurs in the Netherlands. For the data you share with us through this website, we are the data controller within the meaning of the GDPR. Questions about this policy or your data? Email info@siteaanpakkers.com.
What data we collect
Data you share with us yourself: your name, email address, phone number, company name and the content of your message via the contact form, email, phone or WhatsApp. We also process limited technical data generated automatically when you visit the website, such as your IP address, browser and device information and log files. We use these solely for security and troubleshooting. If you submit the contact form, we automatically include the page you sent it from, the other website you clicked through from, if any (only its domain name, for example google.com) and, if you arrived through an ad or a link with campaign data, that campaign data (such as the source, the campaign and an ad click ID from the link). This tells us which ads and channels bring in enquiries. We do not place any cookies for this.
Why and on what legal basis
We use your data to contact you, make a proposal, perform the agreement and invoice you. We use the origin data from the contact form to measure which ads and channels bring in enquiries. The legal bases for this are: the performance of the (upcoming) agreement, compliance with legal obligations and our legitimate interest in a secure, well-functioning website and in measuring how well our ads perform. We do not use your data for unsolicited advertising or profiling, and we never sell it to third parties.
Storage and secure connections
Data is stored with professional hosting providers, with data storage within the EU wherever possible. All traffic to and from this website runs over a secure connection (HTTPS/TLS) with a valid SSL certificate.
Who we share data with
We only share data with service providers needed to run our website and email, such as our hosting provider (Vercel), database and file storage (Supabase, data stored in the EU), email delivery, underlying cloud infrastructure (Amazon Web Services) and CDN and security services (Cloudflare). Only with your consent via the cookie banner do we also share data with Google Analytics for visitor statistics and ad measurement. Where these parties process data outside the EEA, appropriate safeguards apply, such as Standard Contractual Clauses and/or the EU-U.S. Data Privacy Framework. An up-to-date list of processors is available on request.
How we protect your data
We take appropriate technical and organisational measures: encrypted traffic (TLS), two-factor authentication on admin accounts, need-to-know access, passwords stored only in hashed form, daily automatic backups, logging of admin access and regular security updates and patches.
How long we keep it
No longer than necessary. We keep administrative and invoicing data for the statutory tax retention period of 7 years. After an agreement ends, other client data is deleted within 60 days or returned to you on request, unless a legal retention obligation prevents this. Data from contact requests that do not lead to an assignment is deleted as soon as it is no longer needed.
Your rights
You have the right to access, rectify and erase your data, restrict processing, data portability and to object to processing. You can withdraw any consent you have given at any time. Email info@siteaanpakkers.com and we will respond within 30 days. Not happy with how we handle your data? You can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Data breaches
In the event of a (suspected) data breach, we investigate immediately, document the incident and, where required, report it without undue delay to the Dutch Data Protection Authority and to those affected. Suspect a security issue yourself? Report it via info@siteaanpakkers.com.
When we manage your website
If we process personal data on your behalf, for example data of your customers via a website we built, we act as a processor within the meaning of the GDPR. In that case we conclude a data processing agreement in accordance with Article 28 GDPR, process data solely on your instructions and never for our own purposes such as marketing.
Changes
We may update this privacy policy, for example when we launch new services or when legislation changes. The current version is always available on this website. Last updated: September 2026.