Privacy Policy

SandersStudio, registered with the Dutch Chamber of Commerce (KvK) under number 77223969, is the controller for personal data collected on this website. Contact: info@sandersstudio.nl. Add registered business address.

Through the contact form we ask for:

• Name, business email address and company name
• Company website (optional) and number of employees
• The service you are interested in, a description of your business challenge, budget range and intended start
• Your confirmation that we may contact you about your request

Like any website, our hosting provider processes technical data (such as IP address and browser type) to deliver pages securely. We do not currently use analytics or advertising trackers. Update if analytics or ad pixels are added.

• To respond to your request and prepare a discovery call: steps at your request prior to a contract / legitimate interest.
• To keep a record of business correspondence: legitimate interest and legal obligations.
• To protect the website against abuse (rate limiting, spam filtering): legitimate interest.

We share data only with service providers that help us run the website and handle requests, under data-processing agreements:

• Website hosting (Vercel). Confirm region and DPA.
• CRM or workflow tool that receives contact-form submissions. Name the provider once the form integration is configured.
• Email provider. Name the provider.

Describe any transfers outside the EEA and the safeguards used (e.g. Standard Contractual Clauses).

Set retention periods, e.g. contact requests that don’t lead to a project deleted after X months; client records kept as required by Dutch tax law.

Under the GDPR you can ask us to access, correct, delete or export your personal data, to restrict or object to processing, and to withdraw consent at any time. Email us and we’ll respond within one month.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.

We use encrypted connections (HTTPS), restrict access to personal data to people who need it, and only work with providers that offer appropriate safeguards. Expand once internal procedures are documented.

We will update this page when our processing changes. The date at the top shows the latest version.