Privacy policy

Studio Naad is the sole proprietorship of Nadja Gurk. I design and build websites and apps. This policy explains which personal data I process, why I do so and what your rights are. I collect as little as possible.

Who is responsible

Studio Naad (Nadja Gurk)
Uijterwaardt 10, 1851 GH Heiloo, the Netherlands
Chamber of Commerce (KVK) 42197626
[email protected]

When you visit this website

• The site itself sets no cookies. I use no analytics, trackers or ads.
• Fonts, images and video are served from the site itself, so your browser does not connect to services such as Google.
• The site is delivered through Cloudflare. To serve and protect the site, Cloudflare processes technical data such as your IP address and browser type. I do not look at this data or use it to track you.

When you get in touch

The form on this site does not send anything itself. It opens your own email program with a message that you send. When you email me, I receive:

• your name and email address;
• whatever you put in your message, such as your wedding date or the number of guests.

I use this to answer your question and, if you want, to make a proposal. This is allowed because you ask me to (steps prior to a contract).

If you want to test MiniLore or hear when it launches, I keep your email address for that purpose only, with your consent. You can withdraw it at any time by email.

When you are a client

For a project I process your name, address, email address, phone number, what we agree and your payments, and for business clients also the company name, Chamber of Commerce number and VAT ID. I use this to carry out the project and to invoice. This is necessary for our contract, and I am legally required to keep records.

Data of your guests or customers

If I build a site or app for you where visitors enter information, such as an RSVP or the Logeerplanner, I process that data on your behalf. You decide what it is for; I am the processor. I only use it to make the site or app work, share it with no one else and delete it when the project ends, or earlier if you ask. With business clients I sign a data processing agreement for this.

How long I keep data

• Emails about a question that did not lead to a project: up to one year after our last contact.
• Client, quote and invoice data: seven years, as required by Dutch tax law.
• Your email address for MiniLore: until I have sent the launch message, or until you unsubscribe.
• Data of guests or customers in a site or app: until no later than three months after the project or event ends, unless we agree otherwise.

Who I share data with

I never sell data, and I only share it when my work requires it:

• Apple (iCloud Mail), for my email;
• Cloudflare, for hosting this site;
• the hosting and storage services of a site or app I build for you (for example Vercel, Upstash or Airtable), for that project only;
• my bank, my accounting software and, if applicable, a bookkeeper;
• the Dutch Tax Administration or other authorities, when the law requires it.

Some of these services are based in the United States. They operate under the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

Security

I use strong passwords, two-factor authentication and encrypted connections. As few people as possible have access to your data: only me and the services above, where needed.

Your rights

You can access, correct or delete your data, object, ask me to restrict processing, request a copy to take elsewhere and withdraw consent. Email [email protected]. I will reply within one month.

Not happy with how I handle your data? Let me know. You can also file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Changes

If anything changes in how I handle data, I will update this policy. The date at the top shows when it was last changed.