Privacy policy

This is an English translation provided for convenience. The Dutch version is the authoritative one.

Who is responsible

renvooi is a trade name of Orid Holding B.V. (Geurdeland 17 g, 6673 DR Andelst, the Netherlands, Chamber of Commerce 88283097). Orid Holding B.V. is the controller for the processing described in this policy. One person works behind renvooi; where this policy says “I”, that is Hamid Norani on behalf of Orid Holding B.V. Full company details are in the legal notice.

Which data I process

I only process data that comes directly from you — never data obtained about you from third parties:

• Via the contact form: your name, email address, phone number (if you fill it in) and the content of your message. If you arrived via a campaign link, the origin of that link (such as the campaign name) travels with your request, so I know how you found me.
• If you email or call directly: your email address or phone number and what you tell or write me.
• Technical logs: the hosting provider briefly processes technical data (such as the IP address) on every visit, for the security and functioning of the site — as with virtually every website. On top of that, the site itself collects nothing: no tracking, no visitor statistics, no advertising cookies — see the cookie policy.

For what purpose and on which basis

• Answering your request and carrying out an assignment — basis: the performance of a contract or the steps leading up to it (Article 6(1)(b) GDPR).
• Answering other messages and keeping my records — basis: my legitimate interest in normal business operations and reachability (Article 6(1)(f) GDPR).
• Protecting the site and the form against abuse (technical logs, spam prevention) — basis: my legitimate interest in a secure, working site (Article 6(1)(f) GDPR).

Your data is never used for newsletters or marketing and never sold. No processing relies on your consent — so there is nothing to withdraw.

No automated decision-making

Even though AI is my profession: nothing here is decided about you automatically. There is no automated decision-making and no profiling; every message is read and answered by a person.

Are you required to provide data?

No. You can read the whole site without leaving anything. Only if you want contact do I need at least an email address or phone number — without one, I simply can’t reply.

Retention periods

Form submissions are forwarded straight to the mailbox and not stored in a database. I keep correspondence for as long as the contact or the assignment requires, and at most two years after the last contact — unless a legal obligation requires longer (such as the Dutch seven-year fiscal retention duty for records relating to an assignment). The technical logs at the hosting provider have short, technical retention periods.

Recipients and transfers outside the EEA

I never sell personal data and don’t share it with third parties for marketing. Only the suppliers technically needed to run the site and email process data: the hosting provider (Cloudflare) and the email service (Google). Both are US companies; those transfers are covered by the EU-US Data Privacy Framework and/or the European Standard Contractual Clauses. Beyond that, I only disclose data when a legal obligation or court order compels it.

The contact form

The form does not run through an external form service: your submission goes through the site’s own endpoint, on its own environment, and on to the mailbox as email. The site itself does not keep your submission — no database, no copy; if it is briefly buffered for delivery, that buffer is encrypted and wiped right after delivery.

Security

The site runs entirely over https and form data is sent encrypted. No passwords or payment data are processed, and access to your data is limited to one person.

Your rights

You have the right to access, correct or delete your data, to restrict processing, to object, and to data portability. Where I process data based on my legitimate interest, you can object — I will then review it and stop the processing unless compelling legitimate grounds exist. Email your request to [email protected]; to make sure the request comes from you, I may ask for confirmation via the email address I know for you. You’ll receive a reply within one month. If you disagree with how I handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes to this policy

If anything changes in what the site or I do with data, this policy is updated first and the date at the top changes. For a substantial change, I’ll state it clearly on the site.

Contact

Questions about this privacy policy? Email [email protected] or call +31 6 82822525.