Privacy Policy
Effective and last updated:
This Privacy Policy explains how Sander Heilbron handles personal data when you visit this website or use the contact form. Sander Heilbron is the data controller for the processing described on this page.
Contact form
When you use the contact form, the website processes your name, email address, subject and message. This information is used only to receive, answer and follow up on your enquiry. The legal basis is the legitimate interest in responding to enquiries and, where applicable, taking steps at your request before entering into an agreement.
Contact form messages are sent by email using Resend. Resend acts as an email service provider and may process the submitted information and technical delivery data. Resend's processing and international data transfers are governed by its Data Processing Addendum and applicable safeguards, including the EU Standard Contractual Clauses where required.
Contact correspondence is retained only for as long as needed to handle the enquiry and any resulting relationship, and for no longer than two years after the last substantive contact unless a legal obligation or dispute requires longer retention.
Privacy-friendly analytics
This website uses a self-hosted instance of Umami to understand aggregate website usage and to improve the site. Umami does not use cookies, does not create a persistent cross-site profile and does not collect directly identifying information such as your name or email address.
The collected analytics can include page views, referring website, browser and device type, and approximate geographic information. Umami uses request information to produce anonymised statistics; raw IP addresses are not stored in the analytics database. Analytics data is not sold or used for advertising and is retained for no longer than 12 months. The legal basis is the legitimate interest in understanding and improving the performance and usefulness of this website.
You can prevent analytics requests with your browser settings or a content blocker without losing access to the website.
Hosting and technical logs
The website is hosted using Cloudflare. Cloudflare may process technical request information, such as IP addresses, request URLs, timestamps, browser information and security signals, to deliver and protect the website. This processing is necessary for the legitimate interests of operating, securing and troubleshooting the website. Cloudflare applies its own retention periods and appropriate safeguards to this processing.
Cookies and local storage
This website does not use analytics or advertising cookies. It stores a theme preference in your browser's local storage so that light, dark or system mode can be applied consistently. This preference remains on your device, is not sent to Sander Heilbron and can be removed through your browser settings.
Sharing and international transfers
Personal data is not sold. It is shared only with service providers needed to operate the website and handle your enquiry, particularly Cloudflare and Resend, or where disclosure is required by law. Where a provider processes data outside the European Economic Area, appropriate transfer safeguards are used where required by law.
Your rights
Depending on the circumstances, you may have the right to access, correct or erase your personal data, restrict its processing, object to processing based on legitimate interests, and receive data you provided in a portable format. You may also lodge a complaint with the Dutch Data Protection Authority or another competent supervisory authority.
To ask a privacy question or exercise one of these rights, use the contact form. Additional information may be requested when necessary to verify your identity before acting on a request.
External links
This website links to websites operated by other organisations. Their own privacy policies apply when you visit them.
Changes to this policy
This policy may be updated when the website, its services or applicable privacy requirements change. The date at the top of this page will be updated when substantive changes are made.