Privacy Policy

Codery is the data controller for the personal data processed via this website.

Codery Hoofdstraat 76 2071 EK Santpoort-Noord The Netherlands Chamber of Commerce: 84332670 Email: info@codery.nl Phone: +31 (0)6 24 34 05 65

Questions about this privacy statement or about the processing of your personal data can be directed to info@codery.nl.

We only process personal data that you provide to us yourself, supplemented with a limited set of technical data that is necessary to deliver the website safely.

Via the contact form we receive:

• Name
• Email address
• Company (optional)
• Phone number (optional)
• Subject (optional)
• Content of your message

Our web servers also process technical data for delivering and securing the website, including:

• IP address (only in temporary server logs, for abuse detection and error analysis)
• Time of visit
• Browser and operating system information (user agent)

We do not maintain individual user profiles and we do not use third-party analytics or tracking tools. If you contact us by email or phone directly, we process that data to answer your question.

We use your personal data exclusively for:

• Responding to your message or question
• Scheduling appointments and drafting quotations
• Performing any agreement with you
• Securing and keeping the website running reliably

We do not use your data for automated decision-making or profiling. We do not send newsletters or marketing emails unless you explicitly sign up for them.

We process your data on the basis of the following grounds from the GDPR:

• Performance of a contract or pre-contractual measures at your request (article 6(1)(b) GDPR) — when you request a quote or project conversation via the contact form, or when we carry out an engagement for you.
• Legitimate interest (article 6(1)(f) GDPR) — for keeping our website secure and stable (including the processing of IP addresses in server logs).
• Legal obligation (article 6(1)(c) GDPR) — for the statutory tax retention obligation of our administration (7 years).
• Consent (article 6(1)(a) GDPR) — in the specific cases where we ask for it explicitly.

We do not share your personal data with third parties for commercial purposes and we never sell your data. We do engage a limited number of technical service providers that process data on our behalf (processors under the GDPR):

• Resend (Resend, Inc., United States) — provides our transactional email delivery. Contact form messages are delivered to our info@codery.nl inbox via Resend. The transfer to the United States takes place under Standard Contractual Clauses (SCCs).
• Hetzner Online GmbH (Germany) — hosts the web server this website runs on, within the European Union.

A data processing agreement is in place with each of our processors.

We also share personal data with third parties where legally required (for example under a court order) or where necessary for the performance of a contract (for example with subcontractors we specifically engage for your project). In the latter case we inform you in advance.

We do not retain personal data longer than necessary for the purposes for which we process it:

• Contact requests without follow-up: up to 24 months after the last contact.
• Client data and project communication: for the duration of the engagement plus 7 years thereafter, due to the statutory tax retention obligation.
• Server logs (including IP addresses): up to 30 days, unless a specific security incident requires a longer retention period.

After these periods, the data is deleted or anonymised.

This website uses Google Analytics to measure how many visitors come by and how they use the site. This places cookies, but only after you have given consent via our cookie banner. If you do not consent, no analytics cookies are placed.

Google Analytics is a service provided by Google. The collected data may be processed on servers outside the EU, including in the United States. We use this data solely for visitor statistics, not to identify you personally.

You can withdraw or change your consent at any time via 'Cookie preferences' at the bottom of every page.

Alongside Google Analytics, we use Cloudflare Web Analytics to measure visitor numbers. This service works without cookies, anonymises IP addresses immediately, and collects no data that can be traced back to you. No consent is therefore required, and this measurement is always active.

In addition, we store one functional preference in your browser (via localStorage): your chosen colour theme. This storage contains no personal data, is not shared with third parties, and requires no consent.

We take appropriate technical and organisational measures to protect your personal data against loss, unauthorised access, alteration or disclosure. These include:

• Encrypted connections (HTTPS/TLS) for all website traffic.
• Restricted access to servers and API keys; credentials are kept in isolated environment variables, not in source code or container images.
• Regular software and security updates on the server.
• Logical separation between production and development environments.
• Contact form messages are delivered to an inbox that can only be accessed through authenticated accounts with multi-factor authentication.

Spotted a weakness or a suspicious incident? Please contact us immediately at info@codery.nl so we can investigate.

Under the GDPR you have the following rights regarding your personal data:

• Right of access — you can request which data we process about you.
• Right to rectification — you can have incorrect data corrected.
• Right to erasure — you can request that we delete your data.
• Right to restriction of processing.
• Right to data portability — you can request a copy of your data in a machine-readable format.
• Right to object to processing based on legitimate interest.
• Right to withdraw consent, where processing is based on consent.

You can submit a request via info@codery.nl. We may ask for additional information to verify your identity. We will respond to your request within one month. This period may be extended by two months for complex or numerous requests; in that case we will inform you in time.

Not satisfied with how we handle your personal data? Please contact us first via info@codery.nl so we can try to resolve it together.

You always have the right to lodge a complaint with the Dutch supervisory authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): autoriteitpersoonsgegevens.nl.

We may update this privacy statement from time to time, for example due to changes in legislation, our services, or the technical operation of the website. The most current version is always available on this page, with an updated date at the top.

For material changes that affect how we process your data, we will notify you actively — for example by email if we already have an ongoing contact with you, or via a notice on the website.