Privacy Policy

Codery is the data controller for the personal data processed via this website.

Codery Hoofdstraat 76 2071 EK Santpoort-Noord The Netherlands Chamber of Commerce: 84332670 Email: info@codery.nl Phone: +31 (0)6 24 34 05 65

Questions about this privacy statement or about the processing of your personal data can be directed to info@codery.nl.

We only process personal data that you provide to us yourself, supplemented with a limited set of technical data that is necessary to deliver the website safely.

Via the contact form we receive:

• Name
• Email address
• Company (optional)
• Phone number (optional)
• Subject (optional)
• Content of your message

Our web servers also process technical data for delivering and securing the website, including:

• IP address (only in temporary server logs, for abuse detection and error analysis)
• Time of visit
• Browser and operating system information (user agent)

We do not maintain individual user profiles and we do not use third-party analytics or tracking tools. If you contact us by email or phone directly, we process that data to answer your question.

We use your personal data exclusively for:

• Responding to your message or question
• Scheduling appointments and drafting quotations
• Performing any agreement with you
• Securing and keeping the website running reliably

We do not use your data for automated decision-making or profiling. We do not send newsletters or marketing emails unless you explicitly sign up for them.

We process your data on the basis of the following grounds from the GDPR:

• Performance of a contract or pre-contractual measures at your request (article 6(1)(b) GDPR) — when you request a quote or project conversation via the contact form, or when we carry out an engagement for you.
• Legitimate interest (article 6(1)(f) GDPR) — for keeping our website secure and stable (including the processing of IP addresses in server logs).
• Legal obligation (article 6(1)(c) GDPR) — for the statutory tax retention obligation of our administration (7 years).
• Consent (article 6(1)(a) GDPR) — in the specific cases where we ask for it explicitly.

We do not share your personal data with third parties for commercial purposes and we never sell your data. We do engage a limited number of technical service providers that process data on our behalf (processors under the GDPR):

• Resend (Resend, Inc., United States) — provides our transactional email delivery. Contact form messages are delivered to our info@codery.nl inbox via Resend. The transfer to the United States takes place under Standard Contractual Clauses (SCCs).
• Hetzner Online GmbH (Germany) — hosts the web server this website runs on, within the European Union.

A data processing agreement is in place with each of our processors.

We also share personal data with third parties where legally required (for example under a court order) or where necessary for the performance of a contract (for example with subcontractors we specifically engage for your project). In the latter case we inform you in advance.

We do not retain personal data longer than necessary for the purposes for which we process it:

• Contact requests without follow-up: up to 24 months after the last contact.
• Client data and project communication: for the duration of the engagement plus 7 years thereafter, due to the statutory tax retention obligation.
• Server logs (including IP addresses): up to 30 days, unless a specific security incident requires a longer retention period.

After these periods, the data is deleted or anonymised.

This website does not place tracking cookies and does not use third-party analytics services that collect personal data. A cookie banner is therefore currently not required.

We do store one preference in your browser (via localStorage): your chosen colour theme. This storage is functional, contains no personal data, and is not shared with third parties. Under the Dutch Telecommunications Act, no consent is required for this.

If this changes in the future — for example by introducing an analytics tool — we will update this statement and, where needed, the website itself.

We take appropriate technical and organisational measures to protect your personal data against loss, unauthorised access, alteration or disclosure. These include:

• Encrypted connections (HTTPS/TLS) for all website traffic.
• Restricted access to servers and API keys; credentials are kept in isolated environment variables, not in source code or container images.
• Regular software and security updates on the server.
• Logical separation between production and development environments.
• Contact form messages are delivered to an inbox that can only be accessed through authenticated accounts with multi-factor authentication.

Spotted a weakness or a suspicious incident? Please contact us immediately at info@codery.nl so we can investigate.

Under the GDPR you have the following rights regarding your personal data:

• Right of access — you can request which data we process about you.
• Right to rectification — you can have incorrect data corrected.
• Right to erasure — you can request that we delete your data.
• Right to restriction of processing.
• Right to data portability — you can request a copy of your data in a machine-readable format.
• Right to object to processing based on legitimate interest.
• Right to withdraw consent, where processing is based on consent.

You can submit a request via info@codery.nl. We may ask for additional information to verify your identity. We will respond to your request within one month. This period may be extended by two months for complex or numerous requests; in that case we will inform you in time.

Not satisfied with how we handle your personal data? Please contact us first via info@codery.nl so we can try to resolve it together.

You always have the right to lodge a complaint with the Dutch supervisory authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): autoriteitpersoonsgegevens.nl.

We may update this privacy statement from time to time, for example due to changes in legislation, our services, or the technical operation of the website. The most current version is always available on this page, with an updated date at the top.

For material changes that affect how we process your data, we will notify you actively — for example by email if we already have an ongoing contact with you, or via a notice on the website.