Privacy policy

Diede Tap, based in Utrecht, is responsible for the processing of personal data as set out in this privacy statement.

Personal data I process

I process your personal data because you use my website and/or because you provide that data to me yourself.

Below is an overview of the personal data I process:

  • First and last name
  • E-mail address
  • IP address
  • Browser and device type
  • Data about your activity on my website

Special and/or sensitive personal data I process

My website does not intend to collect data about visitors under the age of 16, unless they have permission from a parent or guardian. I have no way of checking whether a visitor is over 16, so I would encourage parents to be involved in their children's activities online, in order to prevent data about children being collected without parental consent. If you believe I have collected personal data about a minor without that consent, please get in touch through the contact form and I will delete it.

Why I process personal data, and on what legal basis

I process your personal data for the following purposes:

  • To be able to e-mail you when that is needed to reply to your message
  • To analyse how the website is used, so I can improve the site and its content
  • To keep the website working properly, which includes remembering your preferred language

I process this data on the following legal grounds: your consent (for analytical cookies), handling your own request (when you get in touch), and a legitimate interest in a website that works well and is secure.

Automated decision-making

I do not use automated decision-making.

How long I keep personal data

I do not keep your personal data any longer than is strictly needed for the purposes it was collected for. I use the following retention periods:

  • E-mail correspondence: 2 years after the last contact. If the contact leads to an assignment, I keep the associated administration for 7 years, because the Dutch tax authority requires it.
  • Website usage statistics: 12 months
  • Technical server logs: 3 months

Sharing personal data with third parties

I do not sell your data to third parties, and I only pass it on where that is needed to deliver my services or to comply with a legal obligation. I use a number of service providers for the website. Where applicable, those parties' data processing terms apply.

I use the following parties:

  • DigitalOcean, for hosting the website
  • Apple iCloud, for handling e-mail
  • Formspree, for handling messages sent through the contact form
  • Google Analytics, for keeping track of visitor statistics

These parties may process data on servers outside the European Union, including in the United States. That transfer takes place on the basis of the EU-US Data Privacy Framework and the standard contractual clauses of the European Commission.

Cookies, or similar techniques, that I use

I use functional and analytical cookies. A cookie is a small text file that is stored in the browser of your computer, tablet or smartphone the first time you visit this website.

The functional cookies are purely technical. They make sure the website works as it should and that, for example, your preferred language is remembered. These cookies do not require consent.

I also place analytical cookies through Google Analytics, to keep track of how many people visit the website and which pages get read. That way I can improve the site and its content. I have set Google Analytics up in a privacy-friendly way: IP addresses are anonymised, data is not shared with Google for other purposes, and no advertising features are used. I only place these cookies after you have given permission on your first visit.

I do not show adverts and I do not follow your browsing across other websites.

You can opt out of cookies by setting your browser so that it no longer stores them. You can also delete any information stored earlier through your browser settings.

For an explanation, see: https://veiliginternetten.nl/wat-zijn-cookies/

Viewing, correcting or deleting data

You have the right to view, correct or delete your personal data. You also have the right to withdraw any consent you gave for the processing, or to object to the processing of your personal data, and you have the right to data portability. That means you can ask me to send the personal data I hold about you, as a computer file, to you or to another organisation you name.

You can send a request to view, correct, delete or transfer your personal data, or a request to withdraw your consent or object to the processing, through the contact form. I will respond as quickly as I can, and in any case within four weeks.

I would also like to point out that you can file a complaint with the national supervisory authority, the Dutch Data Protection Authority.

How I secure personal data

I take the protection of your data seriously and take appropriate measures against misuse, loss, unauthorised access, unwanted disclosure and unauthorised alteration. The website uses a secure connection (HTTPS).

Changes

I reserve the right to amend this privacy statement. Changes will be published on this page.

Last updated: 30 August 2026