Privacy Policy
This Privacy Policy explains how personal data is processed when you visit yereth.nl (“the Site”) or contact us through the Site’s forms.
The controller responsible for processing personal data through this website is Yereth Consulting, based in the Netherlands. You can reach us through the Contact page or at [email protected].
1. What data may be processed
Depending on how you use the Site, we may process:
- Technical website data, such as IP address, browser type, device information, timestamps and requested pages, for security, hosting and operational purposes.
- Information submitted through contact or inquiry forms, such as your name, email address, company name and message content.
- Information submitted through print inquiry forms, such as selected image references and optional notes.
- Security-related metadata required for spam prevention and form protection.
- Essential session data required for website security and functionality.
The Site does not use advertising trackers or behavioural profiling technologies.
2. Why data is processed
Personal data is processed only where necessary for:
- Responding to inquiries or requests.
- Communicating about potential collaborations, speaking engagements, print requests or consulting inquiries.
- Operating, securing and improving the website.
- Preventing spam, abuse and unauthorized access.
- Maintaining the availability and integrity of the Site.
3. Legal bases (GDPR)
Depending on the situation, processing is based on:
- Article 6(1)(a) GDPR, where you voluntarily provide information or consent.
- Article 6(1)(b) GDPR, where processing is necessary prior to entering into a contract or collaboration.
- Article 6(1)(f) GDPR, where processing is necessary for legitimate interests such as website security, fraud prevention and reliable operation of the Site.
4. Cookies and analytics
The Site uses only essential or strictly necessary technologies required for security and core functionality.
This may include:
- Session cookies used for form security and CSRF protection.
- Local browser storage used to remember interface preferences or notice acknowledgements.
Visits are counted with Cloudflare Web Analytics, a cookieless statistics service. It sets no cookies, stores nothing on your device, does not fingerprint or follow you across sites, and reports only aggregate figures such as page views, referring sites, countries and page load times. These statistics help keep the Site useful and fast (legitimate interest, Article 6(1)(f) GDPR). The administration pages do not load it.
No advertising, remarketing or third-party behavioural tracking cookies are used.
5. Third-party providers
The Site relies on these service providers, which process data on our behalf only as needed for their service:
- DreamHost (United States): website hosting, the form database and outgoing email.
- Cloudflare (United States): content delivery and security, the Turnstile spam check on forms, and the cookieless visit statistics described above.
- Google (United States): Gmail, one of the inboxes that receives notifications of messages sent through the forms.
- GitHub (United States): deployment of the Site and storage of encrypted backups of the form database.
These providers process data only as necessary to provide their services and under applicable contractual and legal safeguards.
Personal data is not sold to third parties.
6. International transfers
The providers above may process data in the United States. Such transfers rely on the safeguards these providers offer under the GDPR, such as the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses.
7. Retention
Personal data is retained only for as long as reasonably necessary for the relevant purpose, including communication follow-up, legal obligations, security or operational needs.
- Records of form submission attempts, which include your IP address and are used to limit abuse, are deleted after 48 hours.
- Encrypted backups of the form database are kept for up to 90 days.
You may request deletion of information you submitted, subject to applicable legal or administrative obligations. It is then deleted from the Site at once, and from backups when they expire.
8. Your rights
Subject to applicable law, you may have the right to request access, correction, deletion, restriction, objection or portability of your personal data, and the right to withdraw consent where consent is the legal basis for processing.
You also have the right to lodge a complaint with a supervisory authority, including the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
To exercise your rights, contact us through the Contact page.
9. Children
This Site is not directed at children and does not knowingly collect personal data from children.
10. Changes
This Privacy Policy may be updated from time to time to reflect legal, technical or operational changes. The latest version will always be published on this page.