Last updated: 2 October 2026
Groef Webdesign (Chamber of Commerce 82878749, based in Wassenaar, the Netherlands) is responsible for processing personal data through this website. This policy explains in plain language what we do and don’t do.
In short
- This website sets no cookies and uses no ad networks or trackers that follow you around the web.
- We count visits anonymously with Umami on our own server in the EU. No IP addresses are stored and no profiles are built.
- Fonts and all other files are served from our own server; your browser never connects to Google or other third parties.
- We only process data you enter in the quote form, and only to answer your request.
What data and why
Quote form. When you fill in the form we receive: your name, email address, optionally your phone number, your business name, optionally your current website, the type of project and your budget range. Legal basis: your consent and taking steps at your request before entering into a contract (Art. 6(1)(a) and (b) GDPR).
Analytics. We use Umami, self-hosted on our own server in the EU (Hetzner, Germany/Finland). Umami sets no cookies, stores no IP addresses and builds no profiles. A visit is recognised by an anonymous code that changes every day. We only see totals: pages visited, referring website, country, browser and device type, and anonymous actions such as “quote form started”. If your browser sends a “Do Not Track” signal, your visit is not counted. Legal basis: legitimate interest (understanding how the website is used).
Server logs. Our web server records technical data (such as time, requested page and a truncated IP address) to keep the website secure and available. Legal basis: legitimate interest. IP addresses are anonymised in the logs and logs are deleted after at most 14 days.
Who we share data with
- Hosting: Hetzner Online GmbH, servers in the EU (Germany/Finland), under a data processing agreement.
- Email delivery: the form is delivered to us as an email via Resend (Resend, Inc.), from their servers in the EU (Ireland). Resend is a US company; any transfer outside the EEA is covered by the EU Standard Contractual Clauses and the EU-US Data Privacy Framework.
We never sell your data and never use it for advertising.
Retention
Requests that do not lead to a project are deleted no later than 12 months after our last contact. Client data is kept as long as the law requires (Dutch tax retention: 7 years).
Your rights
You have the right to access, rectify, erase, restrict, port and object, and you can withdraw consent at any time. Email contact@groefstudio.nl; we respond within one month. You can also lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.
Security
The website runs entirely over HTTPS, with strict security headers and no third-party scripts. The form is protected against abuse and your data is not stored on the web server.