Privacy statement

1Who is responsible

AdExcelerate, the sole proprietorship of Bastiaan Heerkens, is the controller for the personal data described here.

Business

AdExcelerate, sole proprietorship of Bastiaan Heerkens

Address

Schoudermantel 42, 3981 AH Bunnik, the Netherlands

Chamber of Commerce

KvK 96830468

VAT ID

NL005234407B12

Email

bastiaan.heerkens@adexcelerate.com

I have not appointed a data protection officer; AdExcelerate is not required to have one.

2Visiting this website

Like every website, this site receives technical data with each request your browser makes.

Data

IP address, the page requested, date and time, and browser and device information (user agent)

Purpose

Delivering the pages to you and protecting the site against abuse and attacks

Legal basis

My legitimate interest in a website that works and is secure (Article 6(1)(f) GDPR)

Processor

Cloudflare, Inc., which hosts the site on Cloudflare Pages under its Data Processing Addendum

Kept for

As long as Cloudflare needs them to deliver and secure the site, under its Data Processing Addendum. I have no access to these logs.

I don't use Cloudflare Web Analytics or any other analytics, and I don't combine this data with anything else.

3Cookies

This site sets no cookies and uses no similar techniques, such as local storage or fingerprinting. That is why there is no cookie banner.

4Emailing me

If you email me, I process what you send.

Data

Your name, email address, the content of your message and anything you choose to include

Purpose

Replying, answering your question and, if you want, planning a conversation

Legal basis

My legitimate interest in answering messages (Article 6(1)(f) GDPR) or, when you ask about an assignment, steps you request before an agreement (Article 6(1)(b) GDPR)

Processor

Google, through Google Workspace, which runs email for adexcelerate.com

Kept for

Two years after our last contact. If it leads to an assignment, the records that belong to my business administration are kept for seven years, as Dutch tax law requires.

5Clients and business contacts

If you work with me, or for a client I work with, I process your business contact details to do the work and run my business.

Data

Name, role, business email address and phone number, correspondence, and the details in quotations, contracts and invoices

Purpose

Preparing and carrying out the assignment, invoicing, and keeping my business administration

Legal basis

Performance of the agreement (Article 6(1)(b) GDPR); my legal obligation to keep records (Article 6(1)(c) GDPR); for contact persons at a client, my legitimate interest in working with that client (Article 6(1)(f) GDPR)

Source

From you, or, for contact persons at a client, usually from the client

Processor

Google, through Google Workspace, for email and file storage

Kept for

Seven years for records that belong to my business administration, as Dutch tax law requires; other correspondence two years after the assignment ends

These details are needed to prepare and carry out an assignment; without them I can't do the work.

When I process personal data on a client's behalf during an assignment, I act as processor. The data processing agreement with that client then applies, not this statement.

6Who else receives data

The processors named above: Cloudflare for hosting and security, and Google for email and file storage. Both process the data on my behalf under a data processing agreement. If I involve another adviser or a replacement in an assignment (Article 6 of my terms and conditions), that person receives what the work requires, under the same confidentiality and a data processing agreement. I don't sell personal data and don't share it for marketing. I share it with others only when the law requires it, for example with the Dutch Tax and Customs Administration.

7Transfers outside the EEA

Cloudflare and Google are US companies and may process data in the United States. Both are certified under the EU-U.S. Data Privacy Framework, for which the European Commission adopted an adequacy decision in July 2023. Where that framework does not apply, Standard Contractual Clauses approved by the European Commission are used. You can ask me for a copy of these safeguards by email.

8Your rights

You have the right to access, correct or delete your personal data, to restrict or object to its processing, and to receive it in a portable format. Where I rely on legitimate interest, you can always object. Send your request to bastiaan.heerkens@adexcelerate.com; I respond within one month.

If you think I handle your data incorrectly, please tell me first. You can also file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

9Other things to know

• You don't have to provide any personal data to use this site. Emailing me is your choice; without an email address I can't reply.
• I don't use automated decision-making or profiling.
• The site is served over HTTPS only.

10Changes

When this statement changes, the version number and date at the top change with it. Earlier versions are available on request.