Privacystatement.

Who I am

Kitsora Digital is a trade name of Leroy Doornebal, registered with the Dutch Chamber of Commerce (KVK) under number 42199519. I am responsible for processing your personal data as described in this statement.

The contact form and email

When you fill in the form, I process your name, your email address, optionally your business name, the topics you tick, your message and the language of the page. If you email me directly, I process your email address and what you write. I use this data only to answer your question and, if you wish, to prepare an assignment with you.

The website does not store your message: it is sent straight to my mailbox as an email. The legal basis is that you ask me to get in touch (Article 6(1)(b) GDPR) or, for a general question, my legitimate interest in answering it (Article 6(1)(f) GDPR).

Your name, email address, topic and message are needed to answer you. Without them I cannot handle your inquiry.

If you become a client

If our contact leads to an assignment, I use your data to carry out that assignment and to invoice it. The legal basis is the agreement we make (Article 6(1)(b) GDPR) and my legal duty to keep accounts (Article 6(1)(c) GDPR).

Your IP address

To limit abuse and spam, at most three messages per hour can be sent from one IP address. For that, not your IP address itself is kept, but an encrypted code derived from it that cannot be turned back into the address. That code expires after two to three hours and is then deleted automatically within a few days; this database has backups that go back up to 35 days. The legal basis is my legitimate interest in protecting the website and my mailbox (Article 6(1)(f) GDPR).

On every visit, the hosting service processes your IP address to deliver the page to you, based on my legitimate interest in showing the website (Article 6(1)(f) GDPR). I keep no visitor logs. Technical logs of the form, without the content of your message, are kept for 14 days to fix problems.

No cookies, but anonymous statistics

This website sets no cookies and uses no advertising or tracking services. I do count how often pages are viewed, using Umami: a statistics service that stores nothing on your device and builds no profiles. I only see totals, such as visits per page, country, device type and which website you came from; never who you are.

Your IP address is only used to determine your country and to create an anonymous code that changes daily, and it is not stored. The legal basis is my legitimate interest in seeing how the website is used (Article 6(1)(f) GDPR). Since nothing is stored on your device, no consent is needed for this.

The font comes from this website itself; Umami’s statistics script is the only third-party service that is loaded.

How long I keep your data

Inquiries that do not lead to an assignment are deleted at the latest one year after our last contact. If you become a client, I keep the data that ends up in my accounts for seven years, as Dutch law requires.

Who else processes your data

I do not sell your data or share it with others to make money from it. I do use service providers that process data on my behalf:

• Amazon Web Services: hosting the website and sending the form as an email. This happens in Ireland; the website is delivered through servers in Europe and North America.
• Zoho Corporation: my email. Messages are stored in the United States.
• Umami Software: the anonymous visitor statistics, stored in the European Union.

Both providers’ standard data processing agreements apply. Where data ends up outside the European Union, this is covered as follows: Amazon is certified under the EU-US Data Privacy Framework, and for Zoho the European Commission’s standard contractual clauses in Zoho’s data processing agreement apply. You can request a copy of these safeguards via hello@kitsoradigital.com.

The domain is managed through Cloudflare, which receives no data from the form.

Security

The website only works over an encrypted connection (HTTPS). Data is stored encrypted. Only I have access to my mailbox and the hosting account; my service providers only as far as needed to provide their service.

No automated decisions

I make no decisions based solely on automated processing and do not profile visitors.

Your rights

You have the right to access your data, have it corrected or deleted, restrict its processing, object to the processing, and receive your data to transfer it. Email hello@kitsoradigital.com to do so; I reply within a month.

If you are not satisfied with how I handle your data, you can file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

Changes

I update this statement when the website or the way I work changes. The date at the top shows when that last happened.