Privacy Policy

Last updated: 6 August 2026

Who is responsible for your data

Data Stables B.V., Bierstraat 123c, 3011 XA Rotterdam, Netherlands. Contact: reinier@data-stables.nl.

Data Stables B.V. is the controller for the personal data described on this page. This policy covers this website only. Personal data we process on behalf of a client inside a paid engagement is governed by the data processing agreement in that contract, not by this policy.

What personal data we collect

Website analytics. This site is built to measure how it is used — pages viewed, referrer, IP address, browser and device type, and a random identifier that lets us recognise a repeat visit without knowing who you are — but that measurement only happens once analytics consent has been granted. The site currently offers no way to grant it, so no analytics events are being collected at present. Nothing else happens in the meantime: without that consent no identifier is stored in your browser, and your browser does not fetch the Google Tag Manager container from Google, so Google LLC learns neither your IP address nor the page you are on. Both of those happen only once consent has been granted. The exact identifiers involved, where they are stored and when they are set are listed in our cookie policy. We do not use any of this to build a profile about you as an individual, and we do not sell it or use it for advertising.

What you send us through the contact form. The contact page has a form with four fields: your name, your email address, an optional choice of what you are looking for, and your message. That form is not yet connected to a mailbox. When you submit it, the submission is validated and then discarded: nothing you typed is stored, emailed, or passed to any third party, and nobody reads it. Apart from the standard request log described below — which, like every other request to this site, records your IP address and the time — the only trace kept of what you sent is a single server log line recording that a submission arrived, the option you picked and how many characters each field held — never your name, your email address or the text of your message. Because of that, email reinier@data-stables.nl if you actually need an answer. We will update this section, before the change goes live, once the form delivers to a mailbox.

Anything you send us by email. If you email reinier@data-stables.nl we receive your address, your name if you give it, and whatever else you choose to write. We use it to answer you and, if it leads to work, to prepare and administer that engagement.

Technical request logs. Our hosting provider records standard server logs for every request: IP address, timestamp, requested URL, response status and user agent. These exist to keep the site available and to detect abuse.

Legal basis

Consent (Article 6(1)(a) GDPR) for analytics event collection. You can withdraw consent at any time — by email, or by clearing the stored values through your browser; see the cookie policy for what is stored, at what point it is stored, and how to remove or block it.
Legitimate interest (Article 6(1)(f) GDPR) for hosting and security logs — keeping the site reachable and defending it against abuse.
Steps prior to a contract, or our legitimate interest in replying (Article 6(1)(b) and (f) GDPR) for a contact form submission and for email you send us.

How long we keep it

Analytics events: deleted no later than 26 months after collection.
Your consent choice: stored for one year, or until you clear your browser storage.
Contact form submissions: not retained at all — discarded at the moment of submission. The non-identifying log line about them follows the server-log retention below.
Server request logs: held by our hosting provider under its own log-retention schedule; we do not keep a separate copy.
Email correspondence: kept for as long as the conversation or the engagement is live. Where the correspondence is part of our business administration, Dutch law obliges us to retain it for seven years.

Who processes data for us

Vercel Inc. — hosting of this website and the associated request logs.
Google LLC — Google Tag Manager, which loads the analytics configuration in your browser once consent has been granted, and BigQuery, where analytics events are stored and queried.
Jitsu, self-hosted by us — the analytics collector runs on a server we control in Germany (EU). No third-party analytics vendor receives your events from it.

We do not pass personal data to anyone else unless the law requires it.

International transfers

Vercel Inc. and Google LLC are established in the United States. Where personal data reaches them outside the European Economic Area, the transfer is covered by the European Commission's Standard Contractual Clauses together with the additional safeguards those providers apply. Our own analytics collector runs inside the EU.

Your rights

Under the GDPR you have the right to:

access the personal data we hold about you;
rectify it when it is wrong or incomplete;
erase it ("right to be forgotten");
restrict our processing of it;
portability — receive it in a structured, machine-readable format;
object to processing based on our legitimate interest;
withdraw consent at any time, without affecting the lawfulness of processing before you withdrew it.

To exercise any of these, email reinier@data-stables.nl. We answer within one month. We may ask you for enough information to establish which data is yours — for an anonymous analytics identifier that usually means telling us the identifier value stored in your own browser, because we have no other way to link it to you.

Complaints

If you think we handle your personal data incorrectly, tell us first — we would rather fix it. You also have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

Changes to this policy

We update this page when the site or the way we process data changes. The date at the top always shows the current version.