Privacy and cookies

1. Who is responsible

The controller for the processing of personal data is InFacts, the sole proprietorship of Dr. M.M.C. Meijer, established in Soest, the Netherlands, and registered with the Dutch Chamber of Commerce (KvK) under number 67633595. Contact: michelle@infacts-consults.nl.

2. Which personal data I process

• Data you provide through the contact form or by email: name, email address, organisation, phone number (optional) and the content of your message.
• Data of clients and their employees that is needed to prepare and carry out an assignment, such as names, positions and contact details.
• Data of training participants, such as names, preparation assignments and evaluations.

3. Why I process personal data

• To respond to your enquiry and, if you wish, to prepare a proposal (legitimate interest and steps prior to entering into an agreement).
• To carry out an agreement, including trainings and invoicing (performance of a contract).
• To comply with legal obligations, such as the statutory retention of financial records (legal obligation).

I do not use your data for automated decision-making or profiling, and I do not sell your data.

4. How long I keep personal data

• Enquiries that do not lead to an assignment: up to 12 months after the last contact.
• Client and assignment records, including invoices: 7 years, in line with the Dutch statutory retention period for financial records.
• Training evaluations: anonymised or deleted after the assignment has been completed and evaluated.

5. Sharing with third parties

I only share personal data with service providers that I need to run my business, and only under a data processing agreement. These are the hosting provider of this website and its contact form (Netlify, Inc.) and my email and office software provider (Microsoft). Where data is processed outside the European Economic Area, appropriate safeguards apply, such as the European Commission's standard contractual clauses. I share data with other parties only if the law requires me to.

6. Cookies and tracking

This website does not use cookies for tracking, advertising or analytics, and does not use third-party tracking tools. Fonts are hosted on this website itself, so no data is sent to external font services. That is why you do not see a cookie banner.

7. Security

I take appropriate technical and organisational measures to protect your personal data against loss and unauthorised access, such as an encrypted connection (HTTPS) and two-factor authentication on my accounts.

8. Your rights

You have the right to access, correct or delete your personal data, to restrict or object to its processing, and to data portability. You can send a request to michelle@infacts-consults.nl; I will respond within one month. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

9. Changes

I may update this privacy statement. The latest version is always available on this page.