Privacy statement

Who is responsible

Kalmify is responsible (the “controller”) for the personal data described here. For questions about this statement or about your data, use the contact form and we reply within two working days.

What we collect

When you use the contact form, we receive:

• your name
• your email address
• your company name, if you fill it in
• your message

We don’t use cookies, analytics or tracking, and we don’t load anything from third parties: the font and all images are hosted on this website itself. Your choice of a light or dark theme is stored only in your own browser, for the current tab, and is never sent to us.

Why, and on what basis

We use your details only to answer your message and, if you ask for it, to follow up with a proposal. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR), or otherwise our legitimate interest in replying to the messages we receive (Article 6(1)(f) GDPR). We never use your details for newsletters or marketing, and we never sell them.

Who else processes your data

The form is handled by our hosting provider’s web server, which forwards your message to our mailbox. The website itself does not keep a copy.

Our email runs on Google Workspace, so your message is stored in our Google mailbox. Google may process data outside the European Union, and does so under the EU–US Data Privacy Framework and the European Commission’s standard contractual clauses.

Like every web host, our hosting provider keeps standard server logs, such as IP address, date and time and the page requested, for security and to keep the site running.

How long we keep it

We keep your message as long as we need it to handle your question, and delete it no later than one year after our last contact. If your message leads to an assignment, we keep what belongs to the administration of that assignment for seven years, as Dutch tax law requires.

Security

The website only works over an encrypted connection (https), and the form does not store your message on the web server. The form’s spam protection works without cookies and without collecting extra data.

Your rights

You can ask us to see, correct or delete your personal data, to restrict or object to its use, or to receive it in a portable format. Send your request through the contact form and we respond within one month.

If you think we handle your data incorrectly, you can file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Changes

If the way this website handles personal data changes, we update this statement and the date at the top.