Privacy policy

Who we are

The data controller is VNSTER. You can reach us through the contact form on this site.

What we collect, and why

When you use the contact form or request a Case Review, we process the details you choose to submit: your name, work email address, company, role, and the description of your situation. We use this information for one purpose: responding to your enquiry and preparing for a possible engagement. The legal basis is our legitimate interest in responding to business enquiries (Art. 6(1)(f) GDPR) and, where you ask us to, taking steps prior to a contract (Art. 6(1)(b) GDPR).

Like most websites, our hosting infrastructure processes technical data (IP address, request logs) as strictly necessary to serve the site securely. We do not use this data to profile visitors.

Cookies and local storage

This site sets no advertising or cross-site tracking cookies. We store exactly one value on your device: your cookie preference itself, saved in your browser’s local storage when you make a choice in the consent banner. It never leaves your device.

We currently run no analytics. If we ever introduce a privacy-friendly analytics tool, it will load only for visitors who chose “Accept all”, and this policy will be updated first.

Processors and sharing

We sell nothing and share nothing, with two functional exceptions: our hosting provider (which serves the website) and our email delivery provider, Resend, which transmits form submissions to our inbox under a data-processing agreement. Both process data on our instructions only. Resend, Inc. is based in the United States; that transfer relies on the European Commission’s adequacy decision for the EU–US Data Privacy Framework and on standard contractual clauses.

Retention

Enquiry correspondence is kept for up to 24 months after our last contact, so a returning conversation has its context, then deleted. If an enquiry becomes an engagement, the relevant records are kept as required by contract and by Dutch and EU commercial and tax law.

Your rights

You can request access to, correction of, deletion of, or a copy of your personal data, restrict or object to its processing, and withdraw consent where processing is based on it. Write to us through the contact form and we will respond within one month. You can also lodge a complaint with your supervisory authority; in the Netherlands that is the Autoriteit Persoonsgegevens.