Version 1.0 – August 2026
1. Who we are
WoodWebs is a sole proprietorship of [Full name], established in Veldhoven and registered in the Trade Register of the Chamber of Commerce under number [KvK number].
WoodWebs is the data controller for the processing of personal data as described in this privacy policy.
Contact details
E-mail: info@woodwebs.com
Website: https://woodwebs.com
2. What personal data do we process?
We may process the following categories of personal data:
A. Data you provide to us yourself
- Name, company name, job title
- Address details
- E-mail address and telephone number
- Content of messages you send via contact forms, e-mail or other channels
- Data required for the performance of an assignment (for example login credentials, content, texts, images)
B. Data collected automatically
- IP address
- Browser and device information
- Visiting behaviour on our website (pages, time, source)
C. Data in the context of our services
- Invoice and payment details
- Correspondence and project-related information
We do not process special categories of personal data (such as health data, race, political opinions or criminal data), unless this is strictly necessary and you have given explicit consent.
3. For what purposes and on what legal basis do we process data?
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to questions and requests via the website or e-mail | Legitimate interest / taking pre-contractual measures |
| Performing agreements (design, development and maintenance of websites) | Performance of the contract |
| Invoicing, administration and compliance with legal obligations | Legal obligation |
| Improving our website and services (analysis) | Legitimate interest |
| Sending relevant information or newsletters (if applicable) | Consent |
| Securing our systems and preventing misuse | Legitimate interest |
4. How long do we retain personal data?
We do not retain personal data longer than necessary for the purposes for which they were collected:
- Contact and correspondence data: maximum 2 years after the last contact, unless an agreement is concluded
- Data in the context of an assignment: during the term of the agreement + 7 years (statutory retention period for administration)
- Invoice and payment data: 7 years (tax retention obligation)
- Analytics data (anonymised or pseudonymised): maximum 26 months
5. Do we share data with third parties?
We never sell your data to third parties.
We may share personal data with:
- Processors that help us provide our services, such as:
- Hosting and cloud services (for example Cloudflare)
- E-mail and productivity services (Google Workspace)
- Accounting software (Moneybird)
- Form and communication tools (for example Formspree)
- Government authorities, if we are legally obliged to do so
We conclude a data processing agreement with all processors, so that they process the data solely according to our instructions and with appropriate security.
Some of our service providers may process data outside the European Economic Area. In that case we ensure appropriate safeguards (such as the EU Standard Contractual Clauses).
6. Cookies and similar technologies
Our website may use cookies and similar technologies.
- Functional cookies: necessary for the operation of the website. These do not require consent.
- Analytical cookies: to understand how visitors use the website. Where possible we use privacy-friendly settings or anonymised data.
- Marketing cookies: only with your consent.
You can manage or refuse cookies via your browser settings. Refusing functional cookies may affect the functioning of the website.
7. Security
We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure and alteration. This includes, among other things:
- Secure connections (HTTPS)
- Access control and strong passwords
- Regular updates of software and systems
- Limited access to personal data on a need-to-know basis
8. Your rights
You have the following rights with regard to your personal data:
- Right of access
- Right to rectification
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to data portability
- Right to object to processing based on legitimate interest
- Right to withdraw consent (where processing is based on consent)
You can exercise these rights by sending a request to info@woodwebs.com. We will respond in principle within 30 days.
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens – www.autoriteitpersoonsgegevens.nl).
9. Changes
We may amend this privacy policy from time to time. The most recent version is always available on our website. In the event of important changes we will inform you where necessary.
10. Contact
For questions about this privacy policy or about the processing of your personal data you can contact us via:
WoodWebs
[Full name]
E-mail: info@woodwebs.com
Website: https://woodwebs.com