Privacy statement.

1. Who is responsible?

Studio Besselink, operated by Uriah Besselink in Nijmegen, is responsible for the processing described here. Privacy contact: info@studiobesselink.com. Registration and VAT details are stated on quotations and invoices where applicable.

2. Data that may be processed

Studio Besselink does not ask for special-category personal data. Do not send health information, identity documents or other sensitive data unless it is strictly necessary and agreed in advance.

• Website request and security data, such as IP address, date and time, requested URL, browser, device and diagnostic information.
• Contact data and messages, such as your name, email address, organisation, question and attachments.
• Quotation, project and administration data, such as correspondence, specifications, delivery information, transaction and invoice data.
• Information from public business registers or other public professional sources when needed to identify a customer or assess an enquiry.
• Inputs entered in the online core-adapter tool are processed in your browser. The site does not require an account and does not intentionally upload or store those model inputs.

3. Purposes and legal bases

• To answer an enquiry, assess whether work can be accepted and prepare an agreement: steps before entering into a contract and legitimate interests.
• To perform, document and manage an assignment or supply a product: performance of a contract.
• To invoice, collect amounts and keep the legally required administration: performance of a contract and legal obligation.
• To secure, diagnose and maintain the website, prevent misuse and keep business systems reliable: legitimate interests.
• To establish, exercise or defend legal claims and retain supporting records: legitimate interests and legal obligations.

4. Cookies and tracking

The site does not use analytics, advertising trackers, marketing profiles, accounts or a newsletter. Studio Besselink does not intentionally place non-essential cookies. The hosting and security provider may use strictly necessary technical mechanisms to deliver and protect the site.

5. Service providers and sharing

Data may be processed by providers needed for website hosting and security, email, file storage, accounting, payment, production or professional advice. Cloudflare provides website delivery and security. Only data reasonably needed for the relevant service is shared. Data may also be disclosed where required by law, to protect legal rights, or as part of a business transfer subject to appropriate confidentiality. Personal data is not sold.

6. Processing outside the EEA

Some service providers may process data internationally. Where required, appropriate contractual and organisational safeguards are used. Cloudflare publishes information about its GDPR safeguards and international data transfers.

7. Retention

• General enquiries that do not become an assignment: normally no longer than two years after the last substantive contact.
• Quotations, project records, contracts, transactions and invoices: while they remain relevant and generally seven years after their administrative relevance ends where tax law requires this.
• Technical and security logs: for the limited period applied by the hosting or security provider.
• Backups are overwritten according to the applicable backup cycle and are not used for ordinary access.
• Data may be retained longer where reasonably needed for a legal duty, unpaid invoice, claim, dispute or evidence of an agreement.

8. Security and customer communications

Reasonable technical and organisational measures are used to protect data, but no internet, email or storage system can be guaranteed completely secure. The sender is responsible for choosing what to include in an email or attachment. Studio Besselink may refuse or remove unsolicited sensitive data that is not needed for the stated purpose.

9. Your rights

Depending on the situation, you may request access, correction, deletion, restriction, portability or object to processing. You may withdraw consent where processing is based on consent. These rights are not absolute: Studio Besselink may retain or withhold information where the law permits or requires this, including to protect the rights of others, confidential business information or legal claims. Send a request to info@studiobesselink.com. Identity may be verified and additional information may be requested before a request is completed. Manifestly unfounded or excessive requests may be refused or charged where the law allows.

10. Questions and complaints

Questions can be sent to info@studiobesselink.com. You may also submit a complaint to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Dutch Data Protection Authority

11. Changes

This statement may be updated when the site, services or legal requirements change. The current version and date are shown on this page.