Last updated: June 4, 2026
Privacy statement
Van Oosten Advies B.V. respects your privacy and complies with the General Data Protection Regulation (GDPR). This page describes which data is processed via this website, why that happens, and what your rights are.
Data controller
Van Oosten Advies B.V., based at Wilgestraat 40, 4431 CH 's-Gravenpolder (the Netherlands), Chamber of Commerce 42077708, VAT NL869603504B01, is the data controller for the data you share with me via this website. For privacy questions, contact info@van-oosten.nl.
What is processed
I process only the data you yourself enter into the contact form: name, email address, organisation (if entered), subject and message content. The hosting environment additionally writes server logs (IP address, timestamp, requested URL) for security and error troubleshooting. These logs are kept briefly and are not linked to individuals. For visitor insight I use Vercel Analytics: a cookieless, aggregated measurement that records no personal data. When an unexpected browser or server-action error occurs, technical error data (URL, error message, stack trace, browser version and IP address) is sent to a self-hosted error-tracking server in the Netherlands (GlitchTip). UTM parameters from campaign links (e.g. ?utm_source=linkedin) are kept only in the page's working memory (not in cookies, localStorage or sessionStorage) and only forwarded when you actually submit the contact form; they contain marketing-category tags only, no personal data.
Purpose and legal basis
Your contact details are used to reply to your message and, if so wished, to prepare or carry out an engagement. Legal basis (GDPR art. 6): performance of a contract (art. 6(1)(b)) or your consent at the moment of submitting the form (art. 6(1)(a)). Server logs, cookieless analytics, error tracking and marketing attribution via UTM parameters are processed on the basis of a legitimate interest (art. 6(1)(f)): safe and functioning service delivery and insight into which campaigns lead to enquiries.
Retention
Messages received through the contact form are kept for at most two years, or shorter where a request reasonably has no further follow-up. Server logs are kept for at most 30 days. Error-tracking logs (GlitchTip) are kept for at most 90 days. UTM parameters are kept only in the page's working memory and disappear when you reload or leave the page; they are not stored on your device. Vercel Analytics retains aggregated data without personal data.
Sub-processors
The following sub-processors are engaged to operate this website. A data-processing agreement (DPA) is in place with each. Vercel Inc. (United States): hosting of the site, Vercel Analytics and Vercel Speed Insights; Resend Inc. (data processed in Ireland, EEA): sending of the contact form by email; Upstash Inc. (United States / Ireland): a Redis database used to rate-limit the contact form (on a hashed IP) and to manage the temporary site lock. Transfers outside the EEA take place under the EU Standard Contractual Clauses. I process error reports on a self-hosted server in the Netherlands (GlitchTip); it is under my own control and is therefore not an external sub-processor. The processing stays within Van Oosten Advies B.V.
Your rights
You have the right of access, rectification, erasure, restriction and objection, the right to data portability, and the right to withdraw previously given consent at any time. Send such a request to info@van-oosten.nl; I respond within one month.
Right to complain
If you have a complaint about how I handle your data, you may submit it to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl. An honest attempt to resolve it directly is appreciated, however; please contact info@van-oosten.nl first.
Changes
This privacy statement may be amended when the service or applicable legislation changes. The date of the last change is shown at the top of this page.