privacy.md

Privacy Policy

Version: 1.3; Last updated: November 12, 2026

In the event of any discrepancy between the Dutch and the English version of this document, the Dutch version prevails.

This website is operated by Bas de Kort (sole proprietorship, CoC 42038027). This policy describes which data I process and how I handle your privacy.

Controller

Bas de Kort
Kerkeakker 3, 6674 EM Herveld
Contact: basdekort.nl/en/contact
Phone: +31 6 28 45 68 62

Which data do I process?

This website collects as little personal data as possible. For visitor analytics I use my own cookieless solution that runs on my own server; no external trackers or third-party analytics services are active. Specifically, I process:

Visitor analytics (Pulse). This website uses its own cookieless visitor analytics to see how the site is used: which pages are visited, how visitors move through the site, traffic sources, device type, browser and operating system, and clicks on buttons and links. No cookies are set or read. No IP address and no full browser identifier (user agent) is stored: these are used only briefly to calculate a daily-renewed, non-traceable visitor identifier and to roughly determine device, browser and operating system. Because that identifier changes every day, linking visits across multiple days is structurally impossible. Visits with a Do Not Track or Global Privacy Control signal, logged-in administrators and automated visitors (bots) are not counted. All data stays on my own server and is not shared with third parties. Because no cookies and no personal data are involved, no consent is required for this.
Theme preference cookie. When you change the light/dark mode, a functional cookie theme is stored with the value light or dark and a retention period of one year. This cookie contains no personal data and, under the cookie law, requires no consent.
Contact form. When you use the contact form, I process the data you enter yourself (name, email address and message) so that I can answer your question. The message is sent to me by email and is also stored in a local log file on the server. Logs older than 3 months are deleted automatically.
Anti-spam logging. Attempts rejected by the spam filters are logged separately, without the content of the message. I only keep the time, the reason for rejection and a hashed (anonymized) IP address. These logs, too, are automatically deleted for entries older than 3 months.
Server logs. The website runs on a server under my own management. The server software keeps technical logs of visits by default (such as IP address, user agent and time) for security and debugging. I do not actively use these logs for analysis, and they are cleaned up automatically over time in line with the standard rotation settings.

Sharing with third parties

I do not share data with third parties, unless I am legally obliged to do so. Mail sent through the contact form passes through the mail server of my hosting provider; the standard processing terms of that provider apply.

Embedded videos

Some articles contain a YouTube video. When the page loads, only an image from my own server is shown; nothing is requested from YouTube yet. If you click play, I first ask for your consent. Only if you choose "Load video" is the video loaded via youtube-nocookie.com, the variant of YouTube (Google) that tracks less. From that moment YouTube receives, among other things, your IP address, YouTube may store cookies or similar data in your browser, and the Google privacy policy applies. Your consent only applies to that one video at that moment; I do not store your choice. If you do not choose "Load video", nothing is shared with YouTube.

Retention periods

Theme preference cookie: at most one year after your last visit.
Visitor analytics (Pulse): raw events at most 90 days; after that only anonymized daily totals are kept, for longer-term trends.
Contact form submissions (log file on the server): three months.
Anti-spam log (rejected attempts, without message content): three months.
Email in my mailbox:
- One-off inquiries or prospects without follow-up: at most twelve months, then deleted.
- Client correspondence during an ongoing collaboration: for as long as the collaboration lasts.
- Client correspondence after the collaboration has ended: kept for at most twenty-four months for aftercare and possible disputes, then deleted or anonymized.
- Invoices, contracts and tax-relevant correspondence: seven years (statutory tax retention obligation, Article 52 of the Dutch General State Taxes Act, AWR).

Your rights (GDPR)

You have the right to access, rectification, erasure and objection regarding the processing of your data. Use the contact form to submit a request. I respond within 30 days.

Complaints

If you have a complaint about the way I handle your data, I would like to hear it via the contact form so that I can resolve it. You also have the right to lodge a complaint with the Dutch Data Protection Authority, Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

Changes

This privacy policy may be amended when the way of processing changes. The version and date at the top indicate when the policy was last updated.

legal.json

{
  "company_name": "Bas de Kort",
  "legal_form": "sole proprietorship",
  "trade_names": ["Bas de Kort", "LengthOfRope"],
  "address": "Kerkeakker 3, 6674 EM Herveld, NL",
  "chamber_of_commerce": "42038027",
  "vat_id": "NL004476145B32",
  "contact": { "form": "basdekort.nl/en/contact", "telephone": "+31628456862" },
  "documents": [ "privacy", "terms and conditions", "data processing agreement" ]
}