Daylights Consultancy processes personal data when you visit this website or get in touch. This statement explains what data that is, why I process it, who I share it with and how long I keep it.
Who is responsible
Daylights Consultancy, registered with the Dutch Chamber of Commerce under number 90291875,
VAT identification number NL004807320B73. Contact: Marco Schilder.
Email: [email protected]
Phone: +31 6 54 67 44 87
Postal address: Willem Alexanderstraat 4, 5721 LX Asten, the Netherlands
This website
This site runs on a server I manage myself. No cookies are set, there are no visitor analytics, no tracking pixels and no advertising networks. Fonts, images and stylesheets are served from my own server, so no external content or advertising services are called. Traffic to this site does pass through Cloudflare; see ‘Who I share data with’.
The web server does keep ordinary log files, containing your IP address, the time of your visit, the page requested, the HTTP status code, the referring page, and the type of browser and operating system you use.
- Purpose: keeping the site running, investigating faults, and recognising and blocking abuse such as automated attacks.
- Legal basis: legitimate interest (Article 6(1)(f) GDPR), namely the security and availability of my own website.
- Retention: 30 days, after which log files are deleted automatically.
Getting in touch
If you email or call me, I process the data you provide yourself: your name, your email address or phone number, and the content of your message. I use it only to answer your question and, where relevant, to prepare an engagement.
- Legal basis: legitimate interest and, where an engagement is in prospect, steps prior to entering into a contract (Article 6(1)(b) and (f) GDPR).
- Retention: two years after our last contact. If it leads to an engagement, I keep the administration for seven years, as Dutch tax law requires.
Recommendations on this site
This site shows recommendations from peers and clients, with their name and job title, published with their consent. If you are quoted here and would rather not be, send me a message and I will remove it — no explanation needed.
Who I share data with
I do not sell data and do not use it for advertising. I share only what is necessary to operate, and only with parties bound by the GDPR themselves.
- Cloudflare, Inc. provides DNS and protection for the domain. Traffic to this site passes through Cloudflare's network, which means Cloudflare processes your IP address and the technical characteristics of your request in order to block attacks and abuse.
- Microsoft Ireland Operations Ltd. provides the email service (Microsoft 365 Exchange Online) through which I receive and store correspondence.
Both may process data outside the European Economic Area. This takes place under the European Commission's standard contractual clauses and the additional safeguards these providers apply.
Beyond that, I share data only where a legal obligation requires it.
Security
The site is reachable only over an encrypted connection (HTTPS). I maintain the server and apply security updates myself, and access to the log files is limited to me. If you think you have found a vulnerability, email me — I take such reports seriously and will respond.
Automated decision-making
No profiling or automated decision-making takes place.
Your rights
You have the right to access your data, to have it corrected or erased, to have processing restricted, to object to processing based on legitimate interest, and to receive your data in a portable format. Send your request to [email protected] and I will respond within four weeks.
If you are unhappy with how I handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Changes
If the website or the way I process data changes, I will update this statement.