Privacy statement

Who we are

Blijnder Web (sole proprietorship)

Scheepmakershaven 2, 3261 KN Oud-Beijerland, the Netherlands

Chamber of Commerce (KvK) 71355839

Phone +31 6 50713256

For all questions about privacy: privacy@blijnder.nl

Blijnder has no data protection officer. For a business of this size, that is not required.

What we process and why

2.1 Contact form and demo request

Data:

name, email address, name of your community or organisation, what you are interested in and what you type in the text field yourself.

Purpose:

to reply to your request, to plan an introductory meeting and, if relevant, to make a quotation.

Legal basis:

taking steps before a contract, at your request (Article 6(1)(b) GDPR).

Retention period:

two years after the last contact. If it becomes an assignment, we keep the records for seven years, because the Dutch Tax Administration requires that.

You do not have to fill in the form. Without your name and email address, we cannot reply. Do not type sensitive data in the text field, such as health data. We do not ask for it and we do not need it.

2.2 Contact by phone

If you call us, we process your phone number and what you tell us, to answer your question. The legal basis and the retention period are the same as for the contact form.

2.3 Email

We send email from our websites through Postmark. Postmark keeps the content and the sending data of a message for 45 days.

2.4 Statistics

We use Google Analytics 4 to measure how our websites are used, so that we can improve them. This happens only if you give consent for the Statistics category.

Legal basis:

consent (Article 6(1)(a) GDPR).

Retention period:

at most 14 months at Google. The Google Analytics cookie itself stays in your browser for up to 24 months.

2.5 Advertising

We advertise on Facebook and Instagram. To measure which ads lead to a request, and to show visitors an ad again later, we use the Meta Pixel. It measures four events: viewing a page, viewing a landing page, sending the contact form and clicking our phone number.

We also send these events directly from our server to Meta, through the Conversions API. With them goes an encrypted (hashed) version of your email address, your IP address and your browser data, so that Meta can link the event to the right account. Encrypted does not mean anonymous here: it is still personal data.

Legal basis:

consent (Article 6(1)(a) GDPR), Marketing category. If you do not give it, we measure nothing and send nothing.

Retention period:

at most 24 months at Meta.

For collecting and sending this data, Blijnder and Meta Platforms Ireland Limited are joint controllers (Article 26 GDPR). We are responsible for placing the pixel and for asking your consent. Meta is responsible for what happens to the data after that. The agreements about this are in the Meta controller addendum. You can go to us and to Meta to exercise your rights.

OpenAI (ads in ChatGPT). We also advertise in ChatGPT. To measure which ads lead to a request, we place the OpenAI advertising pixel on stedt.nl and we send conversion events to OpenAI. These events contain the fact that you requested a brochure, the time, the page and a click reference that OpenAI added to your ad click. If your contact details are on the page, they are encrypted (hashed) in your browser before they are sent; we do not send your email address to OpenAI in readable form. Hashed data is still personal data: it is pseudonymised, not anonymised.

Data:

the fact that you requested a brochure, the time, the page, the click reference of your ad click and, if they are on the page, encrypted (hashed) contact details.

Purpose:

to measure which ads in ChatGPT lead to a request.

Legal basis:

your consent (Article 6(1)(a) GDPR). You give it in the cookie banner, in the Marketing category. Without that consent, we do not place the pixel and we send no conversion events. You can withdraw your consent at any time through Cookie preferences.

Retention period:

OpenAI decides how long it keeps this data itself. OpenAI does not publish a fixed period for this; see the privacy policy of OpenAI.

For this data, we and OpenAI are each an independent controller. This means that OpenAI decides itself what it does with the data after it receives it, and is accountable for that itself. What OpenAI does with advertising data is in the privacy policy of OpenAI.

2.6 Visiting the website

Our web servers record technical data, including your IP address, to make the websites work and to protect them against abuse.

Legal basis:

legitimate interest, namely the security and availability of our websites (Article 6(1)(f) GDPR).

Retention period:

at most three months.

2.7 Our own visitor measurement

We count ourselves how visitors use our websites: which pages you view, for how long, and through which link or campaign you arrived. This happens on our own server. We share this data with nobody.

For this, your browser keeps a random visitor ID in local storage (localStorage). This lets us see whether you visited the website before. With each visit, we record your IP address, your browser and your screen size.

Legal basis:

legitimate interest, namely knowing which pages and campaigns work, so that we can improve our websites (Article 6(1)(f) GDPR).

Retention period:

visits with IP address and browser at most 12 months. After that, only a count remains per visitor ID: the dates of the first and the last visit, the numbers and the first source, without an IP address.

If you do not want this, you can object through privacy@blijnder.nl, or clear the local storage of your browser for our websites.

Who we share data with

Apart from this, we share data only if the law requires us to.

Transfer outside the European Economic Area

Google and Meta also process data in the United States. This is allowed, because both parties take part in the EU-US Data Privacy Framework. The European Commission has decided that this framework gives an adequate level of protection.

For OpenAI, data can be processed outside the EEA. The transfer is based on the standard contractual clauses of the European Commission (module one, between two independent controllers), unless another valid transfer mechanism applies.

For Postmark, a data processing agreement with standard contractual clauses of the European Commission applies, included in the terms of Postmark.

Automated decision-making

We make no decisions about you based on automated processing or profiling with legal effects.

Your rights

You have the right to:

• see your data
• have your data corrected
• have your data deleted
• have the processing restricted
• object to the processing
• receive your data in a common file format, or have it transferred

If you gave consent, you may withdraw it at any time. This applies to the future only: what happened before stays lawful. You change your consent for cookies through the cookie banner on the website.

Send your request to privacy@blijnder.nl. We reply within one month.

If you are not satisfied with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) through autoriteitpersoonsgegevens.nl.

Cookies

Our websites have a cookie banner with four categories. Nothing is ticked in advance, except the necessary cookies. You can change your choice at any time through the banner.

We use Google Tag Manager to manage these cookies. Google Tag Manager itself places no cookies, and it loads the cookies of the Statistics and Marketing categories only after you have given consent for them.

Apart from cookies, our own visitor measurement uses the local storage of your browser. See 2.7.

Changes

We change this statement when our websites or our way of working change. The current version is always at blijnder.nl/privacy. When there are important changes, we say so on the website.

Change history

• Version 1.3, 30 October 2026: OpenAI added as an advertising party for stedt.nl (pixel and conversion measurement).
• Version 1.2, 27 October 2026: OpenAI ad measurement added (2.5, 3 and 6).