Skip to content
Bas Webdesign

Privacy policy

Last updated: October 18, 2026

This privacy policy explains which personal data Bas Webdesign processes, why we do so, how long we keep it and what your rights are under the General Data Protection Regulation (GDPR, in Dutch: AVG).

1. Who we are

Bas Webdesign is the controller for the processing described in this policy. You can reach us here:

  • Email: info@baswebdesign.com
  • Phone: +31 6 15 17 28 37 (WhatsApp)

2. What data we process and why

Contact form

When you fill in the contact form, we receive your name, your email address, your phone number (if you enter it), the topic and your message.

  • Purpose: to answer your question.
  • Legal basis: our legitimate interest in responding to questions you send us (Article 6(1)(f) GDPR). If your question is about a project, the legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR).

Quote form

When you request a quote, we receive your choices (package, number of pages and maintenance) and your name, your email address, your phone number (if you enter it), your company name, your sector, the address of your current website and your notes.

  • Purpose: to schedule an intro call and send you a proposal with a fixed price.
  • Legal basis: taking steps at your request before entering into a contract (Article 6(1)(b) GDPR).

If you become a client

If you become a client, we also use your data to carry out the project and to invoice you.

  • Purpose: to carry out the project, invoice and keep our records.
  • Legal basis: performance of the contract (Article 6(1)(b) GDPR) and legal obligations, such as the Dutch tax retention requirement (Article 6(1)(c) GDPR).

Visiting this website

  • Hosting of this website: this website runs on Vercel. On every visit, Vercel processes technical data such as your IP address and browser details, to serve and secure the site.
  • Statistics: we use Vercel Web Analytics. It works without cookies and only shows us totals, such as the number of visits per page.
  • Spam check: the forms use Cloudflare Turnstile to check that a human is filling them in. Turnstile processes technical data for this, such as your IP address and browser details.
  • Preventing abuse: to stop someone from sending a large number of messages in a row, we count how many messages were sent from an IP address in the last 10 minutes. This only happens in the server's working memory. Your IP address is not saved to a file or database for this.
  • Legal basis: our legitimate interest in a working, secure website without spam (Article 6(1)(f) GDPR).

3. Who receives your data

We don't sell your data. We only share it with parties that help us do our work (processors):

  • Vercel: hosting of this website and cookieless statistics (Vercel Web Analytics).
  • Resend: delivering messages from the forms to our mailbox.
  • Cloudflare: spam check on the forms (Turnstile).
  • Our email service: for our mailbox and our email with you.
  • Apify and Hunter: for business email to companies (see section 6).

We also share data when the law requires it, for example with the Dutch Tax Administration (Belastingdienst).

4. Data outside the European Economic Area

Some processors may also process data outside the European Economic Area (EEA). They do so on the basis of appropriate safeguards, such as the European Commission's standard contractual clauses.

5. How long we keep data

We don't keep your data longer than we need to answer your question or carry out the project. After that, we only keep it when the law requires it. For example, we keep invoices and records for 7 years, because of the Dutch tax retention requirement.

Separate periods apply to business email to companies. You'll find them in section 6.

6. Business email to companies

Bas Webdesign sometimes emails businesses with an offer for a new or better website. This is how it works.

Where the data comes from

  • Google Maps: public business data, such as company name, website and town. We collect it with the tool Apify.
  • Your website: we look at and measure your public website, for example how fast it loads and whether it works well on mobile.
  • Hunter: through Hunter (hunter.io) we find your company's business email address and check that it exists. We prefer general addresses, such as info@. We also send the emails themselves through Hunter.

What data

Company name, website, the business email address, town, the measurement results of your website, and when we emailed you and whether you replied.

Legal basis

Our legitimate interest in bringing our services to the attention of businesses that may find them useful (Article 6(1)(f) GDPR). Every email is about your own website and includes an easy way to unsubscribe.

Retention

We keep this data for up to 6 months. After that we delete it, unless you reply and want to be in touch, or become a client.

Objecting and unsubscribing

Don't want any more email from us? Use the unsubscribe link in the email, reply with "unsubscribe" or email info@baswebdesign.com. We then delete your data from our lists. We only put your email address and your website's domain name on a block list, together with the date and the reason. We keep that list for as long as needed to make sure we never contact you again.

7. Your rights

You have the right to:

  • access your data;
  • have incorrect data corrected;
  • have your data deleted;
  • restrict processing;
  • object to processing based on legitimate interest;
  • receive your data in a common file format (data portability).

Send your request to info@baswebdesign.com. We respond within one month. Sometimes we may ask you to confirm that the request comes from you.

Not happy with how we handle your data? Let us know first, and we'll look for a solution together. You can also file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

8. Security

We protect your data with appropriate measures. This website uses an encrypted connection (https), and only those who need the data for their work can access it.

9. Cookies

This website doesn't place any tracking or marketing cookies. Vercel Web Analytics works without cookies, and your language choice is not stored in a cookie.

10. Changes

We may update this privacy policy, for example when the way we work changes. The date of the latest change is shown at the top of this page. What applies if you become a client is set out in our terms and conditions.

A question about your data? Email info@baswebdesign.com.