Privacy Policy

1. Data Controller

Studio Bartholomeus, based in Leersum, the Netherlands, is responsible for the processing of personal data as described in this privacy policy. Chamber of Commerce and VAT numbers are available upon request via info@bartholomeus.studio.

2. What data do we collect?

We only process data that you actively provide to us, such as via the contact form or by email:

• Name and email address
• Phone number (if provided)
• Project description or enquiry

3. Purpose of processing

Your data is used solely to respond to your enquiry or quote request. We do not send newsletters and never sell your data to third parties.

4. Legal basis

Processing is based on your consent (Art. 6(1)(a) GDPR) or the performance of a contract (Art. 6(1)(b) GDPR).

5. Retention period

Personal data is not retained longer than necessary. Contact details are kept for a maximum of 2 years after last contact, unless a longer retention period is legally required.

6. Sharing with third parties

Your data is not shared with third parties unless legally required or necessary for the execution of an assignment. In that case, we enter into a data processing agreement.

7. Cookies

This website places no advertising cookies and shares no data with advertising networks. Four small cookies are used: one for your language preference, one session cookie when you submit a form, one that remembers which website and which page you arrived from (90 days), and one that gives your browser a random number inside the personal quote environment (1 year). These cookies contain no name, email address or IP address. We do not ask for consent, because they serve only our own aggregated statistics, are not shared with anyone and build no profiles. You can refuse or delete them in your browser; the website will keep working.

Visits to the website are counted in a simple, aggregated way: the page, operating system, device type, referring website and a coarse location at country and city level. Your IP address is not stored. To avoid counting the same visit twice on one day, an encrypted code that changes daily is derived using a secret key; that code cannot be reversed into an IP address and is deleted after 30 days. After that only counts per page per day remain. For the coarse location the IP address is truncated first, so only a broad network range and not your full address is sent to the geolocation service. No individual visitor profiles are built.

If you send an enquiry or receive a quote, we store which website and which page you arrived from, so we know which pages lead to a conversation. If you received a personal quote link, we record when it was opened, with what type of device and an encrypted code instead of your IP address, so we know the quote arrived. This information belongs to your commission and is not used for anything else.

8. Your rights

Under the GDPR you have the right to:

• Access your personal data
• Correct inaccurate data
• Erasure of your data ('right to be forgotten')
• Restriction of processing
• Data portability
• Object to processing

Requests can be sent to info@bartholomeus.studio. We respond within 30 days.

9. Complaints

You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

10. Changes

Studio Bartholomeus reserves the right to amend this policy. The most recent version is always available on this page.