Privacy statement

Walkin Web Studio (“we”, “us”) is responsible for the personal data described here. This statement explains what we process when you visit this website or contact us, why, and what your rights are under the General Data Protection Regulation (GDPR).

• Walkin Web Studio
• Email: info@walkinwebstudio.com

• When you use the contact form: your name, email address and message, and, if you choose to add them, your phone number and organisation.
• When you sign up for the newsletter: your email address, the language of the page and the date you signed up.
• When you email us: your email address and whatever you include in the message.
• When you visit the site: to deliver the pages and protect the site against abuse, our hosting provider processes your IP address and technical request details, such as the browser and the page requested. We don’t use these to identify you.

To see how the site is used, we use Cloudflare Web Analytics. It counts visits without cookies and without building a profile of you: it records the page, the site you came from, the type of browser and device, the country and how fast the page loaded, and it does not follow you across visits or other websites. We don’t use advertising or tracking tools, and this website sets no cookies of its own.

• To answer your enquiry or prepare a proposal: steps at your request before a contract (art. 6(1)(b) GDPR).
• To carry out a project we have agreed: performance of a contract (art. 6(1)(b)).
• To send you the newsletter you signed up for: your consent (art. 6(1)(a)). You can unsubscribe at any time with the link in every newsletter or by emailing us.
• To keep the website secure and available: our legitimate interest (art. 6(1)(f)).
• To understand how the site is used and improve it, with cookieless visitor statistics: our legitimate interest (art. 6(1)(f)).
• To keep our records as the law requires, for example for tax: legal obligation (art. 6(1)(c)).

• Enquiries that don’t lead to a project: up to 24 months after our last contact.
• Newsletter sign-ups: until you unsubscribe.
• Client and invoice records: seven years, as Dutch tax law requires.
• Technical request data: only as long as our hosting provider needs it for security and operation.

We don’t sell personal data. We share it only with parties that help us run the site and the business, under a data processing agreement where the law requires one:

• Cloudflare, Inc.: hosting, network, cookieless visitor statistics (Web Analytics), and sending contact form messages and newsletter sign-ups to our inbox.
• Our email provider: receiving and storing email.
• Our accountant and bookkeeping software: where the law requires records.
• Authorities: only when the law or a court order requires it.

Cloudflare is based in the United States. It is certified under the EU-U.S. Data Privacy Framework, and transfers are also covered by the European Commission’s Standard Contractual Clauses.

All traffic to the site is encrypted (TLS). Access to the inbox and our systems is limited to the people who need it, with two-factor authentication where available.

You can ask us for access to your data, or to correct, delete, restrict or transfer it, and you can object to processing based on our legitimate interest. Email info@walkinwebstudio.com. We respond within one month and may ask you to confirm your identity first.

If you’re not satisfied with how we handle your data, please tell us first. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl.

When the site or our way of working changes, for example if we add a mailing service, we update this statement and the date at the top first.