Legal
Privacy Policy
What we collect, why, where it is stored, and how to make us stop.
This policy explains what personal data ionita.nl collects, why, where it goes, and what you can require us to do about it. It was rewritten in September 2026 when the site was rebuilt, because the previous version described a different platform.
1. Who is responsible
Ionita Consulting B.V. is the data controller.
- Registered in Utrecht, The Netherlands
- Chamber of Commerce (KvK) 53149874
- VAT NL850769085B01
- Email info@ionita.nl
We have not appointed a Data Protection Officer. Data protection questions go to the address above.
2. What we collect
If you submit the contact form: your name, email address, organisation if you give one, which of our services your enquiry is about, and whatever you write in the message. We ask for these because we cannot reply without them.
Server logs. Our hosting provider records the usual technical information for every request, including IP address, browser type and the page requested. This is used to serve the site and to investigate abuse and faults.
Analytics, only if you allow it. Nothing analytical runs unless you opt in through the cookie banner. If you do, we collect aggregate page statistics. We do not build profiles, we do not track you across other websites, and we do not use advertising cookies.
We do not knowingly collect data from children, and we do not buy personal data from anyone.
3. Cookies and similar storage
This site sets no cookies unless you consent to analytics. There is no advertising or profiling technology on it.
We store your cookie choice in your browser’s local storage, not in a cookie, so that recording your decision does not itself place storage before you have decided. You can change or withdraw that choice at any time using the Cookie preferences link in the footer of every page. Withdrawing is exactly as easy as consenting.
Strictly necessary storage, which keeps the site working and records your consent choice, does not require consent under the ePrivacy rules.
4. Why we are allowed to process it
| What | Lawful basis |
|---|---|
| Replying to your enquiry | Steps taken at your request before entering a contract, Art. 6(1)(b) |
| Server logs, security and fault diagnosis | Legitimate interests in keeping the site available and secure, Art. 6(1)(f) |
| Analytics | Your consent, Art. 6(1)(a), withdrawable at any time |
We do not use your contact details to send marketing. If that ever changes we will ask first, separately.
5. Who else processes it, and where
We use two processors. Both are bound by data processing agreements.
Netlify, Inc. hosts the site and receives contact form submissions.
Netlify is a United States company, and data it processes for us, including your form submission, is transferred to and stored in the United States. We say this plainly because our previous policy claimed no data left the EU, which was not accurate for this platform.
That transfer relies on the European Commission’s Standard Contractual Clauses, and Netlify, Inc. states that it commits to the EU-US Data Privacy Framework. You can ask us for a copy of the relevant terms.
An analytics provider, only if you consent to analytics. We use a provider that does not set cookies and does not collect data that identifies you individually.
We do not sell personal data, and we do not share it with anyone else except where the law requires it.
6. How long we keep it
- Contact form submissions: 24 months, after which they are deleted automatically. A scheduled job runs daily and removes any submission older than that period, so the limit is enforced rather than merely stated. If an enquiry becomes a client engagement, the records move under our normal client record retention instead.
- Server logs: retained by our host on their standard schedule, which is short.
- Analytics: aggregate only, and never tied to you as an individual.
Ask us to delete your enquiry sooner and we will.
7. How we protect it
The site is served over HTTPS only, with a strict content security policy and no third-party scripts beyond the analytics you may have consented to. Access to form submissions is restricted to people at Ionita who need it to respond to you.
8. Your rights
Under the GDPR you can ask us to:
- give you a copy of the personal data we hold about you
- correct it if it is wrong
- delete it
- restrict or object to how we use it
- send it to you or another provider in a portable format
- withdraw consent at any time, which does not affect processing already carried out
Email info@ionita.nl. We respond within one month.
If you are unhappy with how we have handled your data, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl. You can also complain to the authority in the EU country where you live.
9. Changes
We update this policy when what we actually do changes, and we date it when we do. This version is dated 3 September 2026.