1. Data Controller
This website is operated by David Velarde, based in the Netherlands. For any privacy-related inquiries, you can contact me at:
2. Data We Collect
When you submit the contact form on this website, we collect the following information:
- Name - to address you properly
- Email address - to respond to your inquiry
- Company name - (optional) - to understand your business context
- Service interest - to provide relevant information
- Message - your inquiry or project description
- IP address - for security and anti-spam purposes
3. Legal Basis for Processing
We process your personal data based on legitimate interest (Article 6(1)(f) GDPR). When you submit the contact form, you are requesting that we contact you regarding our services. Processing your data is necessary to fulfill this request.
4. How We Use Your Data
Your data is used exclusively to:
- Respond to your inquiry
- Provide information about our services
- Send you a confirmation email when you submit the form
We do not use your data for marketing purposes, nor do we share it with third parties for their own purposes.
5. Data Storage and Security
Your data is stored securely in Amazon Web Services (AWS) infrastructure located in the European Union (Frankfurt, Germany). All data is encrypted at rest and in transit.
We use the following AWS services:
- DynamoDB - for secure data storage (encrypted)
- Simple Email Service (SES) - for sending emails
- Lambda - for processing form submissions
6. Data Retention
Your contact information is retained for a maximum of 5 years from the date of submission, after which it is automatically deleted. You may request earlier deletion at any time (see your rights below).
7. Your Rights Under GDPR
As a data subject, you have the following rights:
- Right of access - request a copy of your personal data
- Right to rectification - request correction of inaccurate data
- Right to erasure - request deletion of your data
- Right to restrict processing - request limitation of processing
- Right to data portability - receive your data in a structured format
- Right to object - object to processing based on legitimate interest
To exercise any of these rights, please contact: gdpr@itmove.nl
I will respond to your request within 30 days. If you believe your rights have been violated, you have the right to lodge a complaint with the Dutch Data Protection Authority ( Autoriteit Persoonsgegevens).
8. Cookies and Tracking
This website uses Cloudflare Turnstile for bot protection on the contact form. Turnstile may set functional cookies necessary for its operation. We do not use analytics cookies, advertising cookies, or any other tracking technologies.
9. Third-Party Services
We use the following third-party services that may process your data:
- Amazon Web Services (AWS) - cloud infrastructure provider (EU region)
- Cloudflare - CDN, security, and bot protection
Both providers are compliant with GDPR and have appropriate data processing agreements in place.
10. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.
11. Contact
If you have any questions about this privacy policy or how we handle your data, please contact:
David Velarde
Email: gdpr@itmove.nl