How we handle your personal data

This statement explains which data we use, why we need it, and how to request access, correction, or deletion.

At a glance

  • We use your data to answer your enquiry, work with you, or consider your job application.

  • We do not sell your personal data. We share it only when needed for these purposes or required by law.

  • You can email your privacy questions to info@10kb.nl.

Who is responsible?

10KB is responsible for the personal data we process for our own business operations. You can reach us at:

This statement covers our website, correspondence, job applications, and services. When we process data in an application on behalf of a client, a data processing agreement sets out those arrangements. Please contact the organization providing that application with questions about that data.

Which data do we use, and why?

Contact and enquiries

When you call, email, or fill in our contact form, we use your name, email address, telephone number, optional company name, and message. We use this information to answer your enquiry and discuss a possible collaboration.

Form submissions are stored and forwarded to us by email. We also record the submission time and delivery status so we can check whether the enquiry arrived successfully. The required fields allow us to handle your enquiry through the form. You can also email or call us directly.

When preparing or performing a contract, we rely on the contractual legal basis. For other enquiries, our legal basis is our legitimate interest in handling correspondence.

Services and administration

We process contact and company details, agreements, correspondence, and invoice and payment information to work with you. We do this to perform our contract. For contact persons at business clients, maintaining the business relationship is our legitimate interest. Our tax administration is also subject to legal obligations.

Job applications

When you apply, we use your contact details, CV, motivation, and any portfolio or code examples you share to assess your application and stay in touch. The legal basis is taking steps at your request before a possible employment contract. We ask for your consent if we want to retain your details for a future vacancy.

Technical data and security

When you use the website, the servers process technical data such as your IP address, request time, and error messages. This is needed to serve the website and investigate problems or misuse. Our legitimate interest is a secure, working website. We limit this processing to what is necessary for that purpose.

The website does not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

How long do we keep data?

  • Contact and enquiries: no longer than needed to handle your enquiry. If no agreement is reached, we retain this data for a maximum of two years.
  • Client data: as long as needed for the collaboration and its completion. Basic tax records, including invoices, are generally subject to a statutory retention period of seven years.
  • Job applications: if your application is unsuccessful, we delete your data within four weeks after the procedure ends. We retain it for future vacancies only with your consent and for an agreed period.
  • Technical contact-form logs: application logs are retained for a maximum of one month. The form submission itself follows the retention period for contact and enquiries.

Where data is needed for a legal obligation or an ongoing dispute, we retain only the necessary data for as long as that reason applies.

Who do we share data with?

We use service providers for hosting, data storage, email, and administration. They receive access only to the data they need for their work. We make data processing arrangements with parties processing data on our behalf. We also share data when legally required.

Cookies and similar technologies

We use Plausible Analytics to measure visits to our website. This measurement starts before you make a choice in the cookie banner and continues if you decline cookies. Plausible does not set cookies or persistent visitor IDs. It processes data including the page visited, the referring website, and browser and device information. It uses your IP address and browser information to count visits but does not store them in raw form. Read more in Plausible's explanation of how it processes data.

We use Google Analytics to understand how visitors use our website and to improve it. The Google tag loads asynchronously. Until you consent to analytics cookies, we send limited measurements to Google without reading or setting these cookies. This also happens if you decline cookies. These measurements may include the page visited, browser information, the time, and the referring website. Measuring without cookies still involves sending data to Google.

If you accept analytics cookies, we also use cookies (_ga and _ga_*) to recognize repeat visits and measure website use more accurately. These cookies are configured to expire after a maximum of 180 days, which can be renewed through use. We do not use advertising cookies, Google Signals, or personalized advertising.

We load Leadinfo (Leadinfo B.V.) when you open the website, even if you decline analytics cookies. It helps us identify companies visiting our website. Leadinfo processes your IP address and visit information, such as pages viewed and timestamps, and connects these to company information. Our legitimate interest is to understand which companies are interested in our services. We use Leadinfo's cookieless tracking for 10kb.nl, so Leadinfo does not set cookies. For more information, see Leadinfo's privacy statement.

We store your cookie preference locally in your browser for up to 180 days. You can change your choice or withdraw consent using Cookie preferences in the footer. When you withdraw consent, we remove the Google Analytics cookies that this website can remove. Google then receives only limited measurements without analytics cookies. This does not automatically delete data previously collected by Google. You can also delete or block cookies in your browser settings.

Google processes these measurements for Google Analytics. For more information, see Google's explanation of data protection in Analytics.

What rights do you have?

Depending on the processing and the applicable legal conditions, you can:

  • access your personal data and receive a copy;
  • have incorrect data corrected or request deletion;
  • request restriction of processing;
  • object to processing based on a legitimate interest;
  • request portability of data you have provided;
  • withdraw consent. This does not affect the lawfulness of processing before withdrawal.

Email your request to info@10kb.nl. We normally respond within one month. For complex requests, this may be extended by up to two further months; we will inform you within the first month and explain why.

Where necessary, we check that the request comes from you, using as little additional information as possible. Do not send a copy of your identity document on your own initiative. If further identification is needed, we will discuss an appropriate method.

If you are dissatisfied with how we handle your data or request, you can submit a complaint to the Dutch Data Protection Authority.

How do we protect your data?

We limit access to people who need it for their work and use a secure HTTPS connection for the website and contact form. We take technical and organizational measures to prevent loss, unauthorized access, and misuse.

If you suspect that data is not properly protected or have discovered a possible data breach, contact info@10kb.nl or call 024-6690518.

Changes

We update this statement when our processing or the law changes. The date below indicates when this text was last updated.

Last updated: 22 September 2026.