Version 1.1 · Updated 2 October 2026
1. Who is responsible?
Fieldwork Digital Vof is responsible for processing personal data for our own services and correspondence. Our address is Tollensstraat 98, 3035 NM Rotterdam, the Netherlands. Chamber of Commerce number: 42179249. For questions or privacy requests, temporarily email stijnmaatman2008@gmail.com. Our business email will be added later.
2. Contact form and email
The form sends your name, company name, email address, requested service and message to our mail server. A phone number is optional. The mail server forwards your enquiry to stijnmaatman2008@gmail.com. Your email address is used as the reply address. Form content is not saved to a website database, cookies or browser storage. The hosting provider may temporarily process email in a delivery queue. Your browser may remember details using autofill. Do not share passwords, identity documents, payment details or sensitive personal data.
3. Purpose and legal basis
We use received correspondence to answer your question and prepare a possible quote. For a quote you request for yourself, the basis is taking steps at your request before entering into a contract. We handle general questions and contact on behalf of a company on the basis of our legitimate interest in business correspondence; we limit processing to what is needed and consider your privacy. We do not use contact details for newsletters, profiling or advertising. The form checkbox acknowledges that you have read this policy; it is not marketing consent.
4. Retention
We delete correspondence about enquiries that do not lead to a project no later than three months after the last contact, including relevant inbox and sent messages. This is done manually, rather than by an automatic deletion function on this website. If a project follows, we establish what client data is needed and its retention before further processing. Data needed for a specific legal obligation or an ongoing legal dispute is retained only while necessary. The three-month period does not apply to technical information processed by hosting or email providers under their own policies.
5. Hosting, email and other websites
This website is hosted by DirectVPS using Plesk. The server processes technical information for delivery and security, including IP addresses and request information in server logs. The contact form uses the hosting mail server for delivery. Enquiries arrive in the stated Gmail inbox at Google. We do not sell your data. Legal obligations may require disclosure to competent authorities. Portfolio images are hosted on this website; external websites load only when you open their links and have their own policies.
6. International processing
Google uses international infrastructure; email processing may also occur outside the European Economic Area. Google’s privacy policy describes the relevant safeguards. The hosting provider processes information under its own arrangements and privacy policy. This does not mean all information is processed exclusively in the Netherlands.
7. Security
The website uses HTTPS, server-side validation, a signed security token and a functional security cookie. Input and request checks help limit spam and duplicate delivery. Temporary hashes and a sending status are stored outside the public webroot; no readable names, email addresses, messages or IP addresses. These records expire after at most one hour and are removed on a subsequent sending attempt. If there are no new requests, expired records may remain on the server longer. The hosting provider manages technical logs, email queues and any backups under its own arrangements. Security and retention of received email also depend on the inbox and provider. No security measure provides an absolute guarantee.
8. Your rights and changes
You may ask us to access, correct or delete your data. Where applicable, you may also request restriction or portability and object to processing based on legitimate interests. If we ever rely on consent, you may withdraw it. Send requests to the email address above. We normally respond within one month; if a legal extension is needed, we will inform you within that month. We may ask for minimal additional information to verify your identity. You may complain to the Dutch Data Protection Authority. When the website or processing changes, we update this policy and its date.