Privacy Policy

1. Controller

Controller: Alex V. Nita

Location: Netherlands · Europe

Email: hello@alexvnita.com

There is no separate Data Protection Officer for this practice. For privacy questions, email the address above.

2. What data I process

I only process data that is needed to run this website and to respond to professional enquiries.

• Contact and booking form: name, email, company, role, company size, engagement type, project description, timeframe, and project scale.
• Email correspondence: whatever you choose to send to my inbox.
• Technical data from hosting and cookieless analytics: IP address (processed by the hosting/analytics provider), user-agent, pages viewed, referrer, and approximate timing — used to keep the site secure and understand aggregate traffic.
• I do not intentionally collect special-category data (e.g. health, religion, political opinions).

3. Purposes and legal bases

Processing is limited to the purposes below.

• Responding to enquiries and assessing fit for fixed-scope work — GDPR Art. 6(1)(b) (steps prior to a contract) and/or Art. 6(1)(f) (legitimate interest in answering business requests).
• Delivering agreed services and related project communication — Art. 6(1)(b) (contract).
• Operating, securing, and improving the website (hosting, error prevention, aggregate analytics) — Art. 6(1)(f) (legitimate interest in a reliable professional site).
• Meeting legal obligations (e.g. tax or accounting records where applicable) — Art. 6(1)(c).

4. Retention

I keep data only as long as needed for the purpose, then delete or anonymise it.

• Contact form and unsuccessful enquiries: typically up to 12 months after the last message, unless a longer conversation is ongoing.
• Client project and contract records: for the duration of the engagement and thereafter as required for legal, tax, or dispute purposes (often several years under Dutch commercial practice).
• Server and analytics logs held by processors: according to their standard retention (often short-lived / aggregated).

5. Recipients and processors

I use carefully chosen service providers who process data on my behalf. Typical categories:

• Website hosting and edge delivery (currently Vercel).
• Privacy-oriented web analytics (Vercel Web Analytics — cookieless; see the Cookie Policy).
• Transactional email for form delivery (Resend, when configured).
• Email and productivity tools used to read and reply to messages.

6. International transfers

Some providers may process data outside the European Economic Area (for example in the United States). Where that happens, I rely on appropriate safeguards such as an adequacy decision and/or Standard Contractual Clauses, as offered by the provider. You can ask for more detail by emailing me.

7. Your rights

Under the GDPR/AVG you may request access, rectification, erasure, restriction, portability (where applicable), and objection to processing based on legitimate interests. You may also withdraw consent where processing was based on consent.

To exercise these rights, email hello@alexvnita.com. I will respond within the timeframes required by law (generally within one month).

You also have the right to lodge a complaint with the Dutch Data Protection Authority: Autoriteit Persoonsgegevens (AP) — https://autoriteitpersoonsgegevens.nl/

8. Security

I use HTTPS, reputable hosting, and access controls appropriate for a small professional practice. No method of transmission or storage is perfectly secure; please avoid sending highly sensitive data through the public contact form.

9. Children

This website is aimed at business professionals. It is not directed at children under 16, and I do not knowingly collect their data.

10. Changes

I may update this policy when services, tools, or law change. The “Last updated” date at the top of the page will change accordingly.