Last updated 18 September 2026. It describes what I do with your data, why, and what you can ask me to do about it.
This text is a draft pending legal review. Items in brackets are still being confirmed. If something here is unclear or wrong, mail info@inenova.com and I will fix it.
Inenova, registered in the Netherlands, Chamber of Commerce 93667167, VAT ID NL005034602B71, [registered address]. For anything about privacy: info@inenova.com or +31 6 38 73 78 12. Inenova has no data protection officer; one is not required for an organisation this size.
Data: name, email address, company name, website and your message; your phone number if you call or WhatsApp me. The contact form also records technical data such as your IP address, which the form service keeps to block abuse. If you took the scan, its outcome (the three areas that came out on top) is placed in your message automatically. You can edit or delete that before you send.
Purpose: answering your question and, if it fits, making you a proposal.
Legal basis: steps taken before entering into a contract, if you ask for a quote or proposal. For a general question, legitimate interest: being able to answer you.
Is it required? Getting in touch is voluntary. In the form, name, email and message are required; company and website are optional.
Kept for: 12 months after the last contact if no engagement follows.
Data: name, contact details, company details, Chamber of Commerce number, VAT ID, billing address, payment details and correspondence.
Purpose and basis: carrying out the engagement (performance of a contract); keeping invoices and records (legal obligation under Dutch tax law).
Kept for: data used to carry out the work, 2 years after the engagement ends; invoices and accounting records, 7 years.
Data: IP address and technical data (browser, time, page requested) in the hosting server logs.
Purpose: keeping the site working and secure. Basis: legitimate interest. Kept for: the retention period of the hosting provider, [to confirm with Firebase Hosting].
Data: pages viewed, approximate location (country and city, derived from a truncated IP address), device and browser type, how you arrived at the site, and which buttons, links and forms you used.
Purpose: seeing which pages actually help people and which do not, so I can improve the site.
Tools: Google Tag Manager and Google Analytics 4 (measurement ID G-BK8WKHCYP9).
Basis: your consent. Google Tag Manager and Analytics are not loaded at all until you press Allow in the bar at the bottom of the page, so before that click nothing is measured and no analytics data is sent. Press Decline, or ignore the bar, and they are never loaded. Note that this is about measurement only: the site is hosted on Google Firebase Hosting, so Google already sees your IP address as the host that serves you this page, whatever you choose here (see section 3).
Kept for: user and event data in Google Analytics is being set to 14 months [to be confirmed once measurement runs]. Aggregated standard reports are not covered by that setting. There is no advertising, no remarketing and no profiling.
The Barlow typeface is served from this website’s own server. Your browser does not contact Google, Adobe or any other font service to display this page.
Data: the outcome of the scan (three areas), not your individual answers. It is stored only in your own browser (sessionStorage) and disappears when you close the tab. I receive nothing unless you go on to send the contact form, in which case section 1 applies.
I do not use your data for a mailing list, I never sell or rent it, and I do not make decisions about you by automated means alone.
| Party | What for | Where |
|---|---|---|
| Google (Firebase Hosting) | hosting this website | [region to confirm] |
| Google (Tag Manager, Analytics) | measurement, loaded only after you press Allow | EU and US, under the EU-US Data Privacy Framework |
| Web3Forms | processing the contact form and mailing it to me; spam checks via CleanTalk and Akismet | AWS, Cloudflare and Hetzner infrastructure; submissions kept up to 3 years [to confirm and shorten] |
| [email provider] | [to confirm] | |
| SnelStart | quotes, invoices, bookkeeping | Netherlands |
| Tax authorities, accountant | legal obligations | Netherlands |
Transfers outside the EU: where a party processes data in the United States, that happens under the EU-US Data Privacy Framework or standard contractual clauses. You can ask for a copy or a reference at info@inenova.com.
This site sets no cookies at all until you press Allow, and it never sets advertising cookies or builds profiles. Two things do happen without a cookie and without your choice, because the page cannot work otherwise: the hosting provider sees your IP address to serve you the page, and the scan keeps its outcome in your own browser for as long as the tab is open. Sending the contact form passes what you typed to the form service, which only happens when you press send.
_ga, _ga_*) are placed only after you press Allow, and expire after 2 years.The site runs over an encrypted connection (https). Business accounts use two-factor authentication and a password manager, and access is limited to what is needed. [to confirm as each account is set up]
You can ask to see your data, have it corrected or deleted, have processing restricted, object to processing based on legitimate interest, and have your data handed over in a portable form. Mail info@inenova.com and I will respond within a month. If you are not happy with how I handle your data you can complain to the Dutch Data Protection Authority, autoriteitpersoonsgegevens.nl.
I may update this policy. The date at the top shows when that last happened.
I only measure visits if you allow it. No advertising cookies, no profiles. How I handle your data.