Privacy Policy

Last updated: 11 September 2026

Hanneke Verhoef respects the privacy of visitors to this website and recognises the importance of protecting personal data.

This Privacy Policy explains what personal data may be collected through hannekeverhoef.com, why it is processed, how it is handled and what rights you have under applicable data protection law, including the General Data Protection Regulation (GDPR).

1. Data Controller

This website is operated under the trading name:

Verhoef Media is the data controller for personal data processed through this website.

2. Access to the Website

Access to and use of this website is intended for personal and legitimate business purposes.

Information available on this website may not be collected or used for unsolicited commercial, political, advertising or other unauthorised purposes.

3. Personal Data We May Collect

Personal data may be collected when you contact us, submit a project inquiry, use the website chat, request information or otherwise interact with the website.

This may include:

• Name
• Email address
• Business or company name
• Information about your project, business or requested service
• Messages submitted through contact forms or live chat
• Files or attachments that you voluntarily provide
• Communication history relating to your inquiry
• Technical information such as IP address, browser type and device information
• Website usage information where permitted by applicable law

4. Purpose of Processing

Personal data collected through this website is primarily used to maintain contact with you and, where applicable, to process inquiries and provide requested services.

Data may be used for purposes including:

• Responding to questions and project inquiries
• Communicating about potential or existing projects
• Preparing proposals or quotations
• Managing customer and prospect records
• Managing project opportunities and follow-up
• Providing agreed services
• Improving website functionality and business processes
• Maintaining the security and proper functioning of the website
• Complying with legal and administrative obligations

5. Legal Basis for Processing

Personal data is processed where one or more lawful bases under the GDPR apply.

These may include:

• Processing necessary to take steps at your request before entering into a contract.
• Processing necessary for the performance of an agreement.
• Processing necessary for legitimate business interests, such as responding to inquiries and maintaining business relationships.
• Processing required to comply with a legal obligation.
• Processing based on your consent where consent is legally required.

6. Project Inquiry Forms

When you submit a project inquiry through this website, the information you provide may include your name, email address, business name, project type, project stage, the problem you would like to solve and any additional message you choose to provide.

This information may be transferred through automated workflows and stored in systems used to organise and follow up project inquiries.

7. Live Chat

The website may provide a live chat function.

When using the chat, you may be asked to provide your name and email address so that your inquiry can be answered or the conversation can be continued if you leave the website.

Messages, contact details and files voluntarily submitted through the chat may be stored as part of the communication record relating to your inquiry.

8. Service Providers and Data Processors

Third-party service providers may be used to operate the website, communicate with visitors and manage business processes.

Depending on how you interact with the website, these providers may include:

• WordPress and website hosting providers for website operation and hosting.
• HighLevel for contact management, live chat, conversations, project inquiries and opportunity management.
• n8n for workflow automation and transferring data between connected business systems.
• Hetzner for hosting infrastructure used for certain self-hosted automation services.
• Email and communication providers used to send and receive messages.

These providers may process personal data only where necessary to provide the services for which they are used.

9. International Data Transfers

Some service providers may process personal data outside the European Economic Area.

Where required, appropriate safeguards are used in accordance with applicable data protection law.

10. Your Rights

Under the GDPR, you may have the right to request:

• Access to your personal data
• Correction of inaccurate personal data
• Deletion of personal data where legally permitted
• Restriction of processing
• Objection to certain processing
• Data portability where applicable
• Withdrawal of consent where processing is based on consent

Requests can be submitted by email to [EMAIL].

Requests will be handled within the period required by applicable law. Under the GDPR this will normally be within one month, although this period may be extended where permitted because of the complexity or number of requests.

11. Disclosure to Authorities

Personal data may be provided to competent authorities where disclosure is required by law or follows a lawful and properly substantiated request.

12. Required Information

Where certain information is required in order to use a website function or submit a request, the required nature of that information will be indicated when the information is requested.

13. Marketing Communications

Information submitted through a contact form or live chat is not automatically treated as consent to receive unrelated marketing communications.

Where consent is legally required for marketing communications, such communications will only be sent after the appropriate consent has been obtained.

14. Retention of Personal Data

Personal data will not be retained longer than necessary for the purpose for which it was collected, unless a longer retention period is required by law.

Business administration, invoices, agreements and related records may be retained for the period required under Dutch tax and administrative law.

15. Cookies

This website may use functional cookies that are necessary for the website to operate correctly.

Analytical, tracking or other non-essential cookies will only be used in accordance with applicable legal requirements.

Where consent is required, such cookies will not be activated until appropriate consent has been obtained.

16. Website Security

Reasonable technical and organisational measures are used to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

No internet-based system can be guaranteed to be completely secure. Visitors should therefore avoid submitting highly sensitive information through standard website forms or live chat unless this is necessary and appropriate arrangements have been made.

17. Third-Party Websites

This website may contain links to websites operated by third parties.

Hanneke Verhoef has no control over the content or privacy practices of third-party websites and is not responsible for their operation.

18. Complaints

If you believe your personal data has not been handled correctly, you may contact us first so that the matter can be addressed.

You also have the right to lodge a complaint with a competent data protection authority.

In the Netherlands, the supervisory authority is the Autoriteit Persoonsgegevens.

19. Applicable Law

This Privacy Policy is governed by Dutch law, subject to any mandatory rights that may apply under applicable data protection legislation.

20. Changes to this Privacy Policy

This Privacy Policy may be amended when the website, business processes, service providers or applicable legal requirements change.

The current version published on this website is the version that applies until it is replaced by a newer version.

21. Contact

Questions about this Privacy Policy or the processing of personal data can be sent to:

Hanneke Verhoef
Email: hello@hannekeverhoef.com