Privacy and cookie policy

In short

These are the key points. You’ll find the full details below.

• Google Analytics only with your consent. Google Analytics only starts once you accept cookies. Until then, this website loads nothing from Google.
• Counting visits without cookies. Our own server counts visits without cookies and without storing anything on your device. Our web server doesn’t store your IP address.
• The contact form stores nothing. It prepares your message in your own email app. We only receive it once you send it from there.
• No advertising. We don’t use advertising cookies, Google signals or ad personalisation.
• We never sell your data. We only share it when necessary, for example with our hosting and email providers.
• You stay in control. You can change your choice at any time, and you can ask us to show, correct or delete your data.

Who we are

Broeders IT is responsible for processing personal data as described in this privacy and cookie policy. In the language of the General Data Protection Regulation (GDPR), we are the ‘controller’.

Chamber of Commerce (KVK) number: 97596078
Email: hello@broeders-it.com

Have a question about your privacy? Just email us.

When you visit our website

With every visit, your browser automatically sends technical data, such as your IP address, the time of your visit, the page you request, the website you came from and your type of browser and device. Our server needs this data to show you the website.

Our server only uses your IP address to send you the page and to turn it into a daily code in working memory (see Visitor statistics without cookies). It doesn’t store it: not in the log files and not in the error messages either.

Our web server, which runs at our hosting provider, does record for each visit: the time, the page you request (without the part after a question mark), the website you came from (only its domain name), which browser (with its version number), operating system and type of device you use, and a code that changes every day instead of your IP address. We use these log files to keep the website secure and working properly, for example to track down faults and recognise abuse, and for our visitor statistics without cookies. We don’t use them to find out who you are or to follow you.

Apart from that, this website doesn’t load any third-party services, such as external fonts, videos or social media. The only exception is Google Analytics, and only if you consent to it.

Visitor statistics without cookies

We want to know how often our website is visited and which pages are viewed. We count this on our own server, without cookies and without scripts. For these statistics, nothing is stored on or read from your device.

• What we count. Which pages are requested, on which page visitors arrive, which website they came from (only the domain name, such as google.com), what type of browser, operating system and device they use (computer, tablet or phone) and which pages don’t exist. We filter out visits by search engines and other bots as well as we can.
• A code that changes every day. To count visitors per day, the server turns your IP address, your browser details and the domain name into a code. It uses a secret key for this that is only kept in working memory and is replaced every day. Once the day is over, the key is gone; after that, the code can’t be traced back to your IP address. Tomorrow you get a different code: we don’t link visits on different days to each other.
• No IP addresses, no cookies. Your IP address isn’t stored. We don’t set cookies or use local storage for these statistics.
• Not shared. The statistics are kept on our own server at our hosting provider. Only we can view them, with a password. We don’t share them with anyone.
• Retention. We automatically delete the log files with the individual requests (with the daily code, without IP address) after 31 days at the latest. What we keep longer are only totals, such as the number of page views per day. These can’t be traced back to you.
• Legal basis. We do this on the basis of our legitimate interest: we want to improve our website. Because nothing is stored on or read from your device, we don’t ask for consent for this. You can object, though (see Your rights).

When you contact us

If you email us or use the contact form, we receive the information you give us yourself: your name and email address and, if you fill them in, your company name, your phone number, the topic and of course your message. We use this information to answer your question and, if you’d like, to prepare a proposal or quote for you.

The contact form doesn’t store anything and doesn’t send what you enter to us. It prepares your message in your own email app. Only when you send it from there does your email reach us, just like any other email. If you’ve allowed analytics, we only measure that the form opened your email app, and which topic you chose.

Our email provider processes our email on our behalf: it makes sure messages are delivered and stored.

You’re not obliged to give us any data, but without an email address we can’t reply to you.

When you’re a client

If we work together, we process the data we need to carry out and invoice the assignment: the names and contact details of your contact persons, your company details (such as your address, Chamber of Commerce number and VAT number), the agreements we make, and our quotes and invoices. The law requires us to keep part of this in our accounts.

When you use our managed hosting

With managed hosting, our servers hold data that belongs to you, such as the data of the users of your application or online shop. For that data, you are the controller and we are the processor: we only process it on your instructions and only as far as necessary to provide the hosting. The arrangements are set out in your service agreement and in section 10.4 of our terms of service.

So this policy doesn’t cover that data. If one of your users wants to exercise their privacy rights, that goes through you.

Website statistics with Google Analytics

We’d like to know how our website is used, so we can improve it. For that, we use Google Analytics 4, but only if you give your consent in the cookie banner.

• Without consent, nothing happens. Until you click ‘Accept’, this website doesn’t load a single script from Google and no request goes to Google. If you decline, it stays that way.
• What we measure. Which pages you view, for how long and in which language, whether you scroll (almost) to the bottom of a page, how you found our website, what kind of device and browser you use and roughly where you are (at the level of country or city). And whether you use certain features: whether the contact form opened your email app (with the topic you chose), whether you click an email address or another contact link, which links to other websites you click, whether you switch language and which frequently asked questions you open. We never see your name, email address or message.
• No advertising. Google signals and ad personalisation are switched off. The advertising signals in Google Consent Mode v2 always stay set to ‘denied’, even if you allow analytics.
• IP addresses are not stored. Google Analytics 4 does not log or store IP addresses.
• Google as processor. Google processes this data on our behalf, as a processor. In Google Analytics, we have turned off data sharing with Google. Google may also process data in the United States. This is covered by the EU–US Data Privacy Framework, under which Google is certified. The European Commission has decided that this framework adequately protects personal data.
• Cookies. Google Analytics uses the cookies _ga and _ga_E54D5136ZX. They are kept for up to 13 months after your last visit. You’ll find them in the overview under Cookies and local storage.
• Withdrawing consent. You can change your choice at any time via ‘Cookie settings’ at the bottom of every page, or with the button in the overview below. If you withdraw your consent, measurement stops immediately: we remove the Google Analytics cookies from your browser and nothing more is sent to Google.

Want to know how Google handles this data? Read Google’s explanation ‘How Google uses information from sites or apps that use our services’.

Cookies and local storage

Cookies are small text files that a website stores in your browser. Local storage (localStorage) works in a similar way, but what’s stored there stays in your browser and isn’t sent with requests to our server. We only use what’s listed below. We don’t use any other cookies or trackers, such as advertising cookies.

Functional: no consent needed

This storage makes the website work the way you expect. By law, it doesn’t require consent.

• cookie-consent

  Local storage

  Set by

  Broeders IT

  Purpose

  Remembers whether you allow analytics, when you made that choice and which version of our question you answered. That way we don’t have to ask you on every visit.

  Retention period

  Until you delete it. After 12 months, or if we change our question, we ask you to choose again.

Analytics: only with your consent

Google Analytics only sets these cookies after you click ‘Accept’.

• _ga

  Cookie

  Set by

  Google Analytics

  Purpose

  Recognises your browser by a random code, so we can count visitors without knowing who you are.

  Retention period

  Up to 13 months after your last visit.

• _ga_E54D5136ZX

  Cookie

  Set by

  Google Analytics

  Purpose

  Keeps track of which page views belong to the same visit.

  Retention period

  Up to 13 months after your last visit.

Changing your choice

You can change your choice or withdraw your consent at any time, via ‘Cookie settings’ at the bottom of every page or right here:

You can also delete or block cookies and local storage yourself in your browser settings.

Legal bases

We only process personal data when the GDPR gives us a legal basis for it. For us, there are four:

• Consent (Article 6(1)(a) GDPR) for Google Analytics and its cookies. You can withdraw your consent at any time. That applies from that moment on; processing before then remains lawful.
• Performance of a contract (Article 6(1)(b)) to prepare a quote when you ask for one, and to carry out and invoice an assignment.
• Legal obligation (Article 6(1)(c)) to keep our accounts as tax law requires.
• Legitimate interest (Article 6(1)(f)) to keep our website secure and working (the server logs), to count visits without cookies (see Visitor statistics without cookies), to answer your question when you contact us, to work with the contact persons at our business clients and to remember your cookie choice. We always weigh whether your interests outweigh ours. You can object to this (see Your rights).

How long we keep data

We don’t keep personal data longer than necessary for the purpose we received it for, unless the law requires us to keep it longer. After that, we delete it.

• Server logs: without IP addresses. We delete them automatically, after 31 days at the latest.
• Visitor statistics without cookies: only totals, such as the number of page views per day. These can’t be traced back to you, and we keep them without a fixed period.
• Emails and enquiries: as long as necessary to handle your question and any follow-up. If you become a client, they become part of your client file.
• Client details, quotes and invoices: for as long as we work together, and after that for as long as the statutory retention period for our accounts requires.
• Analytics: Google Analytics automatically deletes data about individual visits after the retention period we’ve set, at most 14 months. What remains are totals that can’t be traced back to you.
• Cookies and local storage: see the retention periods under Cookies and local storage.

Who we share data with

We never sell your data. We only share it with service providers we need for the purposes in this policy. They process the data on our behalf, as processors:

• Our hosting provider, where the server that runs this website is located (and therefore also the server logs and our visitor statistics).
• Our email provider, which processes and stores our email.
• Google, for Google Analytics, and only if you consent.

Beyond that, we only pass data on to others when the law requires us to.

Google may process data in the United States, under the EU–US Data Privacy Framework (see Website statistics with Google Analytics). If data ends up outside the European Economic Area in any other case, this only happens with the safeguards the GDPR requires, such as the European Commission’s standard contractual clauses.

Your rights

The GDPR gives you a number of rights over your personal data:

• Access: you can find out what data we hold about you and what we do with it.
• Rectification: if your data is incorrect, you can ask us to correct it.
• Erasure: you can ask us to delete your data, unless we’re legally required to keep it.
• Restriction: you can ask us to temporarily stop using your data, for example while we assess a request from you.
• Portability: you can request the data you gave us yourself in a common digital format, or ask us to pass it on to another party.
• Objection: you can object when we process your data on the basis of our legitimate interest.
• Withdrawing consent: you can withdraw your consent for analytics at any time via ‘Cookie settings’ at the bottom of every page.

Want to exercise one of these rights? Email us at hello@broeders-it.com. We’ll respond as quickly as possible, and within one month at the latest. Sometimes we’ll ask you to confirm who you are, so we don’t give data to the wrong person.

We never leave decisions about you to a computer alone: we don’t use automated decision-making.

Making a complaint

Not happy with how we handle your data? Please let us know first, and we’ll look for a solution together. You also always have the right to lodge a complaint with the Autoriteit Persoonsgegevens, the Dutch Data Protection Authority.

Security

We protect personal data with appropriate technical and organisational measures. For example, this website can only be reached over an encrypted connection (HTTPS). The measures we take for managed hosting are set out in section 10.6 of our terms of service.

Spotted something that isn’t right, or suspect a security problem? Let us know at hello@broeders-it.com.

Changes

We update this policy when our website or the way we work changes. At the top of this page, you can see when we last updated it. If anything changes in what we ask your consent for, we’ll ask you to choose again.

Questions about your privacy?

Do you have a question about this policy or your data? Email us at hello@broeders-it.com or send us a message via the contact form.