Privacy statement
In short
- No cookies, no tracking, no ads.
- I only use your data to reply to you, prepare a conversation or carry out an assignment.
- I never sell your data. The website and my email run on servers in the Netherlands and the EU.
Who am I?
Eva Schulze, independent consultant (sole proprietorship). I am responsible for processing your personal data on this website.
- Address
- (visible with JavaScript, or ask by email)
- Chamber of Commerce (KvK)
- (visible with JavaScript)
- VAT number
- (visible with JavaScript)
- Send me an email
What data do I process, and why?
Contact form and email. When you fill in the form or email me, I receive your name, email address, your company name if you give it, and your message. I use this data to answer your question and, if relevant, to plan a follow-up conversation. The form sends your message to me by email. Your message is not stored on the website itself. To prevent spam and abuse, the server keeps an irreversible code (hash) of your IP address for a maximum of one hour. Your IP address itself is not stored. Legal basis: my legitimate interest in replying to you, or preparing a possible assignment.
Visiting the website. Like every website, my hosting provider keeps technical log files, such as your IP address, the time, the page requested and your browser type. They are needed to keep the website secure and available and to prevent abuse. Legal basis: legitimate interest (security of the website).
Booking a call. The "Book a call" and "Book an introductory call" buttons take you to my booking page in Google Calendar. There you enter your name and email address. Google processes this data itself, under the Google privacy policy. I receive your name, email address and the time you chose, so we can have the call. Legal basis: preparing a possible assignment.
Preparing a conversation. Before a conversation, I look at public business information about your organisation and about you: your LinkedIn profile, your company's website and other public sources. This is business information only, such as your role, your career and news about your company. Sometimes I ask an AI assistant (Claude) to summarise this public information. Legal basis: my legitimate interest in being well prepared.
Requesting a quote. If you request a quote, I enter your name, company, contact details and the details of the quote in Moneybird, the software I use for quotes and invoices. Legal basis: preparing a possible assignment.
If you become a client. For an assignment, I process your contact details, our agreements, the information needed to carry out the assignment, and the details needed for invoicing. I sometimes have conversations with clients transcribed automatically, but only if you agree beforehand. Legal basis: performance of the contract, my legal obligation for the accounts, and for transcripts your consent, which you can withdraw at any time.
You are not obliged to give me any data. Without an email address, however, I cannot reply to you. I do not use automated decision-making and do not create profiles of you.
How long do I keep your data?
- Code of your IP address (spam protection): a maximum of one hour.
- Technical log files of the hosting provider: a maximum of 12 months.
- Messages, contact details and quotes: if your message or quote does not lead to working together, I delete it after two years at the latest. That way I can pick up a later question without you having to explain everything again.
- Preparing a conversation: I delete my notes and summaries two years after the conversation at the latest, if it does not lead to working together.
- Clients: as long as the law requires, for example 7 years for the accounts.
Who do I share data with?
I don't sell your data. I only share it with service providers I need for my work, and only as far as necessary:
- mijn.host (website hosting and email). A data processing agreement is in place with mijn.host. Its servers are located in the Netherlands and the EU.
- Moneybird (quotes, invoices and bookkeeping, for anyone who requests a quote and for clients).
- Google (booking page, see above).
- Anthropic (the AI assistant Claude): for summaries of public information when preparing a conversation, and for my own business processes. I do not enter sensitive client data there. The use of my chats to train the AI is switched off. For Claude, Anthropic's own privacy policy applies.
- Wispr Flow (dictating my notes, and transcribing conversations with clients if they agree).
Outside the EU. Google, Anthropic and Wispr Flow are American companies, so data may be processed in the United States. This only happens with the safeguards the GDPR requires, such as the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses. Would you like to know more about these safeguards, or receive a copy? Just send me an email.
Security
The website uses an encrypted connection (https). The contact form is protected against spam and abuse, and my email address and company details are not readable in the source code. My accounts are protected with strong, unique passwords and, where possible, two-step verification: besides the password, a second confirmation is then needed, for example a code on my phone.
Cookies
This website does not use cookies. If you choose a language yourself, your browser remembers that choice locally. It stays on your own device and is not sent to me or anyone else.
Links to other websites
This website links to other websites, such as LinkedIn and Google. Their own privacy statements apply there.
Your rights
You can ask to see, correct or delete your data. You can also ask me to restrict its processing, object to its processing, or request your data in a common file format to pass on to someone else. If you have given consent, you can withdraw it at any time. Just send me an email. I will reply within one month. To make sure nobody else requests your data, I may ask you to confirm who you are. Not happy with how I handle your data? You can file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.
Changes
I update this privacy statement when needed, for example when I start using a new service provider. The date at the top shows when it was last updated.