Privacy statement

Who is responsible

Baes1 AI Native Studio, a sole proprietorship in the Netherlands, is responsible for the processing of personal data described here. For questions or requests, write to info@baes1.nl.

Visiting the website

The site is a set of static pages. It sets no cookies and loads nothing from other companies: fonts, images and scripts come from the site itself. Baes1 uses no analytics service.

The site is hosted by Cloudflare. To deliver the pages and block attacks, Cloudflare processes technical data such as your IP address. Cloudflare's dashboard shows Baes1 overall traffic figures, such as page requests per day and per country, and details of requests it blocks as attacks. Baes1 keeps no visitor logs of its own.

The legal basis is Baes1's legitimate interest in a working and secure website (Article 6(1)(f) GDPR). Cloudflare processes these data on Baes1's behalf under its data processing agreement and keeps them no longer than needed for that purpose.

The contact form

The form on the contact page sends nothing by itself. It opens your own email program with a prepared message, which you read and send yourself.

While you type, your browser keeps a draft in that tab, so a reload does not wipe it. The draft stays on your device and never reaches Baes1. It is removed once your email is prepared, and your browser normally clears it when you close the tab.

When you send an email

An email to info@baes1.nl contains your email address, usually your name, and whatever you write or fill in on the form. Baes1 uses it to answer you and, if you want, to talk about working together. Sending an email is voluntary; without your email address Baes1 cannot reply.

If your email is about a possible assignment, the legal basis is taking steps at your request before an agreement (Article 6(1)(b) GDPR). For other messages, it is Baes1's legitimate interest in answering them (Article 6(1)(f) GDPR).

Cloudflare Email Routing forwards the email to Baes1's Gmail account, where Baes1 reads it. Cloudflare keeps a delivery log with the sender, recipient, subject and time of each message for about 30 days, and no copy of the message itself. Google provides Gmail under its own terms and privacy policy.

Your data is not sold or used for advertising, and no decisions about you are made automatically.

Outside the EU

Cloudflare and Google (through Google LLC) may process data in the United States. Both take part in the EU-US Data Privacy Framework, which the European Commission considers to give adequate protection.

How long emails are kept

Emails are kept as long as needed to deal with your question, and deleted no later than 12 months after the last contact. If a conversation leads to an assignment, the relevant correspondence becomes part of the business records, which Dutch tax law requires to be kept for seven years. Baes1 keeps that correspondence to meet this legal obligation (Article 6(1)(c) GDPR).

Your rights

You can ask to see, correct or delete your data, to restrict its use, and to receive it in a portable format. Write to info@baes1.nl; you get an answer within a month.

Where Baes1 relies on its legitimate interest, you can object at any time. Baes1 then stops, unless there are compelling reasons to continue.

If you think your data is handled wrongly, you can complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or to the data protection authority in the EU country where you live or work.

Changes

When this statement changes, the date at the top changes with it.