Privacy Policy Marketing Maatwerk

1. Who is the data controller?

That's me:

• Name: Marketing Maatwerk
• Owner: Boris Kusters
• Email: info@marketingmaatwerk.nl
• Website: marketingmaatwerk.nl

For any questions about your privacy, you can reach me at the email address above.

2. What personal data do I process?

I process personal data because you use my services and/or because you provide this data to me yourself.

When requesting a free example or a free call (Dutch site):

There I ask for your name, company name, sector and email address, and if you want to give them your current website and phone number. I use these to make the example of your homepage or prepare the call, and to email you about it. I only phone you if you ticked "You may phone me"; you can withdraw that consent at any time by email or during the call. If you came through an advertisement, I store the tag of that advertisement and which version of the page you saw with your request, so I know which advertisement works.

When filling in the detailed request (intake):

Alongside your contact details I ask what I need to prepare for a call: your city, what kind of business you run, whether you already have a website or domain name and what is not working there, what you want the website to achieve, which examples you like, which features you think you need, which package appeals to you and when you want to go live. You decide how much you fill in; only your name, email address, goal and desired timing are required.

I keep requests for as long as they are commercially relevant, and in any case no longer than two years after contact ends, unless you become a client (in which case the client data retention period below applies). You can always ask me to delete a request sooner.

When you contact me through the contact form or booking calendar:

• First and last name
• Company name (optional)
• Email address
• Phone number (optional)
• Any other information you enter in the open fields of the form

When booking an appointment through the online calendar (Google Calendar):

• First name, last name, email address
• Phone number (optional), company name and company website (optional)

For general contact (by email or phone):

• Name, email address, phone number
• Any other information you share in your message

Trial with prepared replies:

In October 2026 I am testing, for a few weeks, an AI assistant that prepares replies to e-mail and WhatsApp messages. For messages sent to me I keep: your e-mail address or phone number, the time, a shortened version of your message (at most 500 characters, no attachments), the assistant's suggested reply and my own reply. The assistant sends nothing: I read and send every reply myself. Everything is deleted after 90 days; in an encrypted backup it can remain for at most 8 more days. Legal basis: legitimate interest (I want to know whether I can reply faster without the quality suffering). Do you not want to be in the log, or do you want to know what it holds? E-mail info@marketingmaatwerk.nl.

When you start an order and do not complete it:

If you start an order on the site and do not complete the payment, I may contact you once, by phone or email, to ask whether the payment did not work and whether I can help. For that I use what you entered in the order: your name, company name, email address, phone number if you gave one, and the plan or domain you chose. You will not get automated emails or reminders. I keep this data for 12 months, unless you become a client after all. You can always ask me to delete it sooner.

2b. Business outreach (B2B)

Marketing Maatwerk approaches Dutch SMEs whose website is outdated or technically flawed, with the aim of offering web design and web development services. In this context I process the following business data:

• Company name, website URL and sector
• Business email address and phone number, published on the company's own website
• Name of a contact person, if publicly listed on the website
• Geographic location (city/region)
• A quality analysis of the website

Legal basis: Legitimate interest (GDPR Article 6(1)(f)). I only approach companies that have published a contact invitation on their own website. Every email includes a clear opt-out option.

Retention periods: companies not yet contacted are kept for a maximum of 12 months. Companies that have been contacted are kept for a maximum of 3 years after the last contact moment. An opt-out request results in immediate deletion of all contact data; the email address and domain are permanently blocked to prevent repeat contact.

Objecting: Received an email from me and don't want to be approached again? Just reply, or send an email to info@marketingmaatwerk.nl stating you'd like to opt out. You'll be removed from my list immediately and permanently.

3. Why do I process this data?

To perform the agreement: the main reason is to deliver the service you approached me for. Think of drafting and sending a quote, getting in touch to discuss a project, carrying out the work, and sending invoices.

Consent: statistics with Google Analytics, measuring and re-showing advertisements with Google Ads and the Meta pixel, and phoning you after a request only happen with your consent. You give it in the cookie banner or with the tick box in the form, and you can withdraw it at any time: through "Cookie settings" at the bottom of every page or by email.

Legitimate interest: I have an interest in running my business well. This includes keeping client records, analysing which services are popular, and approaching business prospects based on publicly published contact details (see 2b). Contacting you once after an order you did not complete also falls under this.

4. Who do I share your data with?

I do not sell your data. I only share data when that is necessary for running the business, or when you have given consent for it in the cookie banner (Google Analytics, Google Ads and the Meta pixel):

• Accounting software: for sending quotes and invoices.
• Email provider: for my email communication.
• Hosting provider: where the website and email run.
• Google Calendar: for scheduling appointments.
• Google Ireland Limited (Google Analytics): for website statistics, only after you have chosen "Accept all" in the cookie banner. Google may transfer this data to Google LLC in the United States; Google LLC states that it is certified under the EU-US Data Privacy Framework. More in the cookie policy.
• Google Ireland Limited (Google Ads): for measuring advertisements and showing advertisements to visitors again, only after you have chosen "Accept all" in the cookie banner. Google may transfer this data to Google LLC in the United States; Google LLC states that it is certified under the EU-US Data Privacy Framework. More in the cookie policy.
• Meta Platforms Ireland Limited (Meta pixel): for measuring advertisements on Facebook and Instagram and showing advertisements to visitors again, only after you have chosen "Accept all" in the cookie banner. Meta may transfer this data to Meta Platforms, Inc. in the United States; Meta states that it is certified under the EU-US Data Privacy Framework. Meta and I are jointly responsible for this processing; you can turn to me and to Meta with a request about your data.
• Anthropic, Inc. (Claude AI): for analysing websites, drafting personalised outreach emails and preparing replies to e-mail and WhatsApp messages. Processing is based on Standard Contractual Clauses (SCCs); Anthropic is certified under the EU-US Data Privacy Framework. I do not send special categories of personal data myself; if you put them in a message to me, they can be passed on.
• Google LLC (Custom Search API): for finding relevant business websites, based solely on search terms, no personal data of prospects.

I have (or these parties provide by default) a data processing agreement with each of them, to make sure they handle your data as carefully as I do.

5. How long do I keep your data?

• Quotes that aren't accepted: deleted after 1 year.
• Orders that were not completed: deleted after 12 months.
• Client data (after a project): kept as long as legally required for financial record-keeping (minimum 7 years).
• Contact data: kept as long as there is contact or as long as you're a client.
• B2B outreach data (not contacted): maximum 12 months.
• B2B outreach data (contacted): maximum 3 years after the last contact moment.
• Opt-outs: kept permanently to prevent repeat contact.

6. How do I secure your data?

I take protecting your data seriously. The website uses a secure SSL connection to make sure data you submit through the website is encrypted. My computers and systems are also secured with appropriate technical measures.

7. Your rights

You have the right to access, correct or have your personal data deleted. You also have the right to withdraw any consent for data processing, or to object to Marketing Maatwerk processing your personal data.

Access, correction or deletion: send an email to info@marketingmaatwerk.nl and I'll respond as soon as possible, within four weeks at the latest.

Filing a complaint: if you believe I'm not handling your data correctly, you have the right to file a complaint with the Autoriteit Persoonsgegevens (the Dutch Data Protection Authority).

8. Automated decision-making

Marketing Maatwerk does not make decisions based on automated processing (algorithms) that could have adverse consequences for you. All important decisions are made by a human (me, Boris).

Company details

Marketing Maatwerk
Boris Kusters
Enschede, The Netherlands

Contact:
Phone: +31 (0)6 342 189 64
Email: info@marketingmaatwerk.nl
Available: Mon-Fri 10:00 - 18:00 (CET)

Registration details:
Dutch Chamber of Commerce (KVK) number: 91114551
VAT number: NL004866840B27

Note: Marketing Maatwerk has no physical office for client visits. All communication happens online or by phone. Meetings take place via video call or at an agreed location.