Privacy statement Nokk Web Development
This is an English translation for your convenience. The Dutch version is legally binding; in case of differences, the Dutch text applies.
Last updated: 8 October 2026
This privacy statement explains which personal data I collect, why I do so, how long I keep it and what rights you have. I keep it as short and clear as possible. Questions? Feel free to email me.
1. Who am I?
Nokk Web Development is a sole proprietorship (eenmanszaak) of Kylian de Rooij. I am responsible for processing your personal data as described in this statement.
- Business name: Nokk Web Development
- Chamber of Commerce (KvK) number: 42182666 (my business details are listed in the KvK Trade Register)
- Email: kylian@nokkweb.nl
- Website: nokkweb.nl
I do not have a data protection officer. For any privacy question, you can contact kylian@nokkweb.nl.
2. Which data do I collect?
When you fill in a form (contact or free website check): name, company name, email address, phone number (if you enter it), the address of your website and what you write in the message field.
When you become a client: in addition, your billing details, such as address, KvK number and VAT number, and the agreements we make.
About businesses I approach myself: I collect public business information from sources such as Google Maps, the KvK register and the business’s own website. This includes business name, town, phone number, website, the owner’s name if it is public, and an analysis of the website (for example speed and mobile use). For a sole proprietorship this can be personal data. See also article 5.
When you visit this website: I do not use cookies or advertising networks. I count visitors with Cloudflare Web Analytics. It works without cookies and without tracking visitors or tracing them back to a person: I only see totals, such as the number of visits per page. The fonts are hosted on my own server, so your visit is not passed on to Google for that.
I do not process special categories of personal data (such as health or religion) or data of children.
3. What do I use your data for?
| Purpose | Which data | Legal basis |
|---|---|---|
| Answering your question or request, carrying out the website check and preparing a quote | Form data, your website | Steps prior to entering into a contract, at your request |
| Building and maintaining the website and staying in touch with you as a client | Contact and project details | Performance of the contract |
| Sending invoices and keeping my accounts | Billing details | Legal obligation (tax retention requirement) |
| Approaching businesses that may benefit from a new website, by phone or by post | Public business information and the analysis of their website | Legitimate interest: growing my business |
| Improving my services and way of working through analyses, for example which website problems occur most often, which sectors requests come from and which approach works | Data from requests, projects and approached businesses, anonymised or pseudonymised where possible | Legitimate interest: improving my services |
| Informing existing clients about similar services, such as maintenance or extensions | Name and email address | Legitimate interest. You can always unsubscribe easily. |
| Keeping the website and my systems secure | Technical data such as IP addresses in the hosting provider’s server logs | Legitimate interest: security |
What I do not do:
- I never sell or rent out your data.
- I do not share your data with other companies for their own marketing.
- I do not send unsolicited advertising by email to businesses that are not clients.
- I do not use your data for purposes other than those above, unless I inform you first or ask for your consent.
4. Analyses and automated assessment
I use software to analyse websites automatically, for example on loading speed, mobile use and findability. Based on that, I decide which businesses I approach and what I advise them. This may be considered profiling. It does not lead to decisions that have legal effects for you or affect you in a similarly significant way: I always assess the outcome myself, and the only consequence is whether or not I approach you.
For my own analyses (see article 3), I work with anonymised or aggregated data where possible. Data that is truly anonymised is no longer personal data. I may also use it after the retention period, for example as statistics.
5. If I have approached your business
Did I call you or send you a letter without you having contacted me first? Then I got your details from public sources, such as Google Maps, the KvK register or your own website. I tell you where I got your details at our first contact.
Don’t want to be approached again? Say so during the call or email kylian@nokkweb.nl. I will stop immediately. To make sure I really don’t approach you again, I keep only your business name and phone number on an internal “do not contact” list. I do not use that data for anything else.
6. Who do I share your data with?
I only share your data with service providers I need to do my work. They process the data on my behalf and may not use it for themselves. I have a data processing agreement with them.
| Service provider | Purpose |
|---|---|
| Cloudflare | Hosting and security of this website |
| Cloudflare Web Analytics | Visitor statistics without cookies |
| Google Workspace | Email, calendar, file storage, receiving forms via this website and my administration |
| Anthropic (Claude) and Google (Gemini) | AI support for analysing websites and preparing proposals |
When I use AI services, I share as little personal data as possible. A website analysis usually only needs the address and content of the (public) website. I use these services under business terms in which the provider does not use your data to train its AI models.
I may also share data with my accountant or the Dutch Tax Administration (Belastingdienst) if the law requires it.
Do you request an instant speed measurement on the “Free website check” page? Then your browser sends the address of your website to Google PageSpeed Insights to retrieve the score. You do not pass your name or email address to Google in the process.
Data outside the European Union. Some of these service providers are American companies. If your data is processed outside the EU, this only happens with appropriate safeguards, such as the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.
7. How long do I keep your data?
| Data | Retention period |
|---|---|
| Requests and contact messages from people who do not become clients | 12 months after the last contact |
| Data of approached businesses | 12 months after collection or after the last contact, whichever is later |
| Contact and project details of clients | 12 months after the end of the cooperation (including maintenance) |
| Invoices and other records | 7 years, because the law (tax retention requirement) requires it |
| “Do not contact” list | As long as needed to respect your objection |
| Anonymised or aggregated statistics | Indefinitely, because this is no longer personal data |
After the period ends, I delete the data or make it anonymous.
8. How do I protect your data?
I take appropriate measures to protect your data, including:
- this website uses a secure connection (https);
- all my accounts are protected with two-step verification;
- my devices are encrypted and password-protected;
- only I have access to your data.
If something does go wrong, such as a data breach, I report it to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) where necessary and inform you if required.
9. Your rights
You have the right to:
- access your data;
- have incorrect data corrected;
- have your data deleted, unless I am legally required to keep it;
- have the processing restricted;
- receive your data in a common file format or have it transferred;
- object to processing based on legitimate interest. If you object to being approached for commercial purposes, I will always stop;
- withdraw any consent you have given.
Send your request to kylian@nokkweb.nl. I will respond within one month. To make sure the request really comes from you, I may ask you for an extra confirmation, for example via the email address I have on file. I will not ask for a copy of your ID, unless there is really no other way.
Not happy with how I handle your data? Let me know first, and we’ll look for a solution together. You also always have the right to file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).
10. Cookies
This website does not place cookies for statistics, tracking or advertising. That is why you don’t see a cookie notice. In exceptional cases, my hosting provider Cloudflare may place a technically necessary security cookie, for example to protect the website against abuse by bots. Such a cookie is not used to track you.
11. Changes
I may update this privacy statement, for example if my way of working changes or if I start using a new service provider. The date at the top shows when the statement was last updated. I inform clients personally about important changes.