Privacy Policy

1. Introduction

Victoria's Web ("we", "us" or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website (www.victoriasweb.nl) or use our services. This policy complies with the GDPR, the Dutch AVG, and the ePrivacy Directive.

By using our website or services, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Who We Are

Data Controller:
Victoria's Gestión B.V.
KVK: 97398756
Address: Postbus 302, 1780AH Den Helder, Netherlands
Email:

We are the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, please contact us using the details above.

3. What Data We Collect

We collect and process the following types of personal data:

3.1 Information You Provide Directly

• Contact Form: name, email address, phone number (if provided), message content, and any other details you choose to share.
• Email Communication: email address, name, message content, and attachments.
• Project Collaboration: business information, project requirements and specifications, files and materials you provide, feedback, and approvals.
• Payment Information: billing contact details, company information, and tax numbers, if applicable. Payments are processed by Mollie; we do not store card or bank details. See the Mollie Privacy Policy for more information.

3.2 Information We Collect Automatically

• Website Usage Data: IP address (anonymised where possible), browser type and version, device information, pages visited, time spent on pages, referring source, and date and time of visit.
• Technical Data: cookies and similar technologies (see Section 5) and server logs.

4. How We Use Your Data

4.1 Providing Our Services (legal basis: contract performance)

• Responding to enquiries and requests.
• Delivering design, development, and marketing services.
• Managing projects and client relationships.
• Processing payments and invoicing.

4.2 Communication (legal basis: legitimate interest or consent)

• Responding to your messages and questions.
• Sending service-related notifications.
• Providing customer support.
• Sharing updates about completed projects when you have opted in.

4.3 Website Improvement (legal basis: legitimate interest)

• Analysing website performance and user behaviour.
• Improving functionality and user experience.
• Identifying and fixing technical issues.
• Optimising our content and services.

4.4 Legal Compliance (legal basis: legal obligation)

• Complying with Dutch tax and accounting regulations.
• Maintaining records required by law.
• Responding to legal requests and preventing fraud.

4.5 Marketing (legal basis: consent)

• Sending newsletters, portfolio updates, or information about new services when you have opted in. You can unsubscribe at any time.

5. Cookies and Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They help the site function properly and provide insights into usage.

5.2 Cookies We Use

• Essential cookies: session cookies and security cookies required for basic functionality and protection.
• Analytics cookies: privacy-friendly analytics (such as Cloudflare Web Analytics) that do not track personal data. If we introduce other analytics tools in future, we will request your consent beforehand.

5.3 Your Cookie Choices

You can control cookies through your browser settings, including viewing, blocking, or deleting cookies and clearing them on exit. Disabling essential cookies may impact website functionality.

5.4 Cookie Consent

We currently use only essential cookies and privacy-first analytics that do not require consent. If we deploy cookies that do require consent, we will display a clear cookie banner so you can manage your preferences.

6. How We Share Your Data

We do not sell, rent, or trade your personal data. We share data only in the following circumstances:

6.1 Service Providers (processors)

• Hosting and infrastructure: Cloudflare for hosting, CDN, security, and analytics.
• Email services: Google Workspace or Microsoft 365 for business communication.
• Payment processing: Mollie for secure payments.
• File storage: Google Drive for project collaboration when required.
• Project management: Monday.com or similar tools when needed for your project.

These providers process data only on our instructions and are contractually required to comply with GDPR/AVG.

6.2 Team Members and Contractors

Victoria's Web collaborates with independent professionals. They receive only the information necessary for their task, are bound by confidentiality agreements, and follow our security and quality standards.

6.3 Legal Requirements

We disclose data when required to comply with laws, court orders, prevent fraud, or protect our rights.

6.4 Business Transfers

If Victoria's Web is involved in a merger, acquisition, or sale of assets, your data may be transferred. You will be notified and informed of your options.

7. International Data Transfers

Victoria's Web is based in the Netherlands. Some service providers operate outside the EEA. We ensure adequate protection through standard contractual clauses, adequacy decisions, and contractual safeguards.

8. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy or as required by law.

• Contact enquiries: kept for up to one year after the enquiry unless you become a client or request earlier deletion.
• Client project data: retained for the duration of the project and typically one to three years afterwards unless legal obligations require a longer period.
• Email and administration: generally seven years in accordance with Dutch bookkeeping laws.
• Analytics: aggregated or anonymised data may be stored longer.

You may request deletion of your personal data at any time (see Section 10).

9. Data Security

We implement appropriate technical and organisational measures, including SSL/TLS encryption, secure servers, firewalls, access controls, regular backups, security audits, and incident response procedures. Our processors are carefully selected for their security and privacy compliance.

10. Your Rights Under GDPR

You have rights to access, rectify, erase, restrict processing, data portability, object to processing, and withdraw consent. You may also lodge a complaint with the Dutch Data Protection Authority.

To exercise your rights, email with the subject “GDPR Data Request” and include your name, contact email, and the right you wish to exercise. We will respond within one month or inform you if additional time is required.

11. Children's Privacy

Our services are not directed to individuals under the age of 16, and we do not knowingly collect data from children. If you believe a minor has provided us with personal data, please contact us and we will delete it.

12. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for their privacy practices. We encourage you to review the privacy policies of any external sites you visit.

13. Changes to This Privacy Policy

We may update this policy to reflect changes in legislation, our services, or our data practices. We will update the “Last Updated” date and notify you of significant changes. Continued use of our services indicates acceptance of the updated policy.

14. Contact Us

For questions, concerns, or requests, please contact:

Victoria's Web
Victoria's Gestión B.V.
KVK: 97398756
Email:
Address: Postbus 302, 1780AH Den Helder, Netherlands

We aim to respond within five business days.

15. About Victoria's Web

Victoria's Web is a boutique studio where design meets purpose. Founded in 2014 under Victoria's Gestión B.V. (KVK 97398756). Every project is led with care, delivered with agency-level polish, and fuels the mission of Stichting Victoria's Fundación (ANBI) supporting reintegration, education, and employment for people in transition.