Legal
Privacy Policy
Last updated: August 2026
Strukata processes personal data with care and in accordance with the General Data Protection Regulation (GDPR) and other applicable Dutch privacy legislation. This policy explains what data we collect, why, and what rights you have.
1. Who we are
Strukata is the controller responsible for the personal data described in this policy. You can reach us at wesley@strukata.info with any privacy-related questions.
2. Data we collect through the website
When you use the contact form on our website, we collect your name, email address, and the content of your message. We use this data solely to respond to your enquiry.
Our website uses Cloudflare Web Analytics to understand visitor numbers in aggregate: which pages are visited, from which country, and via which referring website. This measurement is cookieless; it does not identify individual visitors and does not track you across other websites.
Beyond this aggregate measurement, we do not collect any data about visitors other than what is submitted through the contact form.
3. Data we collect when providing services
When we work with a client organisation, we may process personal data that is necessary to carry out our services, such as names, business email addresses and job titles of employees involved in a project.
Where our work involves processing personal data on behalf of a client, we act as a processor. In that situation a separate data processing agreement governs the arrangement.
4. Legal basis for processing
We process contact form data on the basis of our legitimate interest in responding to business enquiries. We process data in the context of a client engagement on the basis of the performance of a contract or on the basis of a legal obligation where applicable.
We do not process special categories of personal data and we do not use personal data for automated decision-making.
5. Retention periods
Contact form submissions are retained for as long as necessary to handle your enquiry and for up to twelve months thereafter in case of follow-up questions.
Data related to client engagements is retained for as long as required by law, generally seven years for financial and contractual records under Dutch tax law.
Data that is no longer necessary is deleted securely.
6. Sharing with third parties
We do not sell, rent or share personal data with third parties for their own purposes. We use a limited number of service providers to operate our business, such as an email provider and a hosting provider. These providers act as processors under appropriate agreements.
We may share data with authorities if required by law.
7. Your rights
You have the right to request access to the personal data we hold about you, to have it corrected if it is inaccurate, and to request deletion where there is no legitimate reason for continued processing.
You also have the right to object to processing based on legitimate interest, and the right to data portability where processing is based on consent or a contract.
To exercise any of these rights, contact us at wesley@strukata.info. We respond within one month. If you believe we are not handling your data correctly, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
8. Security
We apply appropriate technical and organisational measures to protect personal data against loss, unauthorised access and disclosure. Where data is transmitted over the internet, we use encrypted connections.
9. Changes to this policy
We may update this policy when our practices change or when required by law. The most recent version is always available on this page. Material changes are communicated to active clients by email.