Controller: This Privacy Policy describes how Yussef Joe ("I", "me"), a private individual based at Spoorstraat 44, 7311 PE Apeldoorn, Netherlands, processes personal data collected through this website in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).
1. Identity of the Data Controller
Yussef Joe
Spoorstraat 44
7311 PE Apeldoorn
Netherlands
For privacy-related questions, please use the contact form on the main website.
2. Personal Data I Collect
I collect personal data only when you voluntarily submit the contact form on this website. This includes:
- First and last name
- Email address
- The content of your message
- Your selected area of interest
- Date and time of submission
I do not use advertising cookies, tracking pixels, analytics scripts, or any passive collection technology. The Google Maps iframe embedded on the main page is governed by Google's own privacy policy.
3. Legal Basis for Processing (GDPR Article 6)
Processing of your personal data is based on the following grounds:
- Article 6(1)(a) — Consent: You submit your data voluntarily via the contact form and explicitly provide consent by ticking the GDPR checkbox. You may withdraw this consent at any time.
- Article 6(1)(b) — Contractual necessity: Where your enquiry relates to a service, processing is necessary to respond to and fulfil your request.
- Article 6(1)(f) — Legitimate interests: I retain correspondence for the purpose of managing ongoing communication and service provision.
4. How I Use Your Data
Your personal data is used exclusively to:
- Reply to your enquiry or message personally
- Deliver any service you have requested or purchased
- Maintain a record of correspondence for ongoing service engagements
I do not use your data for marketing, profiling, automated decision-making, or any other purpose.
5. Data Sharing
I do not sell, share, or transfer your personal data to third parties for commercial purposes. Data may be disclosed only where required by Dutch or EU law enforced by a competent authority.
6. Retention Period
Contact enquiries are kept for a maximum of 24 months from the date of last correspondence, unless an ongoing service engagement or legal obligation requires a longer period. I will delete your data promptly upon request where no legal retention obligation applies.
7. Your Rights Under the GDPR
As a data subject you have the following rights:
- Article 15 — Access: Request a copy of personal data I hold about you.
- Article 16 — Rectification: Request correction of inaccurate or incomplete data.
- Article 17 — Erasure: Request deletion of your data, subject to applicable legal obligations.
- Article 18 — Restriction: Request that I limit processing in certain circumstances.
- Article 20 — Portability: Request your data in a structured, machine-readable format.
- Article 21 — Object: Object to processing based on legitimate interests.
- Withdrawal of consent: Withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any right, please contact me via the website contact form. I will respond within one calendar month.
8. Supervisory Authority
If you believe your data has been handled unlawfully, you may lodge a complaint with the Dutch data protection authority:
Autoriteit Persoonsgegevens (AP)
Bezuidenhoutseweg 30, 2594 AV Den Haag
www.autoriteitpersoonsgegevens.nl
9. Security
I take reasonable technical and organisational steps to protect your personal data. No internet transmission can be guaranteed fully secure.
10. Updates
This Privacy Policy may be updated. The date shown above reflects the most recent revision. Continued use of this website constitutes acceptance of any changes.