01
Who is responsible
Röck+Cöde VoF, Nieuwezijds Voorburgwal 169 H, 1012 RK Amsterdam, the Netherlands (KvK 34368007) is the controller for personal data collected through this website. You can reach me at hi@rock-n-code.com.
Legal
This website collects as little as it can. This page explains what is collected when you visit or get in touch, how long it is kept, and your rights under the GDPR (AVG).
01
Röck+Cöde VoF, Nieuwezijds Voorburgwal 169 H, 1012 RK Amsterdam, the Netherlands (KvK 34368007) is the controller for personal data collected through this website. You can reach me at hi@rock-n-code.com.
02
When you email me or book a call, I receive what you send: your name, email address, company, and whatever you write about your project. When you book a call, the scheduling service also records the time you choose and your time zone.
Browsing the site itself does not require an account and sets no advertising cookies. If analytics are enabled, they are privacy-friendly and aggregate: no personal profile is built and no data is sold.
03
This site sets no cookies and uses no tracking pixels. If that changes — for example to add privacy-friendly analytics — this section will say exactly what is set, why, and for how long.
04
I use your details to reply to you, to prepare for and hold a call, and to follow up on a potential engagement. The legal basis is my legitimate interest in responding to enquiries and, once we start discussing work, the steps needed to enter into a contract with you.
05
Enquiries that do not lead to work are deleted within twelve months of the last contact. If we work together, your details are kept for the duration of the engagement and for seven years afterwards, as Dutch tax law requires for business records.
06
Your data is handled by the services I use to run the business: an email provider, a calendar and scheduling service, and — if we work together — invoicing software. Each is bound by a data-processing agreement. I do not sell or rent personal data, and I do not share it with anyone else unless the law requires it.
07
Some of those providers process data outside the European Economic Area. Where they do, transfers rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
08
You can ask to see the personal data I hold about you, correct it, have it deleted, restrict how it is used, or receive a copy to take elsewhere. You can also object to processing based on legitimate interest. Email me and I will respond within one month. If you are not satisfied, you can lodge a complaint with the Autoriteit Persoonsgegevens, the Dutch data-protection authority.
09
If this policy changes in a way that affects you, I will update the date at the top and, where I have your address, let you know by email.
Questions about this document? Email me — I answer these myself.