# Privacy statement

- Link: https://opensourcecad.nl/en/privacy/
- Published: 2026-10-22T18:44:28+02:00
- Author: Marijn van den Heuvel \+ AI

_This page is also available in Dutch: [Privacyverklaring](https://opensourcecad.nl/privacy/)._

This statement explains how **OpenSourceCAD.nl** handles your personal data. In 
doing so I follow the General Data Protection Regulation (GDPR).

## 1. Who is responsible

Marijn van den Heuvel, trading as OpenSourceCAD.nl.
E-mail: [info@opensourcecad.nl](https://opensourcecad.nl/en/privacy/info@opensourcecad.nl)
Phone: [+31 13 36 99 622](https://opensourcecad.nl/en/privacy/+31133699622)

I have not appointed a data protection officer (DPO); that is not required at this
scale. For privacy questions you can use the e-mail address above.

## 2. What data I process

 * **Contact details you give me yourself**, when you mail or call: name, e-mail
   address, a phone number if you give one, and the content of your message.
 * **Data from an engagement**: to run an introduction, advice or project, and for
   the related administration and invoicing.
 * **Technical log files**: the web server records IP address, time and requested
   page by default, for security and troubleshooting.
 * **Comments on the site**: if you post a comment, WordPress processes the details
   you enter.

## 3. Why, and on what legal basis

 * **Answering your question and staying in contact**: legal basis: performance 
   of a contract or pre-contractual steps (article 6(1)(b) GDPR).
 * **Running and invoicing an engagement**: legal basis: performance of a contract(
   article 6(1)(b) GDPR) and legal obligation (article 6(1)(c) GDPR).
 * **Security and proper operation of the website**: legal basis: legitimate interest(
   article 6(1)(f) GDPR). That interest is preventing abuse and errors.
 * **Comments on the site**: legal basis: your consent (article 6(1)(a) GDPR), which
   you can withdraw at any time by having your comment removed.

## 4. How long I keep it

 * **Technical log files**: no longer than 30 days.
 * **Enquiries that do not lead to an engagement**: at the latest 2 years after 
   the last contact, then I delete them.
 * **Data from an engagement**: 7 years, under the Dutch tax retention duty (article
   52 of the Algemene wet inzake rijksbelastingen).
 * **Comments on the site**: as long as the comment is on the site; I remove them
   if you ask.

## 5. Who else sees it

I do not sell your data and do not use it for marketing. I share it only where that
is needed:

 * **IONOS SE** (Germany), the hosting company the website runs on. A data processing
   agreement is in place with them.
 * **Governments or regulators**: only where the law requires it of me.

## 6. Transfers outside the EEA

Your data is not transferred to countries outside the European Economic Area. The
hosting company is based in the EU.

## 7. Cookies

For ordinary visitors this website sets **no cookies**. Only when you log in or 
post a comment does WordPress set functional cookies to make your session work. 
Beyond that the site uses **no analytics, no tracking and no marketing cookies**.
Because there are only technically necessary cookies, no cookie banner is needed.

## 8. Security

The website runs over a secure connection (HTTPS). I take appropriate technical 
and organisational measures to protect your data against loss, misuse and unauthorised
access.

## 9. Your rights

Under the GDPR you have the right to:

 * see your data (article 15 GDPR);
 * have it corrected or completed (article 16 GDPR);
 * have it deleted (article 17 GDPR);
 * restrict the processing (article 18 GDPR);
 * object to the processing (article 21 GDPR);
 * have your data transferred (article 20 GDPR);
 * withdraw consent you gave (article 7(3) GDPR).

Send your request to [info@opensourcecad.nl](https://opensourcecad.nl/en/privacy/info@opensourcecad.nl).
I reply within one month. To prevent abuse I may ask you to show who you are.

Do you disagree with the way I handle your data? Then you can lodge a complaint 
with the [Autoriteit Persoonsgegevens](https://www.autoriteitpersoonsgegevens.nl/),
the Dutch data protection authority.

## 10. Automated decision-making

No automated decision-making or profiling takes place on the basis of your data.

## 11. Changes

If this statement changes, I update the date below. The most recent version is always
on this page.

_Version: October 2026._