Privacy policy

1. Controller

LYNX Media, Cruquiuszoom 52, 2142 EW Cruquius, the Netherlands.
Contact: info@lynx-media.nl · +31 85 130 8735
Owner / contact person: Gijs van der Weijden.

2. Which data do we process?

• Contact form: name, email, optional phone, company and message. Purpose: respond to your enquiry. Legal basis: legitimate interest / taking steps prior to a contract (Art. 6(1)(b)/(f) GDPR). To reduce spam, Cloudflare Turnstile may run a short challenge (no puzzles for most visitors).
• Partner application: name, email, partner type, role or business, and a short note on your experience or network. Optional: phone, company name, LinkedIn, website, audience, an estimate of your network and a comment. Also campaign parameters from the link. Purpose: review the application and contact you about a possible collaboration. Not a newsletter. Legal basis: steps prior to a contract (Art. 6(1)(b) GDPR). The application is stored in our database and is not public.
• Email / phone: data you share yourself in correspondence.
• Analytics (opt-in): hashed visitor id, path, referrer host, device class, session duration and internal clicks. No names, email or IP in the analytics database. With the same consent, Google Analytics 4 receives a cookie id, the page URL, referrer, device details and an approximate location. Legal basis: consent (Art. 6(1)(a) GDPR).
• Booking calendar: when booking via Cal.com, Cal.com processes the data you enter there under their privacy policy. The embed loads only after functional consent.
• CMS login: for administrators only; session cookie on /admin.

3. Sharing with third parties

We do not sell personal data. Processors we may use include:

• Hosting / VPS: storage of the website and SQLite database.
• Resend (if configured): sending contact-form emails.
• Cloudflare Turnstile (if configured): spam protection on the contact form. See Cloudflare's privacy policy.
• Cal.com: scheduling consultations (only when using /en/meeting or their link).
• Google Analytics 4 (Google Ireland Limited): visit statistics, only after analytics consent. See Google's privacy policy.
• Meta pixel (Meta Platforms Ireland Limited): page views for ad measurement, only after analytics consent. See Meta's privacy policy.
• Microsoft Clarity: heatmaps and session recordings, only after analytics consent. See Microsoft's privacy statement.

With analytics consent we load Google Analytics 4, the Meta pixel, Microsoft Clarity and the OpenAI Ads pixel for conversion measurement. No Google Ads tag is connected beyond that.

4. Retention periods

• Contact messages: until handled + up to 24 months, unless a longer period is needed (e.g. an ongoing project).
• Partner applications: until handled + up to 24 months, unless a partner agreement requires a longer period.
• Analytics on our server: aggregates and events for about 90 days (then cleaned up). Google Analytics cookies last up to 2 years; events in Google Analytics follow the property retention setting (2 months by default). Meta pixel cookies last up to 90 days.
• Cookie preferences: until you clear them or set them again.

5. Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection, and the right to withdraw consent without affecting the lawfulness of prior processing. Withdraw cookie consent via Settings.

Submit a request via info@lynx-media.nl. We respond within the statutory period. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

6. Security

We take appropriate technical and organisational measures (HTTPS, restricted CMS access, hashed passwords, hashed analytics ids). Absolute security does not exist; please report suspected data breaches as soon as possible.

7. Cookies

Details about cookies and localStorage are in the cookie policy.

8. Changes

We may update this policy. The date at the top shows the latest version. For material changes we update the cookie banner or site notice where needed.