Privacy policy

1. Controller

LYNX Media, Cruquiuszoom 52, 2142 EW Cruquius, the Netherlands.
Contact: info@lynx-media.nl · +31 85 130 8735
Owner / contact person: Gijs van der Weijden.

2. Which data do we process?

• Contact form: name, email, optional phone, company and message. Purpose: respond to your enquiry. Legal basis: legitimate interest / taking steps prior to a contract (Art. 6(1)(b)/(f) GDPR). To reduce spam, Cloudflare Turnstile may run a short challenge (no puzzles for most visitors).
• Email / phone: data you share yourself in correspondence.
• Analytics (opt-in): hashed visitor id, path, referrer host, device class, session duration and internal clicks. No names, email or IP in the analytics database. Legal basis: consent (Art. 6(1)(a) GDPR).
• Booking calendar: when booking via Cal.com, Cal.com processes the data you enter there under their privacy policy. The embed loads only after functional consent.
• CMS login: for administrators only; session cookie on /admin.

3. Sharing with third parties

We do not sell personal data. Processors we may use include:

• Hosting / VPS: storage of the website and SQLite database.
• Resend (if configured): sending contact-form emails.
• Cloudflare Turnstile (if configured): spam protection on the contact form. See Cloudflare's privacy policy.
• Cal.com: scheduling consultations (only when using /en/meeting or their link).

No advertising platforms or marketing pixels are connected.

4. Retention periods

• Contact messages: until handled + up to 24 months, unless a longer period is needed (e.g. an ongoing project).
• Analytics: aggregates and events for about 90 days (then cleaned up / no longer needed for reporting).
• Cookie preferences: until you clear them or set them again.

5. Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection, and the right to withdraw consent without affecting the lawfulness of prior processing. Withdraw cookie consent via Settings.

Submit a request via info@lynx-media.nl. We respond within the statutory period. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

6. Security

We take appropriate technical and organisational measures (HTTPS, restricted CMS access, hashed passwords, hashed analytics ids). Absolute security does not exist; please report suspected data breaches as soon as possible.

7. Cookies

Details about cookies and localStorage are in the cookie policy.

8. Changes

We may update this policy. The date at the top shows the latest version. For material changes we update the cookie banner or site notice where needed.