Privacy Policy

1. Identity of the Data Controller

Kamyk Sigma
Orteliuslaan 850
3528 BB Utrecht
Netherlands

For privacy-related questions, please use the contact form on the main website.

2. Personal Data I Collect

I collect personal data only when you voluntarily submit the contact form. This includes:

• First and last name
• Email address
• The content of your message
• Your selected area of interest
• Date and time of submission

I do not use tracking cookies, advertising pixels, analytics scripts, or any passive data collection beyond what is technically necessary to display the website. The Google Maps iframe is governed by Google's own privacy policy.

3. Legal Basis for Processing (GDPR Article 6)

Processing of your personal data is based on:

• Article 6(1)(a) — Consent: You provide your data voluntarily and explicitly tick the GDPR consent checkbox before submitting. You may withdraw consent at any time.
• Article 6(1)(b) — Contractual necessity: Where your enquiry relates to a service, processing is necessary to respond to and fulfil your request.
• Article 6(1)(f) — Legitimate interests: I retain correspondence records for managing ongoing communication and service delivery.

4. How I Use Your Data

Your personal data is used exclusively to:

• Reply to your enquiry or message
• Deliver any service you have requested or purchased
• Maintain records of correspondence for ongoing service engagements

I do not use your data for marketing, profiling, automated decision-making, or any other purpose.

5. Data Sharing

I do not sell, share, or transfer your personal data to third parties for commercial purposes. Data may only be disclosed where required by Dutch or EU law.

6. Retention Period

Contact enquiries are retained for a maximum of 24 months from the date of last correspondence, unless an ongoing service engagement or legal obligation requires a longer period. Data will be deleted promptly upon request where no legal retention obligation applies.

7. Your Rights Under the GDPR

You have the following rights regarding your personal data:

• Article 15 — Access: Request a copy of personal data held about you.
• Article 16 — Rectification: Request correction of inaccurate or incomplete data.
• Article 17 — Erasure: Request deletion of your data, subject to legal obligations.
• Article 18 — Restriction: Request that I limit processing in certain circumstances.
• Article 20 — Portability: Request your data in a structured, machine-readable format.
• Article 21 — Object: Object to processing based on legitimate interests.
• Withdrawal of consent: Withdraw consent at any time without affecting prior lawful processing.

To exercise any right, please use the website contact form. I will respond within one calendar month.

8. Supervisory Authority

If you believe your data has been handled unlawfully, you may lodge a complaint with the Dutch data protection authority:

Autoriteit Persoonsgegevens (AP)
Bezuidenhoutseweg 30, 2594 AV Den Haag
www.autoriteitpersoonsgegevens.nl

9. Security

I take reasonable technical and organisational measures to protect personal data. No internet transmission can be guaranteed fully secure.

10. Updates

This Privacy Policy may be updated. The date above reflects the most recent revision. Continued use of this website constitutes acceptance of any changes.