Privacy Policy
Ezop respects your privacy. This policy explains what personal data we collect through ezop.nl, why we collect it, and what rights you have over it.
1 — Who We Are
Ezop is registered with the Dutch Chamber of Commerce (KVK) under the trade name Ezop, operating publicly as Ezop Independent Creative Collective.
Ezop is the data controller for the personal data described in this policy. For any question about how we handle your data, write to us at the address above.
2 — What We Collect
Contact form. When you submit our contact form, we collect the name, email address, and message you provide.
Providing this information is voluntary. It is not a statutory or contractual requirement — but without it we cannot respond to your enquiry.
Server log files. Like most websites, our server automatically records technical information about each visit: IP address, browser type, operating system, the pages requested, and the date and time of the request. These logs exist for security and to keep the site running correctly. We do not use them to identify individual visitors, and we do not combine them with any other data.
We do not use analytics, advertising, or tracking cookies.
3 — Why We Collect It
| Contact form | To read and answer your enquiry, and to discuss a possible working relationship | Steps taken at your request prior to entering into a contract — Art. 6(1)(b) GDPR; and our legitimate interest in responding to people who contact us — Art. 6(1)(f) |
| Server logs | Security, error diagnosis, and technical operation of the site | Our legitimate interest in keeping the site secure and functional — Art. 6(1)(f) |
We do not use your details for marketing unless you separately and explicitly ask us to. Where our processing rests on your consent, you may withdraw that consent at any time.
4 — How Long We Keep It
Enquiries that do not lead to work — deleted no later than 24 months after our last contact with you.
Enquiries that become a working relationship — kept for the duration of the engagement. Correspondence and records that form part of our business administration are then retained for seven years, as Dutch tax law requires (fiscale bewaarplicht).
Server logs — retained for a maximum of 12 months, then deleted.
5 — Who Has Access
We do not sell, rent, or trade your personal data, and we never share it for anyone else’s marketing.
Two categories of service provider necessarily handle this data on our behalf, solely to deliver the service we use them for:
- Website hosting — our own server, located in the European Economic Area, on which ezop.nl runs.
- Email — Apple (iCloud Mail), which delivers and stores our email, including the messages sent through our contact form.
These providers act on our instructions and may not use your data for their own purposes.
Beyond this, we disclose personal data only where the law requires it.
6 — Cookies
ezop.nl uses only the essential technical cookies needed for the site to function. We do not use analytics, advertising, or tracking cookies, and we do not load fonts, scripts, or other resources from third-party servers.
7 — International Transfers
ezop.nl runs on our own server within the European Economic Area. Contact form submissions and server logs are stored there and are not transferred outside the EEA.
Our email is provided by Apple (iCloud Mail), under a contract with Apple Distribution International Ltd. in Ireland. Apple operates a global infrastructure, and email content may therefore be processed on servers outside the EEA, subject to the transfer safeguards described in Apple’s own privacy policy.
8 — Your Rights
Under the GDPR you have the right to:
- Access — obtain a copy of the personal data we hold about you
- Rectification — have inaccurate data corrected
- Erasure — ask us to delete your data
- Restriction — ask us to limit how we use your data
- Portability — receive your data in a portable format, where applicable
- Withdraw consent — where our processing rests on your consent
To exercise any of these, write to hello@ezop.nl. We will respond within one month.
Your right to object
You have the right to object at any time to our processing of your personal data where that processing is based on our legitimate interests.
This right is set out in Article 21 of the GDPR and applies to both the contact form and the server log processing described in Section 3.
If you object, we will stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
To object, write to hello@ezop.nl. You do not need to give a reason.
9 — Automated Decision-Making
We do not use automated decision-making or profiling.
10 — Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, and misuse. The site is served over an encrypted connection (HTTPS).
11 — Complaints
If you believe we have handled your personal data improperly, we would like to hear from you first at hello@ezop.nl.
You also have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens.
12 — Changes to This Policy
We may update this policy from time to time. The date at the top reflects the most recent revision.