Privacy & cookies

Who is responsible?

Tommy Buelens of Paper Plane Digital is responsible for the personal data described here. You can contact me with questions or privacy requests using the details below.

Registered name

Paper Plane Digital

KvK number

93167687

Btw-id

NL005002528B65

Location

Harderwijk, The Netherlands

Email

tommy@paperplane.digital

When you contact me

If you email me, I receive your email address, name if supplied, message, and any details or attachments you choose to share. I use that information to reply and discuss your request. Please only send information relevant to your enquiry.

For a quote or project request, the legal basis is taking steps at your request before entering into a contract. For general questions, it is my legitimate interest in answering messages and running the business. You are free to browse without contacting me; I need a way to reply if you would like a response.

If we do not work together, I delete enquiry emails within 12 months of our last contact. If we do, relevant records are kept for the project and any applicable legal retention period. Dutch tax records are generally kept for seven years; that does not mean every email or project file must be kept that long.

Your motion preference

Fonts and images are served with the website. There are no advertising pixels, newsletter forms, or third-party embeds.

When you change “Reduce motion”, the site saves that choice in your browser’s local storage under paperplane-reduce-motion. It contains only a true/false preference, so the site can remember how you want animations displayed. It is not sent to Paper Plane Digital or used to identify or track you.

The preference has no automatic expiry. You can change it with the homepage control or remove it by clearing this website’s stored data in your browser. Your system’s reduced motion setting always takes priority. This functional preference does not require a cookie-consent banner.

Optional website analytics

If you choose “Allow analytics”, this website uses Google Analytics to understand which pages visitors use and whether they click an email link. An email-link click does not tell me whether an email was sent. The legal basis for this measurement is your consent. Choosing “No analytics” does not affect access to the website.

The Google tag loads only after consent. It can process page visits, referral and campaign information, browser and device details, approximate location, and cookie identifiers. Google receives technical connection information when the tag loads. I do not send enquiry messages or email addresses in the events configured by this website. Advertising consent and Google signals are disabled in this implementation.

Google Analytics uses first-party cookies such as _ga and cookies beginning with _ga_. This website configures a maximum cookie lifetime of 180 days without renewal on each visit. Browsers may remove them sooner. The configured retention period for event-level data is 2 months. User-level data is retained for 14 months. The user-data retention period restarts when new activity is recorded for that user. Aggregated reports are subject to different retention rules.

Your analytics choice is stored in your browser under paperplane-analytics-consent for 180 days. Use “Cookie preferences” in the footer to change or withdraw consent. Withdrawing removes this website’s accessible Analytics cookies and reloads the page to stop the Google tag. It does not reverse processing that took place while consent was given. Clearing stored website data also removes your saved choice. Without JavaScript, analytics stays off.

Google provides the analytics service and may process data outside the European Economic Area. Its data-processing terms for measurement services describe the processing arrangements and transfer safeguards.

Email, hosting, and other providers

Email is handled through Google Workspace. Google processes email content and contact information to provide that service. Its infrastructure and subprocessors can involve processing outside the European Economic Area, including in the United States. Google’s data-processing terms explain its international-transfer safeguards, including the applicable European Commission standard contractual clauses and adequacy arrangements. Contact me if you would like more information about the safeguards relevant to your data.

Cloudflare hosts and delivers the public website. It processes technical connection information, such as an IP address, requested page, request time, and browser information, to deliver pages and protect the service. This processing supports my legitimate interest in operating a reliable and secure website. The source code is stored in a private GitHub repository; visitors do not need a GitHub account to use the site.

I have not enabled stored Worker request logs, tracing, or log exports, and do not keep a separate website access-log archive. Cloudflare can retain operational and security data for its service and legal obligations. Its retention criteria consider the processing purpose, data sensitivity, and applicable legal requirements; they are explained in its privacy policy.

Cloudflare operates a global network and may process information outside the European Economic Area. Its data-processing terms describe its processing arrangements and international-transfer safeguards. Contact me if you would like information about the arrangements relevant to your data.

I do not sell personal data or use this website to build advertising profiles. The page does not make automated decisions about you. Information is shared where needed to handle your request, provide the agreed service, or meet a legal obligation.

Your privacy rights

You can ask to access or correct your personal data, request deletion or restriction, and object to processing based on legitimate interests. Where the GDPR’s conditions apply, you can also request a portable copy of data you supplied. These rights can have limits, for example when tax law requires certain records to be retained.

Email tommy@paperplane.digital to make a request. I will respond without undue delay and normally within one month. If a request is complex and an extension is permitted, I will explain why within that first month. I may need limited additional information to verify your identity; please do not send a copy of your identity document unless we have established that it is necessary.

You can also lodge a complaint directly with the Autoriteit Persoonsgegevens, the Dutch data protection authority.

Changes to this notice

This page will be updated when the website or the way personal data is handled changes. The date at the top shows the latest revision. Any future tracking that requires consent must remain off until a visitor has given that consent.