Privacy statement

Kolonos B.V. respects your privacy and handles personal data in accordance with the General Data Protection Regulation (GDPR). This page sets out what this website does and does not collect. Last updated: July 2026.

Data controller

Kolonos B.V., Platteweg 7, 2811 HL Reeuwijk, The Netherlands. For any question or request about your data, email info@kolonos.com.

What we process

If you use the contact form we process the name, email address, subject and message you enter, together with technical data needed to stop automated abuse: a short-lived anti-spam token and a one-way hash of your IP address used only for rate limiting. The IP address itself is not stored with your message. If you email us directly, we process whatever your message contains.

There is no account system, no newsletter and no database of visitors. Messages are delivered to a mailbox and live there like any other correspondence.

Purpose and legal basis

We use what you send only to respond to you. The legal basis is our legitimate interest in handling correspondence (Article 6(1)(f) GDPR). Anti-spam processing rests on the same basis: our interest in keeping the form usable.

Recipients and processors

This website is hosted on our own server in the Netherlands. Fonts and all photographs are served from that server, so no visitor data is sent to a font CDN, an image host or any other third-party content network.

• Cloudflare Turnstile checks that form submissions are made by a person. Cloudflare receives your IP address and limited browser information. Cloudflare Inc. is established in the United States; transfers rest on the European Commission's standard contractual clauses.
• Resend delivers form submissions to our mailbox as email. Resend processes the content of your message in transit. Established in the United States; standard contractual clauses apply.
• Microsoft 365 hosts our email. Correspondence with us is stored there.

Our web server keeps access logs containing IP addresses, for security and troubleshooting. They are not linked to form submissions and are not used to build any profile.

Retention

Correspondence is kept only as long as needed to deal with your enquiry, and no longer than 24 months, unless a longer legal retention period applies. Rate-limiting data is discarded within hours.

Analytics

We use self-hosted, privacy-friendly analytics (Umami) on our own server. It is cookieless and collects only aggregate data: pages visited, the referring website, browser and device type, and approximate country derived from your IP address, which is not stored. Nothing is shared with third parties, there is no cross-site tracking and no profiles are built. The legal basis is our legitimate interest (Article 6(1)(f) GDPR) in understanding how the site is used. You may object to this processing.

Cookies

This website sets no tracking or analytics cookies. Cloudflare Turnstile may set a short-lived token on the contact page for the sole purpose of completing its check.

Your rights

You have the right of access, rectification, erasure, restriction, objection and data portability. Send a request to info@kolonos.com. You may also lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).