Privacy

Clear about what happens to your data.

This statement explains, in plain language, which data ARKline processes through this website and why.

Ask a privacy question

Controller

ARKline

ARKline is responsible for the processing described on this page.

Owner
Erik Schouten
Chamber of Commerce
42136133
Country
Netherlands

Processing

What is processed and why

Contact form

Data: Name, email address, selected subject and message.

Purpose: To answer your question and send a confirmation with your summary.

Basis: Taking steps at your request and ARKline's legitimate interest in handling business enquiries.

Aggregate website analytics

Data: Page, event name, non-personal context and performance category. A daily HMAC-derived code based on IP address and browser information prevents repeated refreshes from being counted as new daily visits. The raw IP address and browser information are not stored in the analytics table.

Purpose: To understand real daily visits, page views and conversion paths without creating a persistent visitor profile.

Basis: The legitimate interest in improving the website in a privacy-conscious way.

Security and rate limiting

Data: A one-way hash derived from limited request characteristics, a counter and an expiry time.

Purpose: To prevent abuse and repeated automated requests.

Basis: The legitimate interest in securing the website and its forms.

Cookies

No advertising or tracking cookies

The website does not use cookies or local browser storage for its own analytics, does not create advertising profiles and has no visitor login or web analytics dashboard.

A short-lived daily code is retained for no more than two days, after which only the aggregate daily count remains. The local ARKline Windows application can exclude the owner's current internet connection. Names, email addresses and free-text messages are not sent to analytics.

Providers

Parties involved

Cloudflare

Hosts and secures the website and provides the D1 database used for aggregate analytics and durable rate limiting.

Resend

Delivers the message to ARKline and the automatic confirmation to the visitor.

OpenAI, only when enabled

May support the Dutch Operational Check. Requests use store: false; standard abuse-monitoring logs may be retained for up to 30 days. The contact form itself does not use OpenAI.

ARKline does not sell personal data and does not share form data with advertising platforms or data brokers.

Retention

No longer than necessary

  • Contact and route-map emails: up to 24 months, unless they become part of a longer customer or statutory record.
  • Resend email data: normally up to 30 days within its service.
  • Aggregate analytics: up to 400 days.
  • Encrypted daily visitor codes: up to two days.
  • Rate-limit hashes: expire after no more than one hour and are removed during a subsequent protected request.
  • Fiscal administration: seven years where required by Dutch tax law.

Your rights

Access, correction or deletion

You may ask ARKline for access, correction, deletion, restriction or transfer of your personal data, or object to processing based on legitimate interest. Email erik@arkline.nl. You may also lodge a complaint with the Dutch Data Protection Authority.

Decisions

No automated decisions about people

The website does not make automatic legal or similarly significant decisions about visitors. Any Operational Check result is an indicative first analysis based on answers supplied by the visitor.

Security

Practical safeguards

ARKline uses encrypted connections, same-origin checks, input validation, body limits, a honeypot, durable rate limiting, idempotent email delivery and restrictive security headers. No online system can be guaranteed to be risk-free; report a suspected issue to erik@arkline.nl.