Privacy statement

1. Who we are

CodeCrox is a sole proprietorship (eenmanszaak) registered with the Netherlands Chamber of Commerce (KVK) under number 42096009. CodeCrox is the controller of the personal data described in this statement. For any privacy question, email support@codecrox.com.

2. What we collect

• When you contact us through the contact form or by email: your name, company name, email address and the content of your message.
• When you visit the website: our hosting provider, Amazon Web Services (AWS), may automatically record technical data such as your IP address, browser type and the time of your visit, to keep the site secure and working.
• When you submit the contact form: Google reCAPTCHA checks the submission for automated abuse. To do that it receives your IP address and information about how you interacted with the page. The check runs only when you submit the form — reCAPTCHA is not loaded on page view.
• If you accept analytics cookies: Google Analytics collects information about how you use the site, such as the pages you visit, how long you stay, the site you came from, your device and browser type, and your approximate location based on your IP address.

3. Why we use it

• To reply to your enquiry and follow up on it. We do this on the basis of our legitimate interest in responding to people who contact us or, if you ask about working with us, to take steps at your request before entering into an agreement.
• To keep the website secure and running, on the basis of our legitimate interest.
• To stop automated abuse of the contact form, on the basis of our legitimate interest in not receiving spam and in keeping the form usable.
• To understand how visitors use the site so we can improve it, only if you accept analytics cookies (on the basis of your consent). You can withdraw your consent at any time.

We don’t use your details for marketing, and we never sell them.

4. How long we keep it

We keep enquiries for up to 12 months after our last contact. If an enquiry leads to a working relationship, we keep what is needed for that relationship and for our legal record-keeping obligations, such as tax records. Server logs are kept for up to 90 days. Analytics data is kept for 2 months, the Google Analytics default.

5. Who we share it with

Only with the service providers that run this website, our email and our analytics: Amazon Web Services (AWS), Zoho (including its ZeptoMail email service) and Google (for reCAPTCHA when you submit the contact form, and for Google Analytics if you accept analytics cookies). They process data on our behalf under a data processing agreement. Where a provider stores data outside the European Economic Area, we make sure appropriate safeguards are in place, such as the EU Standard Contractual Clauses.

6. Cookies

We use analytics cookies only after you click Accept in the cookie banner. If you click Reject, no analytics cookies are set and the site works the same. You can change your choice at any time through Cookie settings at the bottom of every page. The only cookies on this site are the two set by Google Analytics: _ga and a _ga_ cookie followed by our property ID. They tell visitors apart and keep track of visits, and last up to 2 years. We don’t use any other cookies, including for advertising.

Submitting the contact form may also set a reCAPTCHA cookie. That one is not part of the analytics choice: it is there to tell a person from a bot at the moment you press Send, without it the form cannot be protected, and it is set only when you submit — never on page view.

The fonts on this site are served from our own servers rather than from Google Fonts, so loading a page does not share your IP address with Google.

7. Your rights

You can ask us to show you the personal data we hold about you, correct it, delete it, restrict or stop using it, or send you a copy in a portable format. You can also object to how we use it. Email support@codecrox.com and we will respond within one month.

If you are unhappy with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

8. Security

We take appropriate technical and organisational measures to protect your personal data against loss and unauthorised access.

9. Changes to this statement

We may update this statement from time to time. The latest version is always on this page, with the date it was last updated at the top.