Privacy Policy

1. Introduction: Who I Am

I am Jonas Groot Kormelink, operating as a sole trader under the business name Jonas Groot Kormelink (“I,” “me,” or “my”). I am committed to protecting your personal information and your right to privacy.

This Privacy Policy applies to all information collected through my website https://www.jonasgrootkormelink.co.uk/ and any related services.

2. Controller Information (The Data Handler)

Data Controller:
Jonas Groot Kormelink
Perth, United Kingdom
jonasgrootkormelink@gmail.com

3. The Data I Collect

I collect personal information that you voluntarily provide to me when you use my contact form.Personal Information Collected:

The data I collect is limited to the fields in the form, which typically include:

  • Your Name
  • Your Email address
  • Any text included in your message or enquiry

Information Automatically Collected:

I automatically collect certain technical information when you visit my website. This information is non-identifying in isolation but may include:

  • Your IP address
  • Your browser type and device characteristics
  • Your operating system
  • Other technical details collected by my hosting provider and security tools (like reCAPTCHA).

4. How I Collect and Utilise Your Data (Purpose and Legal Basis

I use the following specific technologies to process and utilise your data:

  1. Fluent Forms: To manage the single contact form on my website. The legal basis for processing is Contractual Necessity (to respond to your enquiry).
  2. Google reCAPTCHA: To protect the form from spam and automated abuse. The legal basis for processing is Legitimate Interests (site security).
  3. Google Sheets: To transfer and store potential client details for administrative record-keeping and follow-up. The legal basis for processing is Legitimate Interests (client relationship management).

I do not use the data for any automated decision-making or profiling.

5. Storage, Retention, and Third Parties

I only share your data with the minimum necessary third parties to operate my website and services. I do not sell your personal data.

Data Processors

I transfer and process your data using the following external services:

  • Google LLC:
    • Service: Google Sheets (Client Data Storage) and reCAPTCHA (Spam Protection).
    • International Transfer: As Google’s servers are often located outside the EU/EEA (e.g., in the US), I rely on Google’s implementation of the EU-U.S. Data Privacy Framework and Standard Contractual Clauses (SCCs) to ensure your data receives adequate protection during transfer.
  • Website Hosting:
    • Service: Storing my website files and sometimes temporary form data.
    • Provider Name: WebReus

Data Retention

I will keep your personal information stored in Google Sheets and any server logs only for as long as necessary to fulfil the purposes outlined above, or until you request that I erase it.

I will delete non-client inquiries after Two Years.

6. Cookies and Tracking Technologies

I am not actively using analytics or advertising cookies. However, my use of third-party tools means some cookies may be used:

  • Essential/Functional Cookies: My WordPress site may set essential cookies for administration or basic functionality (e.g., if you are a logged-in administrator).
  • reCAPTCHA Cookies: The Google reCAPTCHA service places cookies and uses local storage to analyse user behaviour on the site to verify that you are a human. By using my contact form, you consent to this processing.

7. Your Data Protection Rights (GDPR Rights)

Under the GDPR, you have the right to:

  1. Access: Request copies of the personal data I hold about you.
  2. Rectification: Request I correct information you believe is inaccurate or incomplete.
  3. Erasure (Right to be Forgotten): Request I delete your personal data from both my WordPress database and my Google Sheet records.
  4. Restrict Processing: Request I limit how I use your data.
  5. Object: Object to my processing of your data based on legitimate interests.
  6. Data Portability: Request I transfer the data to you or another organisation.

To exercise any of these rights, please contact me directly at jonasgrootkormelink@gmail.com. I will respond to your request within one month.