Privacy statement

Who is responsible

The controller for the data on this website is Your Favorite Partner (sole proprietorship, eenmanszaak), trading as HuisDoc.nl, KvK (Dutch Chamber of Commerce) 99090945, the Netherlands. Questions or requests: support@huisdoc.nl.

When you send a request

Through the form on huisdoc.nl (main page and the /start page) we ask for your name and email address. On /start you can also enter your phone number. You can also tell us how you found us (Google, LinkedIn, a colleague, an email from us or other, with a free text field). Phone number and ‘how you found us’ are optional.

With your request we also store automatically: the time, the form and page you were on, which version of our price text you saw (a page test, see the cookie statement), the website you came from (domain and path) and the campaign labels from the web address (utm_source, utm_medium, utm_campaign, utm_content, utm_term). We do not store your browser details (user agent).

What for: to handle your request and contact you about the free trial week. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). You don’t have to give us this data, but without a name and email address we can’t help you.

Ad data with your request

If you arrive through a Google or LinkedIn ad, the web address contains a click ID (gclid, gbraid, wbraid or li_fat_id). We read it from the address. We set no cookies for this and store nothing on your device. Only when you submit the form do we keep the click ID with your request, to see which ad leads to a request.

Legal basis: our legitimate interest in measuring whether our ads work (Art. 6(1)(f) GDPR). You can object to this (see ‘Your rights’).

At the moment we do not send any data about your request back to Google or LinkedIn. If we want to do that later, we will ask for your consent first and update this statement.

Requests through LinkedIn forms

If you fill in a form inside an ad on LinkedIn (Lead Gen Form), LinkedIn collects the data you confirm there, such as name, email address, job title and company. That happens under LinkedIn’s privacy policy. LinkedIn then shares that data with us.

We use it only to handle your request, just like a request through our website, and keep it as described under ‘Retention periods’. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).

Visitor counter without cookies

We also count visits and clicks ourselves, on our own server. This happens without cookies and without storing anything on your device. We record which page you open, which parts you view, which buttons you click, how far you scroll, which website you came from (domain name only), any campaign labels, your language, which version of the page test you see, the type of screen and your country. We store no IP address, no browser details and no device ID; you get a random number per page view that does not identify you on a later visit.

Legal basis: our legitimate interest in understanding how the site is used (Art. 6(1)(f) GDPR). The figures are kept for at most 24 months in a Cloudflare database in the EU. More details are in the cookie statement.

Analytics with Google, only with consent

Only when you give consent in the cookie banner do we load Google Tag Manager and Google Analytics 4. Google then places cookies (_ga and _ga_…) and sees how you use the site: which pages and buttons, and how you arrived. Technically, Google also receives your IP address in the process. Google Ireland Ltd. processes this data; this may also happen outside the EU, under the EU-US Data Privacy Framework.

Legal basis: your consent (Art. 6(1)(a) GDPR). Without consent we load nothing from Google. You can change your choice at any time via ‘Cookie settings’ at the bottom of every page.

Who receives your data

We do not sell data. These are the parties that process data from your request or visit:

• Cloudflare (website hosting, storage of requests and the visitor counter). Requests are stored in Cloudflare KV, a worldwide network, so we cannot promise they stay in the EU only. The counter data is in a database in the EU. To show the site, Cloudflare technically sees your IP address; we do not store it.
• Telegram: for every new request our team gets a message in a Telegram chat, with name, email address, phone number (if entered), origin and campaign. We do not send the click ID itself. Telegram is a service outside the EU.
• Resend: we send the same request details as an email to support@huisdoc.nl. The email goes through Resend, a US sending service, so processing outside the EU is possible. The mailbox itself is with Google Workspace.
• Google and LinkedIn: see the sections above (Google Analytics only with consent; LinkedIn forms if you fill them in yourself).

Retention periods

• Requests, with click ID, origin and campaign labels, plus the Telegram message and the email: 24 months after your request, then we delete them. If you become a customer, the privacy statement of the app applies to your account.
• Visitor counter without cookies: at most 24 months.
• Google Analytics cookies: up to 2 years, and only with consent. We keep your cookie choice for 12 months in your browser.

Your rights

You can ask us for access to your data, to correct or delete it, to restrict the processing, or to transfer your data. You can object to processing based on our legitimate interest, and withdraw any consent you gave at any time. Email support@huisdoc.nl; we reply within one month. We may first ask you to confirm that the data is yours.

We do not make decisions about you that are taken by a computer alone. If you disagree with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). We would like to hear from you first, so we can fix it.

Changes

If our way of working changes, we update this statement. The date at the top shows when that last happened.