Carabain Digital handles personal data with care. This policy explains which data is processed, why, how long it is kept and what rights you have. This site uses no cookies, no analytics and no trackers.

1. Who is responsible

Carabain Digital is the data controller for the data that arrives through this website and by email.

Carabain Digital
Zuidlaarderbrink 292
7812 GL Emmen, The Netherlands
Chamber of Commerce 98100483 · VAT NL005309444B90
info@carabaindigital.com

2. Which data is processed

Data you send yourself. This website has no contact form. Every contact button opens your own email program. Whatever you put in that email reaches Carabain Digital: usually your name, email address, company name and the content of your message.

Technical data when you visit the site. The hosting provider of this website records visits in server logs. This includes your IP address, the time, the page requested and your browser type. This happens automatically and is necessary to deliver the website and protect it against abuse and attacks.

Customer data. If you enter into an agreement, your company details, billing address, tax number and payment details are also processed for invoicing and bookkeeping.

3. Why, and on what legal basis

Contact and quotes. To answer your message and make you a proposal. Legal basis: performance of a contract or steps taken at your request before entering into one (Article 6(1)(b) GDPR), or legitimate interest in maintaining business contact (Article 6(1)(f)).

Security and availability of the website. Server logs and security measures. Legal basis: legitimate interest in a working and secure website (Article 6(1)(f)).

Invoicing and bookkeeping. Legal basis: performance of the contract (Article 6(1)(b)) and compliance with a legal obligation, such as statutory retention periods for tax records (Article 6(1)(c)).

4. Cookies, analytics and third parties on the site

This website sets no cookies and uses no analytics, advertising or tracking software. No visitor profiles are built.

All fonts, images and scripts are loaded from this domain. Visiting this site sends no data to third parties such as Google, Meta or advertising networks. That is also why no cookie banner is needed.

5. Who data is shared with

Data is never sold and never shared for marketing purposes. Carabain Digital does use service providers that process data on its behalf:

Cloudflare, Inc. Hosting of the website (Cloudflare Pages), DNS and protection against attacks. This involves processing IP addresses and traffic data. Cloudflare may process data outside the European Economic Area, covered by the European Commission's Standard Contractual Clauses.

Email and administration providers. For receiving and storing email and for bookkeeping and invoicing.

Data may also be provided to an accountant or the tax authorities, or to other parties where legally required.

6. Data on customer websites

If Carabain Digital builds and maintains a website for your business, your business is the data controller for the personal data that comes in through that website. In that case Carabain Digital acts as a processor. On request, a data processing agreement meeting the requirements of Article 28 GDPR will be concluded.

7. How long data is kept

Email correspondence without follow-up: no longer than 2 years after the last contact.

Customer data during the agreement: for as long as the agreement runs.

Invoices and bookkeeping: 7 years, based on statutory retention obligations.

Server logs: short-lived, generally a few weeks up to a maximum of 6 months, depending on the hosting provider's settings.

8. Security

The website is only reachable over an encrypted connection (HTTPS). Access to systems is protected with strong, unique passwords and two-factor authentication wherever available. Only Carabain Digital has access to the data.

If, despite these measures, a data breach occurs that poses a risk to the people involved, it will be reported to the Dutch Data Protection Authority within 72 hours and, where required, to those people directly.

9. Your rights

You have the right to access your data, to have inaccurate data corrected, to erasure, to restriction of processing, to data portability, and to object to processing based on legitimate interest.

Send any request to info@carabaindigital.com. You will get an answer within four weeks. To prevent abuse, you may be asked to verify your identity.

If you disagree with how your request was handled, you can file a complaint with the Dutch Data Protection Authority at autoriteitpersoonsgegevens.nl.

10. Changes

This privacy policy may be updated, for example when the service or the law changes. The current version is always on this page, with the date of the last change at the top.

See also the terms and conditions.