Privacy statement

Webfluencer B.V. (“Webfluencer”, “we”, “us”) values your privacy. This statement explains which personal data we process when you visit our website, contact us or use our services, and how we protect that data. It applies to all Webfluencer activities and complies with the EU General Data Protection Regulation (GDPR).

The controller responsible for your personal data is:

• Webfluencer B.V.
• Herengracht 420, 1017 BZ Amsterdam, the Netherlands
• Email: hello@webfluencer.nl
• Phone: +31 20 244 0845

We process the following categories of personal data:

• Contact details you provide directly: name, email, phone, company name and the content of your message.
• Technical data collected automatically: IP address (anonymised where possible), browser type and version, device information, operating system, referring site and pages visited.
• Usage data on how you interact with our site: click behaviour, scroll depth, session duration and interactions with forms and CTAs.
• Application data if you apply for a role: CV, cover letter and any attachments you share.
• Cookies and similar technologies as described in section 7.

We process your personal data only for the following purposes, based on a valid GDPR legal basis:

• Contact and quotes — to respond to your enquiry or prepare a proposal. Basis: performance of a contract or pre-contract (art. 6(1)(b) GDPR).
• Service delivery and project execution — to deliver engagements for clients. Basis: contract performance.
• Recruitment — to evaluate your application and potentially enter into employment. Basis: (pre-)contract performance.
• Site analytics and optimisation — to understand how visitors use our site and improve it. Basis: your consent via the cookie banner.
• Marketing and remarketing — to show relevant content and ads. Basis: your consent.
• Legal obligations — e.g. tax administration. Basis: legal obligation (art. 6(1)(c) GDPR).
• Security and fraud prevention — to protect our website and systems. Basis: legitimate interest (art. 6(1)(f) GDPR).

We do not keep your personal data longer than necessary for the purposes for which it was collected:

• Contact enquiries: up to 24 months after last contact, unless this leads to an engagement.
• Client data: for the duration of the engagement plus 7 years to meet statutory tax retention requirements.
• Application data: up to 4 weeks after the procedure ends, or 12 months with your consent for future roles.
• Analytics data: up to 14 months, then anonymised or deleted.
• Cookies: see retention details in our cookie settings.

We do not sell your data. We share data only with parties that help us deliver our services, and only as far as necessary. We sign data processing agreements with these parties where legally required:

• Hosting and infrastructure — Vercel Inc. (deployment and CDN).
• Analytics and tag management — Google (Google Analytics 4, Google Tag Manager).
• Communication — our email and CRM providers for handling contact enquiries.
• Accounting and invoicing — our accountant and bookkeeping software, where required by law.
• Authorities — when required by law or court order.

We use cookies and similar technologies to run our site, improve your experience, analyse usage and measure marketing. We distinguish four categories:

• Necessary — required for core functionality such as navigation and form security. Always set, cannot be disabled.
• Analytics — anonymous statistics on how the site is used (e.g. Google Analytics 4). Only after your consent.
• Marketing — cookies from ad partners for relevant ads and campaign measurement. Only after your consent.
• Preferences — remembering choices like language or region. Only after your consent.

On your first visit a banner asks which categories you allow. By default all non-essential categories are off (Google Consent Mode v2). You can change your choice anytime via the “Cookie settings” link at the bottom of every page.

Some of our suppliers (such as Google and Vercel) are located outside the European Economic Area. Where personal data is transferred to countries without an adequacy decision, we rely on the European Commission’s Standard Contractual Clauses (SCCs) or another valid transfer mechanism under chapter V of the GDPR.

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access: TLS encryption for all traffic, need-to-know access to systems, regular backups, monitoring and patching of dependencies, strict password policies and two-factor authentication where possible.

Under the GDPR you have the following rights regarding your personal data:

• Access — request which data we hold about you.
• Rectification — have inaccurate data corrected.
• Erasure — have data deleted when no longer needed.
• Restriction — temporarily restrict processing.
• Objection — object to processing based on legitimate interest or to direct marketing.
• Portability — receive a copy in a structured, commonly used format.
• Withdraw consent — withdraw any previously given consent at any time via the cookie settings or by emailing us.

Send your request to hello@webfluencer.nl. We respond within 30 days. To prevent abuse we may ask for additional identification.

If you have a complaint about how we handle your personal data, please contact us first so we can resolve it together. You always have the right to lodge a complaint with the Dutch Data Protection Authority via autoriteitpersoonsgegevens.nl.

We may update this privacy statement from time to time, for example when our services or applicable laws change. The most recent version is always on this page, with the date of the latest change at the top.

Questions about this statement or how we handle your data? Email us at hello@webfluencer.nl or call +31 20 244 0845.