HeadWindProjects B.V.

Data Controller

HeadWindProjects B.V. is the data controller responsible for your personal data.

For questions about your data, contact: c.grock@headwindprojects.eu

What Data We Collect

This website collects minimal data:

• Server logs: Your IP address and browser information are automatically logged by our hosting provider for security purposes
• Security monitoring: IP addresses of failed login attempts and potential security threats (retained for 30 days by security plugins)
• Email correspondence: If you email us at c.grock@headwindprojects.eu, we retain your email address, name (if provided), and message content

Legal Basis for Processing

When you contact me by email, I process your data based on legitimate interest (responding to your inquiry) and, if we enter into a business relationship, a contract (delivering consulting services).

How We Use Your Data

I use your data only to:

• Respond to your inquiries
• Provide consulting services (if we enter into an engagement)
• Fulfill legal or contractual obligations

I do not share your data with third parties, except where required by law or with your explicit consent.

Data Retention

Email correspondence: I retain email conversations as long as necessary to respond to your inquiry or fulfill our business relationship. You can request deletion at any time.

Client project data: After a consulting engagement ends, I retain project-related data for up to 7 years to comply with Dutch tax and accounting regulations (unless you request earlier deletion of non-essential data).

Your Rights Under GDPR

You have the following rights regarding your personal data:

If you have concerns about how I handle your data, contact me at c.grock@headwindprojects.eu. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): autoriteitpersoonsgegevens.nl

Data Security

I take reasonable technical and organizational measures to protect your data from unauthorized access, loss, or misuse. Email communications are transmitted over encrypted connections where supported by your email provider.

Third-Party Services

This website uses the following third-party services:

• Web Hosting: Yourhosting.nl - Server logs may include your IP address and browser information for security and performance purposes
• Email: Yourhosting.nl - Email communications are handled through Yourhosting.nl. I only access messages to respond to your inquiries
• Security Services: Really Simple Security and Wordfence - These plugins monitor site security and may log IP addresses to protect against malicious activity

We do not use analytics services, advertising networks, or social media tracking.

Cookies

This website uses only essential cookies:

• Session cookies for basic site functionality
• Security cookies to protect against malicious activity (via Really Simple Security and Wordfence)

You can disable cookies in your browser settings, though this may affect site functionality and security features. Under GDPR, essential cookies do not require consent as they are necessary for the website to function properly.

Changes to This Policy

If I update this privacy policy, I will update the "Last updated" date at the top of this page. Significant changes will be communicated via the website homepage.