EversBunt
← Back to home

Privacy Policy

Last updated: 6 July 2026

Acting in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), EversBunt declares that it respects your privacy and ensures the security of the information you provide.

The English version of this Privacy Policy is the legally binding original under Dutch law. Other language versions are provided for reference only.

§ 1. General provisions and Data Controller

  1. The Personal Data Controller is vandenbunt.com, of which EversBunt is a trademark — a business established and registered in the Netherlands with the Dutch Chamber of Commerce (KvK) under number 42069579. Privacy-related inquiries can be sent to contact@eversbunt.com.
  2. This Privacy Policy defines the principles and practices of collecting, processing, and protecting the personal data of visitors and Clients of eversbunt.com.
  3. All personal data is processed lawfully, fairly, and transparently in accordance with the GDPR and applicable Dutch law.

§ 2. What data we collect and why

We collect and process personal data only to the minimum extent necessary. We process the following categories of data:

  1. Contact form data — your name, email address, and the contents of your message, provided voluntarily when contacting us.
    Legal basis: Article 6(1)(a) and (b) GDPR — your consent and/or steps taken at your request prior to entering into a contract.
  2. Client and engagement data — name, organisation, email address, event details, and billing details necessary to deliver agreed Services and issue invoices.
    Legal basis: Article 6(1)(b) GDPR — performance of a contract.
  3. Technical and usage data — aggregated, anonymised analytics about how the website is used (e.g. pages viewed), collected via Vercel Analytics. This does not use cookies and is not used to identify you personally.
    Legal basis: Article 6(1)(f) GDPR — our legitimate interest in maintaining and improving the website.
  4. IP address and server logs — automatically collected by our hosting infrastructure for security, spam prevention, and rate-limiting purposes.
    Legal basis: Article 6(1)(f) GDPR — our legitimate interest in network security.

§ 3. Data retention

  1. Contact enquiries: Retained only as long as necessary to handle your request and for any subsequent business relationship, after which they are deleted or anonymised.
  2. Client and financial records: Retained for 7 years to comply with the statutory tax retention requirements of the Dutch tax authority (Belastingdienst).
  3. Server and access logs: Retained for a maximum of 30 days for security analysis, unless an active investigation or legal proceeding requires a longer retention period.
  4. You may ask us to delete your data sooner at any time, subject to any overriding legal obligation to retain it.

§ 4. Data recipients and trusted external services

Personal data is transferred only to reputable and certified technology partners under appropriate data processing agreements. Data may be processed by:

  1. Vercel Inc. (USA / Global Edge): Website hosting and, subject to your consent, Vercel Analytics for aggregate, privacy-friendly site performance metrics.
  2. Linear Orbit, Inc. (USA): Handling and tracking of contact enquiries.

All transfers of personal data to entities based outside the European Economic Area (EEA), including the United States, are carried out under the highest security standards, utilising the EU–US Data Privacy Framework or Standard Contractual Clauses (SCCs) approved by the European Commission.

§ 5. Your rights and supervisory authority

  1. Under the GDPR you have the right to:
    • access the personal data we hold about you and receive a copy;
    • have inaccurate or incomplete data corrected;
    • have your data erased (“the right to be forgotten”);
    • restrict or object to our processing;
    • receive your data in a portable, machine-readable format;
    • withdraw consent at any time, without affecting the lawfulness of prior processing.
  2. To exercise any of these rights, email contact@eversbunt.com.
  3. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

§ 6. Cookies and tracking

  1. This website uses only essential technical cookies necessary to maintain secure sessions and remember your language and theme preferences. These necessary cookies do not require your prior consent under applicable law.
  2. Non-essential cookies, such as Vercel Analytics, are only loaded if you explicitly opt-in via the Cookie Consent Banner.
  3. This website does not run advertisements and does not use tracking, profiling, or cross-site cookies for marketing purposes.

§ 7. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page with its “last updated” date. Continued use of the website after changes constitutes acceptance of the updated policy.