Privacy statement

Download as PDF

Taitan takes care of your personal data. This privacy statement explains what we collect, why, how long we keep it and the rights you have. We process personal data in line with the EU General Data Protection Regulation (GDPR) and the Dutch GDPR Implementation Act (Uitvoeringswet AVG).

1. Who we are

Taitan is the trade name of the sole proprietorship (eenmanszaak) of Tarun Ravi, established in the Netherlands. For the GDPR, Taitan is the controller of the personal data described here.

Business: Taitan, sole proprietorship (eenmanszaak) of Tarun Ravi
Address: Muzenlaan 135, 2353 KD Leiderdorp, the Netherlands
Email: taitanconnect@gmail.com
Chamber of Commerce (KvK): 93700202
VAT (BTW): NL004396403B07

We have not appointed a Data Protection Officer, as we are not required to. For any privacy question, email taitanconnect@gmail.com.

2. What we collect

We only collect data you give us yourself, or data that is strictly needed to run and secure the website.

Type	Data	When
Contact and enquiries	Name, email address, phone number, company and topic (optional) and the content of your message	When you use the contact form or email us
Correspondence	Anything you share with us by email, phone or message	When you are in touch with us
Client and project data	Business contact details, billing details and materials you provide for a project (which may contain personal data)	When you hire Taitan
Technical data	IP address, browser, device and time, in the standard server logs of our hosting provider	Automatically, when you visit the website

Contact and enquiries: DataName, email address, phone number, company and topic (optional) and the content of your message; WhenWhen you use the contact form or email us

Correspondence: DataAnything you share with us by email, phone or message; WhenWhen you are in touch with us

Client and project data: DataBusiness contact details, billing details and materials you provide for a project (which may contain personal data); WhenWhen you hire Taitan

Technical data: DataIP address, browser, device and time, in the standard server logs of our hosting provider; WhenAutomatically, when you visit the website

We do not ask for special categories of personal data (such as health, religion or political views). Please don't send them unless a project truly needs it.

Giving us your data is voluntary. Without your contact details we simply can't reply, and without project details we can't do the work.

3. Why we use your data

We may only use personal data when there is a legal basis for it. These are our purposes and legal bases:

Purpose	Legal basis (GDPR Article 6)
Answering your enquiry and discussing a possible project	Steps at your request before entering a contract (6.1.b) and our legitimate interest in answering enquiries (6.1.f)
Delivering our services: websites, SEO, AI integration, software and maintenance	Performance of the contract (6.1.b)
Invoicing, accounting and tax	Legal obligation (6.1.c)
Securing the website and preventing abuse	Our legitimate interest in a secure, working website (6.1.f)
Showing finished work in our portfolio	Our legitimate interest in showing our work, or your consent where agreed (6.1.f / 6.1.a)

Answering your enquiry and discussing a possible project: Legal basis (GDPR Article 6)Steps at your request before entering a contract (6.1.b) and our legitimate interest in answering enquiries (6.1.f)

Delivering our services: websites, SEO, AI integration, software and maintenance: Legal basis (GDPR Article 6)Performance of the contract (6.1.b)

Invoicing, accounting and tax: Legal basis (GDPR Article 6)Legal obligation (6.1.c)

Securing the website and preventing abuse: Legal basis (GDPR Article 6)Our legitimate interest in a secure, working website (6.1.f)

Showing finished work in our portfolio: Legal basis (GDPR Article 6)Our legitimate interest in showing our work, or your consent where agreed (6.1.f / 6.1.a)

We do not make decisions about you by computer alone, and we do not build profiles of visitors.

4. Cookies and statistics

Our website uses no tracking, advertising or analytics cookies and contains no third-party trackers. We only briefly remember in your browser that you switched language (in session storage, which clears when you close the tab). That is functional and needs no consent.

If we add statistics or other non-essential cookies later, we will ask for your consent first and update this statement.

We never sell your data. We only share it where needed, with parties that protect it properly:

Party	What for	Where
Netlify	Hosting the website (including server logs)	US and EU
Resend	Sending messages from the contact form	US
Google (Gmail)	Our email, where your message arrives	US and EU

Netlify: What forHosting the website (including server logs); WhereUS and EU

Resend: What forSending messages from the contact form; WhereUS

Google (Gmail): What forOur email, where your message arrives; WhereUS and EU

These providers only process your data on our instructions and under a data processing agreement.
Specialists we occasionally bring in for a project are bound by confidentiality and only use your data for that work.
Our accountant, or a public authority where the law requires us to share data.

6. Data outside the EU

Some of our providers are based in the United States. Data only goes there on a valid basis: the EU-US Data Privacy Framework (a European Commission decision) or the European Commission's Standard Contractual Clauses. That keeps your data as well protected as within the EU.

7. How long we keep data

Data	Retention
Enquiries that don't lead to a project	Up to 12 months, then deleted
Client and project data	For as long as the project or maintenance plan runs, and afterwards for as long as needed for aftercare, warranty or a possible dispute
Invoices and accounts	7 years, as Dutch tax law requires
Server logs	Briefly, only for security and fixing faults

Enquiries that don't lead to a project: RetentionUp to 12 months, then deleted

Client and project data: RetentionFor as long as the project or maintenance plan runs, and afterwards for as long as needed for aftercare, warranty or a possible dispute

Invoices and accounts: Retention7 years, as Dutch tax law requires

Server logs: RetentionBriefly, only for security and fixing faults

When we no longer need data, we delete or anonymise it.

8. Your rights

Under the GDPR you have the right to:

Access the data we hold about you;
Have incorrect or incomplete data corrected;
Have your data deleted, where possible;
Restrict how we use your data;
Receive your data in a common digital format (data portability);
Object to use based on our legitimate interest;
Withdraw your consent where we rely on it. This applies from that moment, not retroactively.

Email your request to taitanconnect@gmail.com. We reply within one month, free of charge. We may ask you to confirm who you are, so we never give data to the wrong person.

9. Complaints

We'd rather solve a privacy question or complaint together with you. You always have the right to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), via autoriteitpersoonsgegevens.nl.

10. Security

We take appropriate measures to protect your data against loss, misuse and access by others. The website only works over an encrypted connection (HTTPS), accounts are secured and anyone who handles your data is bound by confidentiality.

11. Children

Our website and services are not aimed at children. We do not knowingly collect data from anyone under 16.

12. Changes

We may update this privacy statement. The latest version is always on this page, with the date of the last change at the top. We'll let you know about important changes where needed.

This statement exists in Dutch and English. If the two differ, the Dutch text prevails.

13. Contact

Questions about this statement or your data? Email us at taitanconnect@gmail.com.