Who is responsible for your data
Kanso Sites is operated by Víctor Ribera in the Netherlands. Kanso Sites is responsible for personal data processed through this website and during direct project communication.
Privacy questions and requests can be sent to hello@kansosites.nl or through the contact page. Enough information may be requested to confirm your identity before a privacy request is completed.
Information Kanso Sites may receive
The information processed depends on how you interact with the website. Kanso Sites does not ask for more information than is reasonably needed for the relevant purpose.
- Contact details such as your name and email address.
- Business details such as your company name, project topic and website information.
- The subject, message and other information you choose to provide in an enquiry.
- Project communication, approvals, files and billing information when a working relationship begins.
- Technical information made available to the hosting environment, such as request logs, device information and IP address.
- A local theme preference stored in your browser when you choose the colour or monochrome interface.
Why information is used and the legal basis
Each use of personal data has a GDPR legal basis. Article 6(1)(b) normally applies when responding to an enquiry, preparing a proposal, taking steps before a contract or performing a contract. Article 6(1)(c) applies to invoices and core tax or accounting records.
Article 6(1)(f) normally applies to the legitimate interests of keeping the website and services secure and reliable, preventing misuse and diagnosing technical problems. Consent is used only where it is genuinely needed and can be withdrawn at any time.
- Responding to questions and arranging introductory calls.
- Preparing proposals, scopes, estimates and project plans.
- Delivering, supporting and documenting agreed services.
- Maintaining website security, technical reliability, preventing misuse and diagnosing technical issues.
- Keeping the administrative and financial records required by law.
- Improving the clarity, accessibility and performance of the website.
Contact forms and direct communication
Kanso Sites uses Resend as the email delivery provider for website contact forms. Contact details, message content and related delivery information may be processed by Resend to deliver and operate that communication. Kanso Sites does not use form data for unrelated marketing without an appropriate legal basis.
Please do not send sensitive personal data, passwords or confidential production credentials through a general contact form unless a secure method has been agreed.
Service providers and international processing
Kanso Sites may use providers for hosting and infrastructure, email and form delivery, professional email, file storage or project delivery, and accounting or administration where applicable. Current examples include Netlify and Resend; professional email is currently handled through Purelymail. Providers receive only information needed for their role.
When a provider processes data outside the European Economic Area, Kanso Sites will rely on an appropriate legal safeguard where required, such as an adequacy decision or approved contractual clauses.
Cookies and local browser storage
The current website does not use advertising cookies or behavioural profiling. The theme you select is stored in your browser localStorage. A strictly functional cookie named kanso-locale can remain for up to one year to remember a manually selected language.
The welcome presentation uses sessionStorage under the key kanso-presentation-seen so it does not repeat during the same browser session. Hosting providers may generate essential technical logs to deliver and secure the website. If optional analytics or marketing technology is added later, this policy and the consent experience will be updated before that processing begins.
How long information is kept
Information is kept only for as long as it is needed for the purpose for which it was collected, to manage an active relationship, to resolve a dispute or to meet legal and accounting obligations.
Unsuccessful enquiries are reviewed periodically and are normally removed within 12 months when there is no reasonable reason to retain them. Project records may be retained while they remain relevant to an active relationship or dispute. Invoices and core accounting records may be kept for up to seven years where Dutch law requires this.
Security and confidentiality
Kanso Sites uses proportionate technical and organisational measures to reduce the risk of unauthorised access, loss, alteration or disclosure. Access is limited to people and providers who need the information for their work.
No online system can offer an absolute guarantee. If a personal data incident creates a relevant risk, it will be assessed and handled according to applicable obligations.
Your privacy rights
Depending on the circumstances, you may ask to access, correct, erase or restrict the use of your personal data. You may also object to certain processing, request portability where it applies and withdraw consent without affecting earlier lawful processing.
Kanso Sites normally responds within one month. You also have the right to lodge a complaint with the Dutch Data Protection Authority, Autoriteit Persoonsgegevens. Kanso Sites prefers to understand and resolve concerns directly first.
Information required
Providing contact details and the content of an enquiry is optional, but Kanso Sites may be unable to respond, prepare a proposal or provide agreed services without the information needed for that purpose.
Automated decision-making
Kanso Sites does not use automated decision-making or profiling that produces legal or similarly significant effects about you.
Updates and contact
This policy may change when the website, services or legal requirements change. The latest version will always be published on this page with its revision date.
For questions about this policy or to exercise a privacy right, email hello@kansosites.nl or use the contact page. Please describe the request clearly so it can be handled efficiently.