Who is responsible

The controller for the personal data described here is D8Diffusion, established in the European Union. For anything concerning this statement or your data, contact [email protected].

KVK_NAAM<TODO> · VESTIGINGSADRES<TODO> · KVK_NUMMER<TODO> · BTW_NUMMER<TODO> · TELEFOON<TODO>

We are not required to appoint a Data Protection Officer, and we have not appointed one. Privacy questions go to the address above.

What we process, and why

1. When you send a pilot request

The form asks for your name, organisation, email address, the district or area you are looking at, and your question. We use these details for one purpose: to read your request, assess whether it fits what we can currently do, and reply to you.

Legal basis: your consent, given by ticking the box before submitting, and our legitimate interest in responding to a request you have made. You may withdraw consent at any time by emailing us; that does not affect anything done before you withdrew.

2. When you email us

If you write to [email protected], [email protected] or [email protected], we process your address and whatever you include in the message. Legal basis: legitimate interest in corresponding with you.

There is no contact form on this website. Getting in touch happens through your own email client, so nothing is transmitted to us until you send the message yourself.

3. Server logs

Our hosting provider, Cloudflare, records standard technical information when a page is requested — typically IP address, time, the page requested and browser type. These logs are used to keep the site working and secure. Legal basis: legitimate interest in operating and protecting the website. Cloudflare retains this log data for between three and seven days, after which it is no longer available to us.

Cookies and local storage

This website sets no tracking cookies and no advertising cookies, and it loads no third-party scripts, fonts or analytics. There is therefore no cookie banner, because there is nothing to consent to.

Two preferences are stored in your browser, in three entries. All are purely functional, all stay on your device, and none is readable by us:

• Language — d8diffusion-lang in local storage: English or Dutch.
• Light or dark theme — held in local storage as d8diffusion-theme, and mirrored in a first-party cookie of the same name with a one-year lifetime. It is kept in both places so the choice is genuinely global across the site, including its Dutch pages, and still applies where local storage is blocked or partitioned.

Clearing your browser storage and cookies removes all three. Neither preference is linked to your identity, and neither is used for anything except remembering the setting.

Our host Cloudflare provides aggregate traffic statistics — visitor counts, countries and pages requested — as part of running the site. Cloudflare states that this feature does not use cookies or fingerprinting and does not identify individual visitors. We use it only to see whether the site works and which pages are read. We use no other analytics, and we do not run any advertising or tracking product.

Who we share it with

We do not sell personal data, and we do not share it for advertising. Two providers process data for us:

• Cloudflare — website hosting, DNS and basic traffic measurement. Cloudflare, Inc. is a US company; it operates a large European network and offers EU data localisation, but we cannot state that no data is ever processed outside the EU.
• Google (Gmail) — email. Messages you send us are stored in Google's infrastructure, and Google may process them outside the EU.

Where a provider processes data on our behalf, we rely on their data processing terms as required by Article 28 GDPR. Where data may be transferred outside the EU, that transfer relies on the European Commission's Standard Contractual Clauses.

We are an EU-established company. The hosting and email services above are not exclusively EU-based, so we do not claim that all personal data is processed within the EU — see the note on provider locations above.

How long we keep it

• Pilot requests: up to 24 months after our last contact with you, then deleted.
• Email correspondence: up to 24 months after our last contact, then deleted.
• Server logs: three to seven days, after which Cloudflare no longer makes them available to us; aggregate statistics that do not identify you are kept longer.

If a pilot turns into a project, we will tell you what then applies and for how long.

Your rights

Under the GDPR you have the right to:

• ask what personal data we hold about you, and receive a copy;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to processing;
• receive your data in a portable form;
• withdraw consent at any time, where consent is the basis.

Email [email protected] to exercise any of these. We reply within one month. If you are not satisfied with our response you may lodge a complaint with your national supervisory authority — in the Netherlands, the Autoriteit Persoonsgegevens.

Security

This site is served over HTTPS. Our mailboxes are hosted by Google (Gmail) and are protected by strong passwords and two-step verification on every account that can read them. Access to pilot requests is limited to the people who need it to respond to you. We do not store personal data anywhere beyond those mailboxes and the hosting platform described above.

Changes to this statement

When this statement changes we update the date below. Material changes affecting how we use your data will be communicated to anyone with an open request.

Last updated: 7 October 2026 · Version 1.0