Website: www.doraboelens.com
Data Controller: Dora Boelens
Email: info@doraboelens.com
Last updated: 25 August 2026
1. Introduction
Dora Boelens (“we”, “us”, “our” or the “Data Controller”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how personal data is collected and processed when you visit www.doraboelens.com, contact us through the website or interact with the services and technologies used on the website.
Personal data is processed in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – “GDPR”) and other applicable Dutch and European data protection legislation.
2. Data Controller
The controller responsible for the processing of personal data through this website is:
Dora Boelens
Email: info@doraboelens.com
Website: www.doraboelens.com
If you have any questions regarding this Privacy Policy, the processing of your personal data or the exercise of your data protection rights, you can contact us at the email address above.
3. Personal Data We Process
Depending on how you use the website, we may process different categories of personal data.
This may include:
- your name;
- your email address;
- information you provide through the contact form;
- the content of your correspondence with us;
- IP address and technical information;
- browser and device information;
- information about your interaction with the website;
- cookie and similar technology identifiers;
- analytics and advertising information, subject to your consent where required.
We do not intentionally request sensitive or special categories of personal data through the website. Please do not include such information in the contact form unless it is necessary for your enquiry.
4. Contact Form and Enquiries
When you contact us using the contact form available on the website, we may process the personal data you provide, including:
- your name;
- your email address;
- the content of your message;
- any other personal information you voluntarily provide.
Purpose of Processing
We process this information in order to:
- receive and respond to your enquiry;
- communicate with you regarding your request;
- provide information requested by you;
- take steps at your request before entering into a potential contractual relationship, where applicable.
Legal Basis
Depending on the nature of your enquiry, the legal basis for processing is:
- Article 6(1)(b) GDPR – where processing is necessary to take steps at your request prior to entering into a contract; or
- Article 6(1)(f) GDPR – our legitimate interest in receiving, managing and responding to general enquiries.
Retention Period
Personal data relating to general enquiries will only be retained for as long as reasonably necessary to handle and respond to the enquiry.
Unless continued retention is required for contractual, legal or legitimate business purposes, correspondence relating to general enquiries will normally be deleted within 90 days after the enquiry has been resolved.
If an enquiry results in a contractual or business relationship, relevant information may be retained for a longer period where necessary to fulfil contractual obligations, comply with applicable legal requirements or establish, exercise or defend legal claims.
5. Technical Data and Website Security
When you visit the website, certain technical information may be processed automatically by the website, hosting infrastructure and security systems.
This may include:
- IP address;
- browser type and version;
- device type;
- operating system;
- date and time of access;
- requested pages or resources;
- referring website;
- technical logs and security information.
This information may be processed to:
- operate the website;
- ensure website and system security;
- detect and prevent misuse or malicious activity;
- diagnose technical problems;
- maintain the integrity and availability of the website.
The legal basis for this processing is our legitimate interest under Article 6(1)(f) GDPR in operating and maintaining a secure and functional website.
6. Cookies and Similar Technologies
The website uses cookies and similar technologies.
Cookies are small files or pieces of information that may be stored on or accessed from your device when you visit a website.
We may use different categories of cookies depending on the functionality of the website and the choices you make through our cookie consent mechanism.
Strictly Necessary Cookies
These cookies are required for the proper and secure operation of the website.
They may be used, for example, to:
- provide essential website functionality;
- maintain website security;
- remember your cookie and privacy preferences;
- enable basic technical functions.
Where cookies are strictly necessary for the operation of the website, they may be used without your consent where permitted by applicable law.
Analytics Cookies
With your consent, analytics cookies may be used to help us understand how visitors use the website.
These technologies may collect information about:
- pages visited;
- time spent on the website;
- interactions with website content;
- traffic sources;
- browser and device information;
- technical performance.
The information helps us understand website usage and improve the website, its content and user experience.
Advertising Cookies
With your consent, advertising technologies may be used to measure the effectiveness of advertising campaigns and, where applicable, support advertising and remarketing activities.
Where consent is required, analytics and advertising technologies will be used in accordance with the choices you make through the website’s cookie consent mechanism.
You can withdraw or modify your consent at any time through the cookie settings available on the website.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
7. Google Analytics
With your consent, this website uses Google Analytics, a web analytics service provided by Google.
Google Analytics helps us understand how visitors interact with the website.
Depending on the configuration of the service and your consent choices, information processed may include:
- pages visited;
- website interactions;
- approximate geographical information;
- device and browser information;
- session duration;
- traffic source;
- technical identifiers;
- IP-related information.
Purpose
Google Analytics is used to analyse website traffic, understand visitor behaviour and improve the functionality, performance and content of the website.
Legal Basis
The legal basis for the use of non-essential Google Analytics technologies is your consent pursuant to Article 6(1)(a) GDPR.
Where consent is required, Google Analytics will be used in accordance with the consent choices you make through the website’s cookie consent mechanism.
You may withdraw or modify your consent at any time.
8. Google Ads and Conversion Measurement
With your consent, we use Google Ads, including conversion measurement technologies.
These technologies help us understand the effectiveness of our advertising campaigns, including whether a visitor reached the website through a Google advertisement and subsequently completed a particular action.
Depending on the configuration of the service and your consent choices, information processed may include:
- advertising and cookie identifiers;
- interactions with advertisements;
- conversion information;
- website usage information;
- browser and device information;
- IP-related and technical information.
Purpose
The purpose of this processing is to:
- measure advertising performance;
- understand the effectiveness of advertising campaigns;
- optimise advertising activities;
- measure conversions;
- where separately enabled and consented to, support personalised advertising or remarketing.
Legal Basis
The legal basis for the use of non-essential Google Ads technologies is your consent pursuant to Article 6(1)(a) GDPR.
You may withdraw or modify your consent at any time through the website’s cookie settings.
9. Google and International Data Transfers
Google services used on this website may involve the processing of personal data by Google entities and infrastructure located outside the European Economic Area (“EEA”).
Where personal data is transferred outside the EEA, the transfer must be carried out in accordance with the requirements of the GDPR.
Depending on the circumstances, this may include transfers based on an adequacy decision adopted by the European Commission or the use of appropriate contractual and organisational safeguards.
Further information about how Google processes personal data and handles international data transfers is available in Google’s applicable privacy documentation.
10. WordPress
The website is built using WordPress.
WordPress and the plugins installed on the website may process certain technical information necessary to provide website functionality, security, contact forms, cookie management and other enabled features.
The exact information processed depends on the configuration of the website and the plugins and third-party services in use.
We take reasonable steps to ensure that WordPress, plugins and third-party services used on the website are configured and maintained in a manner consistent with applicable data protection requirements.
11. Service Providers and Data Processors
We may use third-party service providers to operate, maintain, secure and analyse the website.
Depending on the configuration of the website, recipients or processors of personal data may include:
- website hosting providers;
- website maintenance and technical service providers;
- email service providers;
- providers of website security services;
- providers of WordPress plugins and website functionality;
- Google in connection with Google Analytics and Google Ads.
Where a service provider processes personal data on our behalf, we take appropriate steps to ensure that the processing is governed by applicable data protection requirements.
Service providers may only process personal data for the purposes for which they have been engaged and in accordance with applicable contractual and legal requirements.
We do not sell your personal data to third parties.
12. International Data Transfers
Some service providers used in connection with the website may process personal data outside the European Economic Area.
Where personal data is transferred to a country outside the EEA, we take appropriate steps to ensure that the transfer complies with the GDPR.
Depending on the recipient and destination country, the transfer may be based on:
- an adequacy decision adopted by the European Commission;
- appropriate contractual safeguards, such as Standard Contractual Clauses;
- another legally recognised transfer mechanism under the GDPR.
Where applicable, additional safeguards may also be implemented to protect personal data transferred internationally.
13. Data Retention
We do not retain personal data for longer than necessary for the purposes for which it was collected.
The applicable retention period depends on:
- the purpose for which the data was collected;
- the nature of the personal data;
- whether a contractual relationship exists;
- applicable statutory retention requirements;
- whether the data may be necessary for the establishment, exercise or defence of legal claims.
Where personal data is no longer required, it will be deleted or anonymised unless continued retention is required or permitted by law.
14. Data Security
We take appropriate technical and organisational measures to protect personal data against:
- unauthorised access;
- unlawful processing;
- accidental loss;
- destruction;
- alteration;
- unauthorised disclosure.
These measures may include appropriate access controls, technical security measures, software maintenance and other safeguards appropriate to the nature of the data processed.
However, no method of transmission over the internet or electronic storage can guarantee absolute security.
15. Your Rights Under the GDPR
Subject to the conditions and limitations set out in the GDPR, you may have the following rights in relation to your personal data:
Right of Access
You have the right to request confirmation as to whether we process your personal data and, where applicable, obtain access to that personal data and information about its processing.
Right to Rectification
You have the right to request the correction of inaccurate personal data and the completion of incomplete personal data.
Right to Erasure
You may request the deletion of your personal data where the requirements of Article 17 GDPR are met.
Right to Restriction of Processing
In certain circumstances, you may request that the processing of your personal data be restricted.
Right to Data Portability
Where the applicable legal requirements are met, you may have the right to receive personal data you have provided to us in a structured, commonly used and machine-readable format and to transmit that data to another controller.
Right to Object
Where processing is based on our legitimate interests, you have the right to object to such processing on grounds relating to your particular situation.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw your consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that your personal data is being processed in violation of applicable data protection law.
To exercise your rights or ask questions about the processing of your personal data, please contact:
We may request additional information where reasonably necessary to verify your identity before responding to a request.
16. Right to Lodge a Complaint
If you believe that the processing of your personal data infringes the GDPR or other applicable data protection legislation, you have the right to lodge a complaint with a competent supervisory authority.
As the Data Controller is established in the Netherlands, you may contact the Dutch supervisory authority:
Autoriteit Persoonsgegevens
(Dutch Data Protection Authority)
P.O. Box 93374
2509 AJ The Hague
The Netherlands
Website: autoriteitpersoonsgegevens.nl
You may also have the right to lodge a complaint with another competent supervisory authority, in particular in the EU/EEA Member State of your habitual residence, place of work or the place of the alleged infringement.
17. Third-Party Websites
The website may contain links to external websites or services operated by third parties.
We are not responsible for the privacy practices, content or security of third-party websites.
We recommend reviewing the privacy policy of any external website before providing personal information.
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- changes to the website;
- changes to the services and technologies we use;
- changes to our data processing activities;
- changes in applicable legal requirements.
The most current version of this Privacy Policy will be made available on this website.
The date of the latest update is displayed at the beginning of this document.
19. Contact
If you have any questions regarding this Privacy Policy, the processing of your personal data or the exercise of your data protection rights, please contact:
Dora Boelens
Email: info@doraboelens.com
Website: www.doraboelens.com