Privacy statement

The short version

sales.bouma.cloud sets no cookies for visitors, runs no analytics or tracking scripts, and does not share anything about you with third parties. Besides the server logs and the anonymous counts below, nothing about your visit is kept.

What is processed, and why

• Server logs. The web server keeps standard access logs with IP address, requested page, time and browser type for at most 14 days, to keep the site running and to defend against abuse. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Visitor statistics and uptime. Every request is turned into per-minute counts: requests, errors, response time, data volume and unique visitors. To count visitors, a code is computed from the IP address and browser type (a hash with a key that is replaced every day and deleted after two days), so it can't be traced back to you and you aren't recognised on a later day. The IP address and browser type themselves are not stored, and no cookies are used. The site is also checked for availability every minute. The counts are kept for 35 days. Legal basis: legitimate interest (insight into use and availability).
• Error reports. Technical error reports (the error message, the page path without query string, the browser type and, for signed-in users, their account id) are used only to fix bugs and are kept for up to 90 days. Legal basis: legitimate interest (keeping the site working).
• Sign-in. Signing in goes through the central login at auth.bouma.cloud, whose privacy statement covers your account. After you sign in, this site sets one encrypted session cookie and stores your account id, email address and name so it can show who is signed in and link you to your agent profile or client documents. Visitors who don't sign in get no cookie.
• Business contact data. For its sales work bouma.cloud keeps public business information (business name, address, phone number, email address, website and category) of businesses that may want a website, with notes on contact with them. Legal basis: legitimate interest (approaching businesses about our services). A business can object at any time: it is then marked “do not contact” and not approached again.
• Clients. Quotes, contracts, signatures (name, time and IP address of online acceptance) and uploaded documents are kept to perform the contract and for the legal retention period. Legal basis: contract (Art. 6(1)(b) GDPR) and legal obligation.

Hosting

The site, its database, logs, statistics and error reports are on servers in the European Union (OVHcloud, France). DNS is provided by Cloudflare. No data about your visit goes to parties outside the EU.

Your rights

Under the GDPR you can ask what data exists about you and have it corrected or deleted. Email hbouma01@gmail.com to make a request. You can complain to the data protection authority in your country.