Privacy policy
Last updated: 22 April 2026
Who we are
This website, nis2-compliant.com, is operated by Grey Clerk / De Grijze Clercq, a consultancy registered in the Netherlands. Contact: info@degrijzeclercq.nl.
Grey Clerk is the data controller under the EU General Data Protection Regulation (GDPR) for personal data collected through this site.
What data we collect
We collect only the data you voluntarily provide or that is necessary to operate the site.
- Contact form submissions. When you fill in our contact form, you provide your email address and any information you choose to include in the message. The form is processed by Web3Forms and delivered to info@degrijzeclercq.nl.
- Analytics. We use Vercel Analytics to count page views and measure site performance. Vercel Analytics does not use cookies and does not collect personally identifiable data. IP addresses are anonymized before processing.
- Server logs. Our hosting provider (Vercel) keeps short-lived access logs for security and abuse prevention. Logs include IP address, user agent, and request timestamps, and are purged after 30 days.
We do not use advertising cookies, tracking pixels, or third-party ad networks.
Why we process your data
- To respond to your inquiry. Legal basis: your consent (GDPR Article 6(1)(a)) when you submit the contact form.
- To measure and improve the site. Legal basis: legitimate interest (GDPR Article 6(1)(f)).
- To prevent abuse. Legal basis: legitimate interest (GDPR Article 6(1)(f)).
How long we keep your data
Contact form submissions are retained for up to 24 months after the last interaction, then deleted. Analytics data is retained for 12 months. Server logs are retained for 30 days.
Who we share data with
We do not sell or rent personal data. We share data only with processors that operate on our behalf:
- Vercel Inc. (hosting, analytics). EU and US data centers, covered by Standard Contractual Clauses for transfers outside the EEA.
- Web3Forms (contact form). Data is transmitted to our email inbox; Web3Forms does not retain submissions long-term.
- Google Search Console (SEO insights on aggregate traffic, no individual data).
Your rights
Under GDPR you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
- Lodge a complaint with your national supervisory authority (in the Netherlands: Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl)
To exercise any of these rights, email info@degrijzeclercq.nl. We respond within 30 days.
Security
The site is served over HTTPS. Form submissions are encrypted in transit. We apply the same technical and organizational controls to client data that we advise for NIS2 compliance.
Cookies
This site does not set tracking cookies. Vercel Analytics works without cookies. We may set a minimal session cookie for site functionality if required.
Changes to this policy
We update this policy when our practices change. The "last updated" date at the top of this page shows the current version. Material changes are announced on the site.
Contact
Questions about this policy or your data: info@degrijzeclercq.nl.