Privacy and cookie statement
Last updated: October 16, 2026
This statement is available in Dutch and English. If the two versions differ, the Dutch version prevails.
How we handle your data
De Duurzame Oplossing B.V. handles your personal data with care and complies with the General Data Protection Regulation (GDPR). This statement explains which data we process through this website, why, on what legal basis, who we share it with, how long we keep it, and what choices you have.
Who we are
The data controller is De Duurzame Oplossing B.V., registered in the Dutch Trade Register under number 80912133.
De Duurzame Oplossing B.V.
Harlingertrekweg 53
8913 HR Leeuwarden
The Netherlands
+31 58 203 7800
[email protected]
What this statement covers
This statement applies to the website deduurzameoplossing.nl: its pages, the contact form, the application forms, the newsletter form, and site search.
Which data we process and why
Contact form
- What: your name, email address, and message, plus your phone number, organization, and how you would like to work with us, if you provide them.
- Why: to answer your question. Your message is sent to [email protected] as an email through our email service. We do not use this data for marketing. That is what the newsletter is for, and it has its own sign-up.
- Legal basis: legitimate interest (we want to reply to anyone who contacts us).
Application forms
- What: your name, email address, motivation, CV (PDF, DOC, or DOCX, up to 10 MB), the vacancy, and your agreement to us processing your data, plus your phone number and LinkedIn profile, if you provide them.
- Why: to process your application. Your application is sent to [email protected] as an email, with your CV attached, through our email service.
- Legal basis: steps taken at your request before entering into a possible employment contract. We ask for your consent before keeping your application longer.
Newsletter
- What: your name and email address, plus your organization and the topics you are interested in, if you provide them. MailerLite also tracks whether you open the newsletter and which links you click.
- Why: to send you our newsletter, and to see which topics readers find interesting so we can improve it. Our server passes your sign-up to MailerLite, the service we use to send the newsletter. The page itself does not load anything from MailerLite.
- Legal basis: your consent. You can unsubscribe at any time using the link at the bottom of every newsletter.
Site search
Site search runs on our own server. What you type becomes part of the web address, so it ends up in the technical logs described below. We do not store search queries separately.
Technical logs and security
- What: for every visit, our server records your IP address, the requested web address, the time, and the server's response. When you submit a form, it also records your email address (and, for an application, the file name of your CV) as proof that the message was sent.
- Why: to keep the website available and secure, and to find errors. We monitor usage to prevent misuse and to log any attempts at misuse as evidence in case of an investigation.
- Legal basis: legitimate interest.
Analytics and marketing, only with your consent
If you give consent in the cookie banner, we measure how the website is used and how our campaigns perform. This may involve processing the following data: your IP address, browser, operating system, device, internet provider, approximate location, the pages you view, and what you do on them. The services we use for this are listed below under Cookies. Legal basis: your consent.
Business operations and compliance
Where necessary, we also use this data for our business operations, for archiving, to meet legal obligations, and to handle requests, complaints, and disputes. Legal basis: compliance with a legal obligation and legitimate interest.
Do you have to give us data?
No. If you want us to reply, we need your name and email address on the contact and application forms, and for an application also your motivation and CV. For the newsletter, we need your name and email address. You can leave optional fields blank. If you do not consent to cookies, you can still use the website as usual.
Cookies
Cookies are small text files stored on your device when you visit a website. They help a website recognize your device and remember information.
Strictly necessary: remembering your cookie choice
We store your choice from the cookie banner in your own browser (localStorage, under the name ddop-consent), with the date you chose. This is not sent to our server. It is needed for the website to work, and no consent is required for it.
Only with your consent: analytics and marketing
If you click Accept in the banner, the website loads Google Tag Manager, which in turn loads the services below. If you click Decline or do not make a choice, the website does not load anything from these parties and we do not set any analytics or marketing cookies. Declining has no effect on your use of the website. Each service's own privacy statement describes which cookies it sets and for how long.
Google Tag Manager
- Purpose: loading the analytics and marketing services below
- Provider: Google Ireland Limited
- Data: Tag Manager itself only collects aggregated data about tag firing, with no IP addresses or data that can be traced back to an individual. Google also keeps standard technical request data and deletes it within 14 days
- More information: support.google.com/tagmanager and policies.google.com/privacy
Leadfeeder
- Purpose: seeing which companies visit our website, so we can improve our services
- Data: IP address, company information, page visits
- Retention period: 12 months
- Data transfer: within the EU
- More information: leadfeeder.com/privacy
LinkedIn Insight Tag
- Purpose: measuring the effectiveness of our LinkedIn campaigns and analyzing website use
- Data: IP address, browser information, page visits, interactions
- Retention period: 180 days
- Data transfer: to the US and other countries outside the EU. LinkedIn uses Standard Contractual Clauses and supplementary measures for this
- More information: linkedin.com/legal/cookie-policy and linkedin.com/legal/privacy-policy
PostHog
- Purpose: analyzing website use to improve the website
- Data: session information, page visits, click behavior, anonymized where possible. We do not make session recordings
- Retention period: 12 months
- Data transfer: within the EU (servers in Frankfurt, Germany)
- More information: posthog.com/privacy
Changing your choice
You can change your choice or withdraw your consent at any time with the button below. You can reach this page through the Privacy link at the bottom of every page. If you withdraw your consent, these services will stop loading. If you do not see a button here, this website does not collect analytics and there is nothing to choose.
Other parties on the website
The website's fonts, images, and scripts are served from our own server. If you click the directions link on the contact page, you will be taken to Google Maps, where Google's privacy policy applies.
Who we share data with
- DigitalOcean LLC: hosts the website and the logs. Where: Amsterdam (EU); transfer to the US under the EU-U.S. Data Privacy Framework.
- Resend, Inc.: sends form submissions as emails. Where: sending from the EU (Ireland); data about sent emails is stored in the US, under the EU-U.S. Data Privacy Framework.
- Microsoft (Microsoft 365): hosts our mailboxes, where form submissions arrive.
- MailerLite Limited: sends the newsletter and tracks opens and clicks. Where: within the EU.
- Google, Leadfeeder, LinkedIn, and PostHog: only after you give consent; see Cookies.
Leadfeeder, LinkedIn, and PostHog process the data under their own privacy policies, as independent controllers. We do not sell your data. Other than with these parties, we share your data only when required by law.
How long we keep data
- Contact messages: until your question has been resolved, and then for up to 12 months.
- Applications and CVs: until 4 weeks after the hiring process ends; with your consent, up to 1 year.
- Newsletter data: until you unsubscribe.
- Technical logs: we do not store them ourselves; only our hosting provider holds them, for as long as it retains them.
- Analytics data: per service; see Cookies.
- Your cookie choice: in your own browser, until you clear or change it.
Automated decision-making
We do not make decisions about you that are based solely on automated processing and that produce legal effects concerning you or similarly significantly affect you.
Security
We take the security of your data seriously and have measures in place to prevent unauthorized access. For example, the website uses an encrypted connection (HTTPS). Forms go to our own server, and the keys for our email and newsletter services are stored only on that server. Without your consent, the website does not load any third-party scripts. We continuously test our security measures, with advice and testing from outside specialists.
Your rights
You have the right to:
- access your data;
- have it rectified;
- have it erased;
- have its processing restricted;
- have your data transferred to another party (data portability);
- object to processing based on our legitimate interest;
- withdraw your consent at any time.
To exercise these rights, email [email protected]. We will respond within one month. If you disagree with how we handle your data, you can raise this with us or lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Changes
We may update this statement, for example when we start using a new service. The date at the top shows when it was last updated.
Contact
Questions about this statement or about your data? Get in touch through the contact page, email [email protected], or call +31 58 203 7800.