Privacy policy

Who is responsible

Samy's Studio is the business of Samy Van Vooren, a web designer in Belgium. I am responsible (the controller) for the personal data described on this page. For any privacy question, email samy@samystudio.com.

Samy's Studio, Samy Van Vooren, Pastoor Moonslaan 23, 2650 Edegem, Belgium. Enterprise number (KBO/BCE): 0782.667.660.

The contact form

When you send the contact form, I receive your email address and, if you fill them in, your name, phone number and message, plus the date and time you sent it. This is saved in a Google Sheet that I use to follow up on requests.

I use this data only to answer your request and, if you ask for it, to prepare a quote. The legal basis is taking steps at your request before a possible contract (Article 6(1)(b) GDPR). The form data is never sent to Google Analytics.

I delete contact requests 6 months after our last contact.

Google Analytics (only with your consent)

Only when you click Accept in the cookie banner, the site loads Google Analytics 4, provided by Google. It sets cookies (_ga and _ga_<id>) to count page views, repeat visits and contact form submissions. I use it for statistics only: the advertising signals stay switched off.

The legal basis is your consent (Article 6(1)(a) GDPR and the Belgian rules on cookies). If you click Reject, or make no choice, Google Analytics is not loaded at all and no request is sent to Google.

Your choice is stored in your own browser (localStorage, key samy_consent) for 6 months. After that the banner asks again. You can change or withdraw your choice at any time with the Cookie settings button at the bottom of every page. Withdrawing does not affect what was collected before.

Google Analytics keeps this data for 14 months, then deletes it.

Vercel Analytics and Speed Insights (no cookies)

The site is hosted by Vercel. Vercel Web Analytics and Speed Insights count visits and measure page speed without cookies and without storing anything in your browser, so they run for every visitor. The legal basis is my legitimate interest in a site that works and loads fast (Article 6(1)(f) GDPR).

Vercel keeps this data and its server logs only for a limited period, according to Vercel's own retention policy.

Links in my emails

If I emailed you and you click a link in that email, the link passes through samystudio.com/api/track. It records which email the link belongs to, the time, your browser type (user agent) and a shortened one-way hash of your IP address, stored in a database at Upstash. I use this only to see whether my emails are useful. The legal basis is my legitimate interest (Article 6(1)(f) GDPR). You can object at any time by email.

Click records are deleted after 12 months.

Who processes the data for me

Google (Google Sheets and, with your consent, Google Analytics), Vercel (hosting and cookieless statistics) and Upstash (email link clicks). I do not sell your data and I do not share it for advertising.

Each of them processes the data for me under their own data processing terms, which include the safeguards the GDPR requires for any transfer outside the EU.

Your rights

You can ask to see, correct or delete your data, to limit its use, to receive it in a usable format, and to object to its use. Where you gave consent, you can withdraw it at any time. Send your request to samy@samystudio.com. I reply within one month.

If you think I handle your data incorrectly, you can file a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussels, www.dataprotectionauthority.be.