Privacy statement

Who we are

SSP Consultancy, registered at Papenstraat 5, 6211 LG Maastricht, is the controller for the personal data described in this statement. You can reach us at sophie@sspconsultancy.nl or 06 23 19 06 68.

Why we are allowed to process it

The GDPR asks for a lawful basis for each purpose. There are two here.

Your enquiry: legitimate interests. If you send us a request or a question, we keep what you sent so that we can answer you and carry out any work that follows. That is what you expect from us when you get in touch.

Analytics: consent. Nothing is measured unless you accept it, and you can withdraw your consent at any time with the button further down.

What data we process

Through the form. If you request the Start Scan, Growth Scan, Exit Scan or Crisis Scan, or ask a general question, we process your name, your email address, your company name, your phone number if you give one, the situation you choose, your message, and which language you were reading the site in. We use that data only to answer your request. The form is handled by Netlify, who host this website, and your request reaches us by email.

When you email, call or message us. We process whatever you send or tell us yourself. If you send a WhatsApp message, it goes through WhatsApp and WhatsApp’s own privacy policy applies as well.

Cookies and statistics

If you accept analytics, we use Google Analytics to see which pages are read and how visitors arrive at the site. It does not collect your name, your email address or anything else you have not typed into the form yourself, and we cannot use it to work out who you are. It does give your browser a random identifier so that a repeat visit is counted once, which is why it needs your consent. Google Analytics does not store your IP address.

If you accept, two cookies are set:

Nothing is loaded until you choose. If you decline, or ignore the notice, this website does not contact Google at all and no cookie is set. You can change your choice at any time:

What we do not collect

No advertising cookies, no tracking pixels, no profiling, and nothing is sold or shared for marketing. The typeface is served from this website itself, so opening a page tells no one else that you did. Your analytics choice is kept in your own browser’s local storage and never leaves your device.

Who we share data with

Two companies process data on our behalf, and both are based in the United States. Netlify hosts this website and handles the form. Google provides Google Analytics, if you accept it. Both are certified under the EU-US Data Privacy Framework, which the European Commission recognises as giving personal data an adequate level of protection when it goes to the United States. Nothing is sold, and nothing is passed to anyone else for their own purposes.

How long we keep it

We keep an enquiry while we are in conversation with you and for up to two years afterwards, in case you come back. If an engagement follows, we keep what belongs in our accounts for as long as the law requires. Google Analytics data is deleted automatically by Google after 14 months. Ask, and we will delete your data sooner.

Your rights

You can ask us what data we hold about you, have it corrected or erased, object to its processing, or ask for it to be transferred elsewhere. Where we rely on your consent, as we do for analytics, you can withdraw it whenever you like, as easily as you gave it: use the button above. Withdrawing does not undo anything lawfully done before you did.

Send your request to sophie@sspconsultancy.nl. We will respond within one month.

If you are not satisfied with how we handle your data, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority in the country where you live.

Changes

If this statement changes, the date at the top changes with it.