Privacy Policy

1. Introduction

This privacy policy explains how Crafity ("we", "us", "our") collects, uses, and protects your personal data when you visit our website and use our services. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

2. Data We Collect and How We Use It

2.1 Contact Form

When you submit our contact form, we collect the following information:

• Full name
• Email address
• Company name
• Phone number
• Message content

Purpose: To respond to your inquiry and provide information about our services.

Legal basis: Legitimate interest (Article 6(1)(f) GDPR) - we need this information to respond to your request.

Retention period: We retain emails from our contact form indefinitely unless you request deletion. This allows us to maintain a history of our business communications. You can request deletion of your data at any time.

Processing: When you submit the form, your information is sent via email to our business email address hosted by Google Workspace. No data is stored in a database on our website.

2.2 Google Analytics (Optional)

We use Google Analytics 4 to understand how visitors use our website. This helps us improve our website and services.

Data collected by Google Analytics may include:

• Pages visited
• Time spent on pages
• Browser type and version
• Device type
• General location (country/city level)
• Referral source

Important: Google Analytics 4 automatically anonymizes IP addresses and does not store full IP addresses.

Legal basis: Consent (Article 6(1)(a) GDPR) - we only activate Google Analytics after you accept cookies via our cookie banner.

Your choice: You can decline Google Analytics tracking via our cookie banner. This will not affect your ability to use our website.

Data sharing: Google Analytics data is processed by Google LLC. While Google may process data outside the EU, they provide appropriate safeguards through their EU-US Data Privacy Framework certification and Standard Contractual Clauses.

2.3 Server Logs

Our hosting provider (Vercel) automatically collects technical information when you visit our website:

• IP addresses
• Browser type
• Access times
• Pages requested

Purpose: Website security, performance monitoring, and troubleshooting.

Legal basis: Legitimate interest (Article 6(1)(f) GDPR) - necessary for the operation and security of our website.

Retention period: Server logs are retained according to Vercel's standard retention policies.

3. Data Processors

We work with the following third-party processors who handle your data on our behalf:

Google Workspace (Google LLC)

• Purpose: Email hosting and communication
• Location: Data may be processed in multiple locations, including outside the EU
• Safeguards: Standard Contractual Clauses, EU-US Data Privacy Framework

Google Analytics (Google LLC)

• Purpose: Website analytics (optional, requires consent)
• Location: Data may be processed in multiple locations, including outside the EU
• Safeguards: Standard Contractual Clauses, EU-US Data Privacy Framework

Vercel Inc.

• Purpose: Website hosting
• Location: Our website is hosted in Frankfurt, Germany (EU)
• Safeguards: Vercel complies with GDPR requirements

4. Cookies

We use cookies only with your consent via our cookie banner.

Types of cookies we use:

• Analytics cookies (Google Analytics): Only placed after you consent via the cookie banner
• Consent cookies: To remember your cookie preferences

You can change your cookie preferences at any time by clicking the cookie settings link in our footer or clearing your browser cookies.

5. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of access: You can request a copy of the personal data we hold about you
• Right to rectification: You can ask us to correct inaccurate data
• Right to erasure ("right to be forgotten"): You can request deletion of your data
• Right to restriction: You can ask us to limit how we use your data
• Right to data portability: You can request your data in a structured, commonly used format
• Right to object: You can object to processing based on legitimate interests
• Right to withdraw consent: You can withdraw consent for cookies at any time

To exercise any of these rights, please contact us at info@crafity.com.

We will respond to your request within one month.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes:

• Secure HTTPS connections for our website
• Encrypted email communication via Google Workspace
• Hosting with a reputable EU-based data center (Frankfurt)
• Regular security updates and monitoring

7. Data Retention

• Contact form emails: Retained indefinitely unless you request deletion
• Google Analytics data: Retained according to Google Analytics settings (typically 14-26 months)
• Server logs: Retained according to Vercel's standard retention policy

8. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of these third-party sites. We encourage you to read their privacy policies.

9. Children's Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

10. Changes to This Privacy Policy

We may update this privacy policy from time to time. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this policy periodically.

11. Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

12. Contact Us

If you have any questions about this privacy policy or how we handle your personal data, please contact us: