Privacy and cookies
Privacy statement
Last updated on 13 November 2026
Ducti handles personal data with care and processes no more than it needs. Below you can read which data the website processes, why, how long it is kept and what your rights are. The statement follows the General Data Protection Regulation, the GDPR.
Who is responsible
Ducti is the sole proprietorship of Robbert Coenradi, based in Geleen, the Netherlands, and registered with the Dutch Chamber of Commerce under number 97182095. Ducti is responsible for the processing of personal data through ducti.nl. Questions about privacy can be sent to robbert@ducti.nl.
Which data and why
Through the contact form the site asks for your name, your email address, the topic and your message, and if you wish your company name and your phone number. This data is only used to answer your question and, if you want, to prepare a proposal. The legal basis is your consent, which you give with the checkbox under the form, and the steps needed before an assignment.
Ducti does not use your data for newsletters or advertising and does not sell or share it with others for their own purposes.
How long data is kept
A message sent through the form is kept for as long as needed to handle your question and then for at most two years, so a follow up conversation knows the history. If an assignment follows, the statutory retention period of seven years applies to the administration. If you want your data removed sooner, that is possible on request.
Service providers
For the website and for handling messages Ducti works with a few fixed service providers. Agreements on security and confidentiality are in place with each of them, and they may only use your data for the service they provide.
- Vercel, for hosting the website. The server functions run in a data centre in Dublin.
- Supabase, for the secure storage of messages from the contact form.
- Resend, for sending the confirmation of your message.
- Microsoft 365, for the ducti.nl mailbox.
- Upstash, for counting reactions under a case. It holds numbers only, nothing about who reacted.
Data outside the European Union
Vercel, Supabase, Resend and Microsoft are American companies. Where data is processed outside the European Union, this is based on the EU-US Data Privacy Framework or the standard contractual clauses of the European Commission.
Cookies
This website sets one functional cookie, ducti_lang. It remembers the language in which you view the site, is valid for one year and contains nothing else. Your choice of a light or dark appearance is stored only in your own browser.
Ducti uses no analytics cookies, no tracking cookies and no third party cookies or pixels, such as those of Google or social media. Fonts and images come from the site's own server. Functional cookies need no consent, which is why the site does not ask for it. Should measuring software ever be added, the site will ask for your consent first and this statement will be updated.
When you react under a case, the site counts it anonymously. Your own browser remembers which reaction you gave, so you can take it back. No cookie is set for this and nothing about you is stored.
Visits and security
On every visit the hosting provider processes technical data such as your IP address, your browser and the time, to keep the site secure and available. This data is kept briefly and is not used to follow or recognise visitors.
The site works only over an encrypted connection. What you fill in in the sample portal on the homepage is only used to create the sample PDF and is not stored. The block with contributions on GitHub only retrieves the number of contributions per day, without sharing any visitor data. Links to other websites, such as those of clients, fall under the privacy policy of those websites.
Your rights
You have the right to access your data and to have it corrected or deleted. You can also object to the processing, have the processing restricted, withdraw your consent or have your data transferred. Send your request to robbert@ducti.nl and you will receive an answer within one month.
If you are not satisfied with how Ducti handles your data, you can file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl.
Changes
This statement is updated when the website or the service providers change. The date at the top shows when that last happened.