Privacy
How personal data is handled when you visit the portfolio or get in touch.
Who is responsible
Storm Nijhuis, based in Amsterdam, Netherlands, is responsible for the personal data handled through this portfolio and its enquiries. For privacy questions or requests, email storm.nijhuis@gmail.com. Business identification information is on the business details page.
Information handled
When you email, the information you provide may include your name, email address, telephone number, organisation, project brief, messages and attachments.
When you visit, Vercel processes technical information needed to deliver and protect the website. This may include your IP address, requested URL, request time, browser or device information, and security or error information.
You can browse without submitting an enquiry. Contact details and a project brief are needed to respond meaningfully or prepare a commission; information that is not relevant to your enquiry is optional.
Why information is used
- Requested quotes and commissions: to take steps at your request before entering a contract, or to perform an agreed contract (GDPR Article 6(1)(b)).
- Other enquiries and collaborations: the legitimate interest in responding to correspondence and organising professional work (Article 6(1)(f)).
- Website delivery and security: the legitimate interest in providing a reliable website and preventing misuse (Article 6(1)(f)).
- Records required by law: compliance with applicable legal obligations, such as tax and accounting requirements, where relevant (Article 6(1)(c)).
The website does not use visitor profiling or automated decisions that produce legal or similarly significant effects.
Service providers
- Vercel: hosts and delivers the website and handles technical requests and security information. See Vercel’s privacy notice and data processing addendum.
- Google / Gmail: provides the mailbox used for email enquiries and processes message contents, attachments and email metadata. See Google’s privacy policy.
- GitHub: maintains the website’s source repository and supports deployment to Vercel. This website does not send enquiry messages to GitHub or load its images and fonts from GitHub. See GitHub’s privacy statement.
Information may also need to be disclosed to professional advisers or public authorities where required for a commission or by law. Information about any additional recipients involved in a commission should be supplied before sharing personal data with them.
International processing
Vercel and Google operate internationally, so personal data may be processed outside the European Economic Area, including in the United States.
The applicable transfer arrangements for the hosting and email accounts, and how to obtain a copy of the safeguards, are being confirmed.
Contact storm.nijhuis@gmail.com for information about the safeguards relevant to your data.
How long information is kept
- Enquiry correspondence
- The retention period for enquiries that do not become commissions is being confirmed.
- Hosting and security logs
- The retention periods applicable to the Vercel project and its enabled logging features are being confirmed.
- Commission records
- For the duration needed to perform the commission and deal with relevant claims, subject to applicable legal retention obligations.
- Accounting records
- For the applicable statutory retention period where tax and accounting obligations require it.
Your privacy rights
Depending on the circumstances, you may request access, correction, deletion, restriction of processing or a portable copy of your data. You may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.
Email storm.nijhuis@gmail.com with your request. Only information necessary to verify your identity should be requested. Requests are normally answered within one month; if a lawful extension is needed, you will be informed.
You may lodge a complaint with the Autoriteit Persoonsgegevens, or with the competent data protection authority in your country.
Cookies and external links
The portfolio’s images and fonts are served from this website. Its current pages do not use analytics, advertising trackers, embedded social feeds or third-party video players. See the cookie information for browser storage and hosting security features.
Following the Instagram link takes you to a separate service whose own privacy and cookie policies apply. Instagram is not embedded in this website.
Updates to this notice
This notice will be updated when the website or the way personal data is handled changes. The date above identifies the latest revision.