Last updated 19 June 2026

Privacy Policy

This policy explains what personal data Something New B.V. collects through this website, why, and the rights you have. It is written to meet the General Data Protection Regulation (GDPR) and Dutch data protection law.

Who is responsible

The controller for the data described here is:

• Something New B.V.
• Het Poortgebouw, Beechavenue 54–62, 1119 PW Amsterdam, the Netherlands
• KvK 96649933 · VAT NL867698925B01

You can reach us about any privacy matter through the contact form, by phone on +31 20 793 2090, or by post at the address above.

The short version

• The site is a simple, mostly static website. There is no account and no login. Advertising and analytics measurement run only if you agree.
• If you use the contact form, we receive what you send us so we can reply.
• Page-view analytics run only if you agree through the cookie banner, and they are cookieless and aggregated.
• We do not sell personal data, and we do not use it for profiling or automated decisions that affect you.

What we collect and why

Contact form

When you send a message, we receive the name you provide, your email address, and the content of your message, together with the technical metadata needed to deliver it. We use this to read your enquiry, decide whether there is a fit, and reply. The legal basis is our legitimate interest in responding to enquiries and taking steps at your request before any engagement (Article 6(1)(b) and (f) GDPR).

Spam protection

The contact form is protected by Cloudflare Turnstile, which checks that a submission comes from a person rather than a bot. To do this it processes interaction signals and your IP address. The legal basis is our legitimate interest in keeping the form secure and usable (Article 6(1)(f) GDPR).

Analytics

With your consent, we use Vercel Web Analytics to count page views and understand which pages are read. It is privacy-friendly and cookieless: it does not set advertising cookies and does not track you across other websites. We see aggregated figures, not individual profiles. The legal basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time through the “Cookie settings” link in the footer.

Advertising measurement

If you consent, we use Google Ads to measure which adverts lead to an enquiry and, where relevant, to show our adverts to people who have visited the site (remarketing). This can set cookies and share limited event data with Google. We use Google Consent Mode, so these tags stay inactive until you accept, and you can withdraw consent at any time through the “Cookie settings” link in the footer. The legal basis is your consent (Article 6(1)(a) GDPR).

Hosting and security logs

Our hosting provider processes standard technical information, such as IP address and request details, to deliver the site and keep it secure and available. The legal basis is our legitimate interest in operating a reliable, secure website (Article 6(1)(f) GDPR).

Who processes data for us

We keep the number of providers small. Each acts as a processor on our behalf under a data processing agreement:

International transfers

The providers above are based in the United States, so some data is processed outside the European Economic Area. Where that happens, the transfer is covered by appropriate safeguards, namely the EU-US Data Privacy Framework and, where relevant, the European Commission’s Standard Contractual Clauses.

How long we keep it

We keep contact-form messages for as long as needed to handle your enquiry and any follow-up, and then for a limited period for our records, after which they are deleted. If an engagement follows, related correspondence is kept under the terms of that engagement. Analytics data is aggregated and not tied to an identifiable person.

Your rights

Under the GDPR you can ask us to:

• confirm what data we hold about you and receive a copy (access);
• correct data that is wrong or incomplete (rectification);
• delete data where there is no longer a reason to keep it (erasure);
• restrict or object to how we use it;
• receive certain data in a portable format;
• withdraw consent for analytics at any time, without affecting prior processing.

To exercise any of these, use the contact form or write to us at the postal address above. We respond within the time the GDPR allows.

Complaints

If you are not satisfied with how we handle your data, you can lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl. We would appreciate the chance to address it first.

Changes

We may update this policy as the site or the law changes. The date at the top shows the latest version. Material changes will be reflected here.