1. Who is responsible for your data
TL-Hosting is the controller for the personal data described in this statement. You can reach us at:
- info@tl-hosting.org
- Address
- Weeshuisgang 3C, 9712 EV Groningen
- Chamber of Commerce (KvK)
- 96745053
2. What we collect, and why
We do not run analytics, advertising or tracking scripts, and we do not buy or sell personal data. Everything below comes from something you chose to send us.
Contact form
When you use the contact form we receive your name, email address, the subject you selected and your message. We use this only to answer you and, if it leads to one, to prepare a quote.
PC configurator
When you request a build proposal we receive your name and email address together with the choices you made — workload, budget range, form factor and noise preference. We use this only to put a build proposal together.
Technical data
-
An anonymised IP address. Before your submission is emailed to us, the last part
of your IP address is removed (for example
203.0.113.42becomes203.0.113.0). We keep this to recognise abuse of the form; it cannot identify you individually. - A rate-limit record. To stop the form being used to send bulk mail, we briefly store a one-way hash of your IP address with a timestamp. It is deleted automatically after ten minutes and cannot be turned back into an IP address.
- Server logs. Our hosting provider keeps standard web-server logs (requests, timestamps, IP addresses) for security and troubleshooting, under their own retention policy.
If sending fails
If our mail server cannot deliver a submission, the message is written to a recovery file that is stored outside the public website — it is not reachable from the internet — so your request is not silently lost. We remove entries once the request has been handled.
3. Legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Answering your message or preparing a quote | Steps taken at your request prior to entering into a contract (Art. 6(1)(b)) |
| Delivering a service you ordered | Performance of a contract (Art. 6(1)(b)) |
| Protecting the form against abuse and spam | Our legitimate interest in a working, non-abused website (Art. 6(1)(f)) |
| Keeping records required by tax and company law | Legal obligation (Art. 6(1)(c)) |
4. How long we keep it
- Enquiries that do not lead to work: up to 12 months, then deleted.
- Enquiries that become a project: for the duration of the project and, where invoicing is involved, for the 7-year retention period Dutch tax law requires.
- Rate-limit records: 10 minutes, deleted automatically.
- Server logs: per our hosting provider's policy.
5. Cookies and local storage
This website sets no tracking cookies. Fonts are hosted on our own server, so loading a page does not tell any third party that you visited. If you dismiss the privacy notice at the bottom of the page, we store a single flag in your browser's local storage so we do not show it again — that flag stays in your browser and is never sent to us. Clearing your browser data removes it.
Our content-management system uses a session cookie, but only for logged-in administrators. As a visitor you never receive it.
6. Who else processes your data
We keep the chain short. The following parties process personal data on our behalf, under a processing agreement:
- Hostingprovider (webhosting en e-mail)
- Cloudflare, Inc. (DNS en e-mailrouting)
We do not share your data with anyone else, unless we are legally required to. If we later add a service that processes personal data — a payment provider, for example — we will name it here before it goes live.
7. Security
The site is served over HTTPS. Form submissions are validated on the server, rate-limited, and protected against mail-header injection. Files that are not meant to be public — our database and the recovery file described above — are stored outside the public website directory. Access to our content-management system is password-protected and limited to the people who need it.
8. Your rights
Under the GDPR you can ask us to:
- tell you what personal data we hold about you, and give you a copy;
- correct data that is wrong or incomplete;
- delete your data, where we have no obligation to keep it;
- restrict or object to our processing;
- transfer your data to you or another party in a portable format.
Email info@tl-hosting.org and we will respond within one month. We may ask you to confirm your identity first, so we do not hand your data to someone else.
If you are not satisfied with how we handle your request, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
9. Changes to this statement
If we change how we handle personal data, we will update this page and the "last updated" date at the top. Material changes will be communicated to clients with an active service directly.