1. Data Controller
This website is owned and operated by:
Maaike van der Toorren Trading under: Wereld van Begrip Address: Chamber of Commerce (KvK): Email: maaike@wereldvanbegrip.nl
2. Personal Data Collected
The contact form on this website collects the following data:
- Name (required)
- Email address (required)
- Phone number (optional)
- Message (required)
No other personal data is collected. This website does not use analytics tools, advertising cookies, or tracking pixels.
3. Purposes and Legal Bases for Processing
| Processing | Legal basis | Retention period |
|---|---|---|
| Responding to contact requests via the form | Consent (Art. 6(1)(a) GDPR) | Until the request is handled, max. 1 year |
| Executing a coaching or guidance trajectory | Performance of a contract (Art. 6(1)(b) GDPR) | Duration of trajectory plus 2 years |
| Financial administration | Legal obligation (Art. 6(1)(c) GDPR) | 7 years (statutory retention obligation) |
Data from persons who make contact but do not become clients will be deleted after the contact request is handled, at the latest after 1 year.
4. Recipients of Personal Data
Data submitted through the contact form is processed on the data controller’s own server infrastructure (self-hosted). Email delivery uses:
Amazon Web Services (Amazon SES)
Role: (sub-)processor, solely for transporting the contact email
Processing location: European Union (Frankfurt region, eu-central-1)
How it works: the form is processed by a self-hosted mail server, which delivers the email — encrypted — to the data controller via the Amazon SES relay (EU region).
Transfer to a third country: Processing and email delivery take place within the European Union; there is no structural transfer to a third country. A data processing agreement (DPA) is in place with Amazon Web Services, and Standard Contractual Clauses (SCCs) apply as an additional safeguard (pursuant to Art. 46 GDPR).
Personal data is not sold, shared with, or transferred to other third parties, unless required by law.
5. Cookies
This website places no analytical or tracking cookies.
The contact form is protected by a self-hosted CAPTCHA (Cap, based on proof-of-work). It places no cookies and does not track visitors.
6. Security
Personal data is transmitted exclusively over a secure connection (HTTPS/TLS) and processed on the data controller’s own server infrastructure. Email delivery via Amazon SES is likewise encrypted (TLS).
7. Your Rights
You have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR): You may request what data is being processed.
- Right to rectification (Art. 16 GDPR): You may have incorrect data corrected.
- Right to erasure (Art. 17 GDPR): You may request deletion of your data.
- Right to restriction of processing (Art. 18 GDPR): You may request that processing be restricted.
- Right to object (Art. 21 GDPR): You may object to the processing of your data.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time. This does not affect the lawfulness of processing prior to withdrawal.
To exercise these rights, please contact: maaike@wereldvanbegrip.nl
8. Right to Lodge a Complaint
You have the right to lodge a complaint with the supervisory authority:
Autoriteit Persoonsgegevens (Dutch Data Protection Authority) Website: autoriteitpersoonsgegevens.nl Phone: +31 88 - 1805 250
9. Changes to This Privacy Policy
This privacy policy may be updated if practices or legislation change. The most current version is always available on this page. Last updated: 18 June 2026.