Privacy.
Short version: I run no tracking, no analytics, no external scripts. What I do process, and why, is below.
Who runs this site
This site is run by De Vreng Holding B.V., trading under the name djangodevreng.nl.
- Chamber of Commerce (KvK): 78417309
- Address: Hanebalk 11, 1628 MA Hoorn
- Email: hello@djangodevreng.nl
For any question about this statement or about your data, just email me.
What data I process
Two things, both minimal:
- Server logs. The web server at my hosting provider keeps standard records of which page was requested, from which IP address, at what time, with which user-agent (browser/OS) and via which referrer. Those are standard nginx logs, not something I set up myself.
- Email contact. If you email
hello@djangodevreng.nl, I process your email address, name (if you mention it) and the content of the message. Nothing else.
What I don't do: tracking cookies, Google Analytics or other analytics, fingerprinting, external fonts (served locally), embeds, pixels, or newsletter forms. The page loads no external assets outside its own domain name.
Why, and on what legal basis
- Server logs: needed to keep the site working and secure (debugging, abuse detection). Legal basis: legitimate interest (GDPR art. 6(1)(f)).
- Email contact: needed to read and answer your message. Legal basis: your request to get in touch (GDPR art. 6(1)(b)/(f)).
How long it's kept
- Server logs: 7 days. After that they're deleted automatically.
- Email messages: up to 5 years after last contact, for archiving and any follow-up. If there's an ongoing client relationship, it can be longer.
Who I share with
Not with third parties for commercial purposes. There are a few processors that help me run the site and mail:
- TransIP (hosting). All pages and server logs run on their infrastructure, in an EU data centre. The data processing agreement is part of their terms.
- TransIP Mail (email). Incoming and outgoing mail to
hello@djangodevreng.nlis stored on their mail servers. I read mail locally via Apple Mail on my own Mac, which is just a client and not a separate processor. - GitHub Actions (build and deploy). The site is built in GitHub Actions and deployed to TransIP. GitHub sees no visitor data in the process, only my own source code and deploy logs.
Beyond this I share nothing. No ad networks, no data brokers, no analytics platforms.
Cookies and local storage
No cookies. There is one small thing in localStorage: your theme preference (light or dark), so the site doesn't flip on every page. That preference stays only in your browser and never reaches me or a third party. You can clear it via your browser settings.
A consent banner isn't needed here: this is a functional preference you set yourself (exception under art. 11.7a(3) of the Dutch Telecommunications Act).
Your rights
Under the GDPR you have the right to:
- access to which data I hold about you
- correction if something is wrong
- erasure ("right to be forgotten")
- restriction of or objection to processing
- data portability (a copy in a common format)
Email hello@djangodevreng.nl and I'll sort it within a month. Not happy with how I handle it? Then you can file a complaint with the Dutch Data Protection Authority.
Changes
If this statement changes (for example because I add something to the site that does process data), I'll update the text here and update the date. No mailing, no pop-up.
Last updated: 7 May 2026