Privacy Policy
Thank you for taking the time to read this privacy policy. We take your privacy seriously. Very seriously, in fact. In this policy we explain in plain language what personal data we collect, why we do so and what your rights are.
No fine print, just transparent and honest.
Who is Command-G?
Command-G is a sole proprietorship.
Company name: Command-G
Chamber of Commerce number: 99577070
Address: Wilgenhof 55, 3925 HT, Scherpenzeel
Email address: hallo@command-g.nl
Do you have questions about this privacy policy or about how we handle your data? Feel free to send an email to hallo@command-g.nl.
What personal data do we collect?
We only collect data that is truly necessary. We distinguish three situations:
1. Service delivery
If you are a client, we need certain data to deliver services and to comply with legal obligations such as invoicing and tax filing. This includes:
Your name and contact details
Company name and Chamber of Commerce number if applicable
Invoice address
Payment details
Legal basis: Performance of the agreement and legal obligation.
Retention period: This data is retained for as long as legally required. For tax records that is 7 years after the end of the financial year.
2. Contact form on the website
If you fill in the contact form on the website, the following data is collected:
Your name
Your email address
The content of your message
Optionally: your phone number
Legal basis: Legitimate interest.
Retention period: We retain this data for a maximum of 2 years after the last contact, unless the contact leads to a client relationship. In that case the retention periods of service delivery apply.
3. Hosting and server logs
This website is hosted on a private server (VPS) at DigitalOcean. When you visit the website, technical data is automatically recorded in the server logs, such as your IP address, the time of your visit and the pages you viewed.
This data is used exclusively for technical management and security of the website. It is not linked to other data and is deleted after 14 days.
Legal basis: Legitimate interest.
Retention period: We retain this data for a maximum of 14 days.
Third parties and processors
To deliver our services, we work with a number of external parties. They may process personal data on my behalf. Where required, we have entered into data processing agreements with these parties. These are:
DigitalOcean: website hosting (server logs, IP addresses)
Moneybird: accounting software (invoice and client data)
Microsoft 365: email hosting (email traffic and attachments)
These parties process your data exclusively on our behalf and may not use it for their own purposes.
Security
We take appropriate technical measures to protect your personal data against loss, misuse and unauthorised access. This includes:
Encrypted connections (SSL/TLS) on our website
Secure access to our server and systems via 2FA or biometric login
Regular updates and patches
Limited access: only we have access to your data
No system is 100% foolproof, but we do everything we can to protect your data as well as possible.
Your rights
Under the GDPR you have a number of rights regarding your personal data:
Right of access: you may request what data we hold about you.
Right to rectification: is your data incorrect? Let us know and we'll update it.
Right to erasure: you can request your data to be deleted, unless we are legally required to retain it.
Right to restriction: you can request the processing of your data to be temporarily restricted.
Right to data portability: you can request to receive your data in a commonly used format.
Right to object: you can object to the processing of your data.
Would you like to exercise one of these rights? Send an email to hallo@command-g.nl. We will respond to your request within 30 days.
Complaints
We hope it never comes to that, but if you feel we are not handling your data with due care, we'd like to hear from you. Contact us at hallo@command-g.nl and we'll work together to find a solution.
You also always have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). More information can be found at autoriteitpersoonsgegevens.nl.
Changes
We may update this privacy policy from time to time, for example if the law changes or if we offer new services. The most current version can always be found on our website. We will clearly communicate any significant changes.