LEGAL

Privacy Policy

Privacy Policy

Privacy Policy

Last updated: June 2026  ·  Petra Bauer Digital Design and Consultancy

This Privacy Policy explains how Petra Bauer Digital Design and Consultancy ("we", "us", "our") collects, uses, and protects your personal data when you visit petrabauer.design or use our services. We are committed to protecting your privacy and processing your data in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch data protection law.

This Privacy Policy explains how Petra Bauer Digital Design and Consultancy ("we", "us", "our") collects, uses, and protects your personal data when you visit petrabauer.design or use our services. We are committed to protecting your privacy and processing your data in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch data protection law.

01. Who we are

01. Who we are

Business name: Petra Bauer Digital Design and Consultancy

Business name: Petra Bauer Digital Design and Consultancy

KvK number: 85072346

KvK number: 85072346

VAT number: NL004047487B70

VAT number: NL004047487B70

Registered in: The Netherlands

Registered in: The Netherlands

02. What data we collect

02. What data we collect

Data you provide directly

Data you provide directly

When you fill in a contact form, request an audit, or book a call, we may collect:


  • Your name and email address

  • Your website URL

  • Information about your project or business challenge

When you fill in a contact form, request an audit, or book a call, we may collect:


  • Your name and email address

  • Your website URL

  • Information about your project or business challenge

Data collected automatically

Data collected automatically

When you visit our website, we collect certain technical data automatically through Google Analytics, including:


  • Pages visited and time spent on each page

  • Device type, browser, and operating system

  • Approximate geographic location (country/city level)

  • Referral source (how you arrived at the site)


This data is anonymised and aggregated, we cannot identify you individually from it.

When you visit our website, we collect certain technical data automatically through Google Analytics, including:


  • Pages visited and time spent on each page

  • Device type, browser, and operating system

  • Approximate geographic location (country/city level)

  • Referral source (how you arrived at the site)


This data is anonymised and aggregated, we cannot identify you individually from it.

Data collected through third-party tools

Data collected through third-party tools

  • Cal.eu - when you book a call, Cal.eu collects your name, email address, and chosen time slot. Their privacy policy applies to this data.

  • Framer - our website is built on Framer, which may collect basic technical data as part of hosting. Framer's privacy policy applies.

  • Cal.eu - when you book a call, Cal.eu collects your name, email address, and chosen time slot. Their privacy policy applies to this data.

  • Framer - our website is built on Framer, which may collect basic technical data as part of hosting. Framer's privacy policy applies.

03. How we use your data

03. How we use your data

We use your personal data for the following purposes:


  • To respond to your enquiry or request

  • To deliver the service you have requested (free audit, paid audit, design project)

  • To schedule and conduct calls via Cal.eu

  • To send invoices and process payments

  • To analyse website performance and improve user experience (via Google Analytics)

We use your personal data for the following purposes:


  • To respond to your enquiry or request

  • To deliver the service you have requested (free audit, paid audit, design project)

  • To schedule and conduct calls via Cal.eu

  • To send invoices and process payments

  • To analyse website performance and improve user experience (via Google Analytics)

04. Legal basis for processing

04. Legal basis for processing

We process your personal data on the following legal bases:


  • Contract performance - where processing is necessary to deliver a service you have requested

  • Legitimate interests - for website analytics and general business administration

We process your personal data on the following legal bases:


  • Contract performance - where processing is necessary to deliver a service you have requested

  • Legitimate interests - for website analytics and general business administration

05. How long we keep your data

05. How long we keep your data

  • Enquiry and project data - retained for up to 2 years after the last contact, then deleted

  • Invoice and financial data - retained for 7 years in accordance with Dutch tax law

  • Analytics data - retained in anonymised form per Google Analytics default settings

  • Enquiry and project data - retained for up to 2 years after the last contact, then deleted

  • Invoice and financial data - retained for 7 years in accordance with Dutch tax law

  • Analytics data - retained in anonymised form per Google Analytics default settings

06. Who we share your data with

06. Who we share your data with

We do not sell or rent your personal data to third parties. We may share data with the following service providers solely to deliver our services:


  • Google Analytics - website analytics (anonymised)

  • Cal.eu - call scheduling

  • Framer - website hosting

  • Future email marketing platform - We will update this policy when a marketing platform is confirmed.


All third-party processors are required to handle your data in accordance with GDPR.

We do not sell or rent your personal data to third parties. We may share data with the following service providers solely to deliver our services:


  • Google Analytics - website analytics (anonymised)

  • Cal.eu - call scheduling

  • Framer - website hosting

  • Future email marketing platform - We will update this policy when a marketing platform is confirmed.


All third-party processors are required to handle your data in accordance with GDPR.

07. Your rights

07. Your rights

Under GDPR, you have the following rights regarding your personal data:


  • Right of access - request a copy of the data we hold about you

  • Right to rectification - request correction of inaccurate data

  • Right to erasure - request deletion of your data ("right to be forgotten")

  • Right to restrict processing - request that we limit how we use your data

  • Right to data portability - request your data in a portable format

  • Right to object - object to processing based on legitimate interests

  • Right to withdraw consent - withdraw marketing consent at any time


To exercise any of these rights, contact us at hello@petrabauer.design. We will respond within 30 days.

Under GDPR, you have the following rights regarding your personal data:


  • Right of access - request a copy of the data we hold about you

  • Right to rectification - request correction of inaccurate data

  • Right to erasure - request deletion of your data ("right to be forgotten")

  • Right to restrict processing - request that we limit how we use your data

  • Right to data portability - request your data in a portable format

  • Right to object - object to processing based on legitimate interests

  • Right to withdraw consent - withdraw marketing consent at any time


To exercise any of these rights, contact us at hello@petrabauer.design. We will respond within 30 days.

08. Cookies

08. Cookies

Our website uses cookies through Google Analytics to understand how visitors use the site. These are analytics cookies only, we do not use advertising or tracking cookies. You can disable cookies in your browser settings at any time.

Our website uses cookies through Google Analytics to understand how visitors use the site. These are analytics cookies only, we do not use advertising or tracking cookies. You can disable cookies in your browser settings at any time.

09. Data security

09. Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. All devices used to process client data are password-protected and use encrypted connections.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. All devices used to process client data are password-protected and use encrypted connections.

10. Complaints

10. Complaints

If you have concerns about how we handle your data, please contact us first at hello@petrabauer.design. If you remain unsatisfied, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

If you have concerns about how we handle your data, please contact us first at hello@petrabauer.design. If you remain unsatisfied, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

11. Changes to this policy

11. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent update. Continued use of our website after any changes constitutes acceptance of the updated policy.

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent update. Continued use of our website after any changes constitutes acceptance of the updated policy.

12. Contact

12. Contact

For any questions about this Privacy Policy or how we handle your data:
hello@petrabauer.design

For any questions about this Privacy Policy or how we handle your data:
hello@petrabauer.design