Privacy policy

1. Who are we?

Friday Webs is a web design and development company established in the Netherlands. We are responsible for the processing of personal data as described in this privacy policy.

2. What data do we collect?

We collect the following personal data:

3. What do we use your data for?

• To respond to your enquiry or question
• To prepare a quotation and deliver our services
• To improve the website and optimise user experience
• To comply with legal obligations
• To prevent misuse of our services

4. Legal basis for processing

We process your personal data on the basis of:

• Consent: when you fill in the contact form or accept cookies
• Performance of a contract: when we carry out a project for you
• Legitimate interest: for website analysis and improvement of our services

5. How long do we retain your data?

• Contact details: a maximum of 2 years after last contact, unless there is an ongoing agreement
• Project data: 7 years after completion (statutory retention obligation)
• Website statistics: a maximum of 26 months
• SEO Check data: a maximum of 30 days

6. AI and data processing

Friday Webs uses AI technology in its services. The following privacy safeguards apply:

7. Sharing with third parties

We do not share your data with third parties unless this is necessary for the performance of our services. We use the following sub-processors:

• Supabase (EU): database storage, file storage (logos), authentication - data hosted within the EU
• Resend: transactional email delivery (confirmations, notifications)
• Vercel: website hosting and edge delivery - where data is transferred outside the EU, Standard Contractual Clauses (SCCs) apply
• Google Analytics: website statistics (anonymised, only with your consent)
• OpenAI: AI chatbot (Friday) - chat content is not linked to personal data and is not used for model training

We have concluded a data processing agreement with all sub-processors. A full overview of our data processing arrangements is available in article 11 of our terms and conditions.

A Data Protection Officer (DPO) is not required for our organisation under GDPR Article 37, as we do not carry out systematic large-scale monitoring of data subjects or process special categories of data on a large scale.

8. Security

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, and unauthorised access. This includes SSL encryption, firewalls, and regular security updates.

9. Your rights

Under the GDPR, you have the following rights:

• Right of access: you can request which data we hold about you
• Right to rectification: you can have incorrect data corrected
• Right to erasure: you can request the deletion of your data
• Right to restriction: you can have processing restricted
• Right to data portability: you can request your data in a commonly used format
• Right to object: you can object to processing

You can exercise your rights by contacting us at info@fridaywebs.com. We will respond to your request within 30 days.

10. Complaints

Do you have a complaint about the processing of your personal data? Please contact us first. You also have the right to file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).