Privacy policy

Who we are

emvane.com belongs to Amersan, trading as Emvane. Chamber of Commerce (KvK) number 42013782, business address [[business address]].

Questions about your data? Email hello@emvane.com.

Which data we process

When you fill in the request form: your name and email address, and if you fill them in, your company, your phone number and what you tell us about your project, such as the package, your wishes, your budget and example sites.
When you sign in to your account: your email address, and your name if you give it. The first time you sign in, we make an Amersan Account for you: one account for the Amersan brands (Emvane, Maveon and Havely). Your account holds your requests, your project, the designs and your feedback.
When you become a client: also your contact and billing details, and the content you supply for your site.
When you visit the site: the hosting provider processes technical data, such as your IP address, to show and secure the site. We don't use it to track you.

What we use it for

Answering your request and preparing a quote. Legal basis: steps prior to a contract, at your request (Article 6(1)(b) GDPR).
Carrying out the work and invoicing. Legal basis: the contract, and for our accounts our legal obligation (Article 6(1)(b) and (c) GDPR).
Your account, so you can follow your request and your project and approve designs. Legal basis: steps prior to a contract and the contract (Article 6(1)(b) GDPR).
Keeping the site secure. Legal basis: our legitimate interest (Article 6(1)(f) GDPR).

We don't send you newsletters or advertising.

How long we keep it

A request that doesn't become a project: up to 12 months, then we delete it.
Client data: 7 years, because Dutch law requires this for our accounts.
Your Amersan Account: until you ask us to delete it. After that we keep your requests and projects for as long as stated above, but no longer linked to an account.
Sign-in codes: a code works for 15 minutes, a sign-in link in an email from us for 7 days. We delete them a day later.

We store your request in the Amersan API, at Render in Frankfurt (Germany), so you can see it in your account. It also reaches us as an email.

We work with a few fixed providers. They only process data on our behalf:

A hosting provider hosts this site. You can always ask us which one.
Render hosts the Amersan API, in Frankfurt (Germany). That is where your account, your requests and your project are kept.
Cloudflare R2 stores the designs and files of your project, in the European Union.
Resend sends the emails from the request form and from your account, such as sign-in codes and new rounds.
Our email provider receives your message.

Some of these providers are based outside the European Union. In that case agreements apply that protect your data in line with the GDPR, such as the European Commission's standard contractual clauses.

We never sell your data and don't share it for advertising.

Cookies and analytics

This site uses no analytics and no ad networks. Only when you sign in to your account do we set two cookies that are needed to keep you signed in: one for your session (180 days) and a shorter one (1 hour). They only apply to signing in, not to the rest of the site. They need no consent, which is why you don't see a cookie banner.

Sites we build for clients

When we build and host a site or API for a client, that client is responsible for the data of their own visitors. We then only process that data on the client's behalf, under a data processing agreement.

Your rights

You can access your data, have it corrected or deleted, object to its use, or ask for a copy. Email hello@emvane.com for this. You get an answer within a month.

If you're not happy with how we handle your data, you can file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Changes

If anything changes in how we handle data, we update this page. The date of the latest version is always at the top.