Privacy statement

This statement explains which personal data aknakos.com and the Monthly plan process, why, on which legal basis, for how long, and what you can do about it. It covers this website and Clients of the Monthly plan. Each of my products (Distilo, MermaidSnap, WarmPage) has its own privacy statement.

1. Who is responsible

The controller of your personal data is the Dutch sole proprietorship below. The General Data Protection Regulation (GDPR) applies.

No data protection officer is appointed; the GDPR does not require one for this business.

2. What data, why, and on which basis

There is no contact form, newsletter or user account on this site. Personal data reaches me in four ways.

2.1 Visiting the site: analytics

Every visit is counted without cookies. Analytics requests go through this site's own server, which passes them on to PostHog, the analytics service, without your IP address. PostHog turns your browser details into an anonymous daily hash on its own servers. I see which pages are visited and which links are clicked, not who you are. Basis: legitimate interest (Art. 6(1)(f) GDPR): knowing which pages are useful so I can improve them.

If you accept on the cookie banner, PostHog also stores a visitor ID in a cookie and local storage on your device, so repeat visits are recognised, and records your session (pages, clicks, scrolling and the browser console) so I can see where the site gets in the way. Text you type into forms is masked in these recordings. Basis: consent (Art. 6(1)(a) GDPR, and Art. 11.7a of the Dutch Telecommunications Act for storing information on your device).

2.2 Writing to me

When you email contact@aknakos.com, I receive your address, your name if you give it, and what you write. Basis: legitimate interest: answering you.

2.3 Server logs

The server that runs this site can record technical data about requests (IP address, the page requested, time, browser) to keep the site secure and find errors. Basis: legitimate interest.

2.4 Clients of the Monthly plan

For Clients I keep the Proposal, the agreement, contact details, invoices and payment records. Payments go through Stripe; I never see card details. Basis: performing the contract (Art. 6(1)(b) GDPR) and the legal obligation to keep business records (Art. 6(1)(c) GDPR).

No decisions about you are made automatically, and no profiles are built for advertising.

3. Cookies and analytics

The site works in two stages.

• For everyone: cookieless counting, as described in 2.1. Nothing from PostHog is stored on your device until you answer the banner. Once you do, PostHog keeps your answer in local storage under __ph_opt_in_out_…, whichever you chose.
• Only after you accept: PostHog's cookie and local storage entries (their names start with ph_ or __ph_) with a visitor ID, and masked session recordings.

The banner does not appear on the home page: a visitor who only sees the home page is counted without cookies and never asked. It appears on the other pages until you choose. You can change your choice at any time with the Cookies link in the footer of every page, or here. Declining after accepting removes the visitor ID and stops recording.

Your choice is kept for 12 months under the key consent in your browser's local storage. If you switch between light and dark theme, that choice is kept under theme. The cookie PARAGLIDE_LOCALE remembers the language you last viewed, for 400 days, so the site opens in it next time. These only remember something you asked for and are not used to track you, so they need no consent. There are no advertising cookies, no cross-site tracking and no Google Analytics or Facebook Pixel.

4. How long data is kept

5. Who else processes the data

These providers process data on my behalf or as part of a service I use. I do not sell or rent your data.

6. Transfers outside the EU

The website, its logs and the analytics stay in the EU. Email and payments involve the United States: Cloudflare, Google and Stripe are certified under the EU-US Data Privacy Framework (European Commission adequacy decision of July 2023, Art. 45 GDPR), with Standard Contractual Clauses (Art. 46(2)(c) GDPR) as a fallback.

7. Your rights

• Access (Art. 15): ask which data I process about you
• Rectification (Art. 16): have inaccurate or incomplete data corrected
• Erasure (Art. 17): have your data deleted
• Restriction (Art. 18): have the processing of your data restricted
• Portability (Art. 20): receive your data in a structured format
• Objection (Art. 21): object to processing based on legitimate interest
• Withdrawing consent (Art. 7(3)): at any time, without affecting processing before the withdrawal

To use any of these rights, email contact@aknakos.com. I answer within one month (Art. 12(3) GDPR). If you do not need to give data for a contract, you are free not to; Clients need to give the details an invoice requires.

8. Complaints

If you think your data is not handled properly, please tell me first. You also have the right to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl.

9. Security

I take appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS/TLS), restricted access, and security monitoring by my infrastructure providers. If a breach puts your data at risk, I report it to the Autoriteit Persoonsgegevens within 72 hours and inform you when the law requires it.

10. Changes to this statement

I may update this statement when the site or the law changes. The version and date at the top always show the current one. Clients are told by email about changes that affect them.