Last updated on 31 October 2026
This website collects very little. You don't need an account on the public site, and there's no online shop or newsletter. Below is exactly what does happen, in plain language.
This statement covers the public website grp-digital.com. GRP Studio, our client area behind a login at /tools/, isn't covered by it. Our Chrome extension has its own privacy policy.
Who processes your data
GRP Digital, registered with the Netherlands Chamber of Commerce (KvK) under number 80479987. You can reach us at support@grp-digital.com or by post at Videolab, Torenallee 20, 5617 BC Eindhoven.
If you have a question about your data, send an email with “privacy” in the subject line. You'll get an answer within a month.
What data we process
Visit data through Google Analytics
If you choose Accept in the cookie notice, we use Google Analytics 4 to measure how the website is used. This places two cookies, _ga and _ga_BVG1JV41QL. If you choose Decline, Google Analytics doesn't load and nothing is sent to Google.
We see which pages are visited, for how long, on what kind of device and browser, roughly from which location, and through which link or search engine you arrived. We also see whether you scroll, click a link to another site, download a file, and whether you start and submit the contact form.
We don't see who you are. The data contains no name or email address, not even when you submit the form, and we don't link it to other sources. We use it to see which topics people look for and what we should improve on the site.
Server logs
Our hosting provider records technical data for every visit: your IP address, the time, the page requested and your browser type. This is needed to keep the site running, track down faults and prevent misuse.
When you fill in the contact form
You give your name and email address and, if you like, your company and a message. These details are sent to us by email. We also store them on the website, together with the time and the page you sent the form from, so your message isn't lost if an email doesn't arrive. We only use them to reply and, if we end up working together, to carry out that work.
When you email us
We then process your email address, your name if you give it, and the content of your message. We only use this to answer your question and, if we end up working together, to carry out that work.
When you apply for a job
You send your CV and cover letter to jobs@grp-digital.com. We only use those details to assess your application.
The map at the bottom of the page
The footer has a button that loads a map from Google Maps. As long as you don't click it, nothing is sent to Google. If you do, your browser connects to Google, and Google sees your IP address, among other things.
Standard files on the homepage
On the homepage, your browser fetches two standard Bootstrap files from Cloudflare. Cloudflare sees your IP address when that happens. No cookies are placed.
Why we do this
| What | Purpose | Legal basis |
|---|---|---|
| Analytics | Seeing which content works and improving the site | Consent |
| Server logs | Operation, faults and security | Legitimate interest: a working, secure website |
| Contact form | Answering your message and making sure it isn't lost | Legitimate interest, or steps towards a contract if we start working together |
| Email contact | Answering your question | Legitimate interest, or performance of a contract if we start working together |
| Job applications | Assessing your application | Legitimate interest, and consent if we keep your details for longer |
| Google Maps | Showing where we're based | Consent, given when you click the button yourself |
| Bootstrap | Making the homepage work properly | Legitimate interest: a working website |
How long we keep it
| What | Retention period |
|---|---|
| Analytics | Up to 14 months |
| Server logs | About five days on our hosting |
| Contact form on the website | 12 months, then deleted automatically |
| Email, if we don't work together | No more than two years after the last message |
| Email, if you become a client | As long as we work together, then whatever the law requires. We keep our accounting records for 7 years. |
| Job applications | Up to 4 weeks after the procedure ends, or up to 1 year with your consent |
We make encrypted backups of the website. Deleted data can still be in them and disappears after about three months.
Who we share it with
We don't sell anything and we don't share anything for advertising. Five parties process data because we use their services:
- Google Ireland Limited, for Google Analytics if you accept it, and for Google Maps if you load the map.
- TransIP, our hosting provider in the Netherlands, for the website, the server logs and the contact form.
- SMTP2GO, which delivers the contact form emails. We use its EU environment, and SMTP2GO deletes email data after 35 days.
- Microsoft, for our mailboxes and the encrypted backups.
- Cloudflare, for the standard files on the homepage.
Some of these parties may also process data outside the European Union. The safeguards of the GDPR apply, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
What you can ask for
You have the right to see your data, to have it corrected or to have it deleted. You can also ask us to restrict processing or to transfer your data, and you can object to the processing. To do so, send an email to support@grp-digital.com.
You can withdraw your consent for Google Analytics through Cookie settings at the bottom of every page.
We don't make decisions about you that are based solely on automated processing.
If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Security
The website runs entirely over https. Access to the admin area is limited to the people who need it, and protected with passwords and two-step verification. Backups are encrypted.
Changes
If anything changes in what we process, we'll update this statement and change the date at the top. If the changes are significant, we'll announce them on the website itself.