What we record about you, and what we do not.

New Data is a trading name of DataStudent B.V., based in Rotterdam. The formal details appear in the footer of every page: chamber of commerce number, VAT number and address.

If you have a question about your data, you can email us directly. We answer it ourselves; there is no external desk in between.

We process only what you give us:

• Application form: your name, email address, the role you are after and your notes. Purpose: to contact you about work.
• Download form: your name, email address and optionally your organisation. Purpose: to send you the documents and possibly follow up once.
• Email, phone or WhatsApp: whatever you tell us there. Purpose: to answer your question.

The basis is your consent for the forms, and a legitimate interest in answering a question you asked yourself.

The forms on this site store nothing in the website itself. They pass the data to our internal system. If that link is not switched on yet, the application goes as ordinary email. You see that on screen.

• Application and sign-up data: 4 weeks, or 1 year if you give permission.
• Contact and download requests: 2 years after our last contact.
• Technical server logs: 7 days.

After that we delete them. If you want them gone sooner, one message is enough.

The website runs on our own server at Hetzner in Germany. Hetzner is therefore a processor: they host the machine, they do not look inside the content.

There is no ad network, no third-party analytics and no social media button on this site. Your visit is therefore not registered anywhere else.

When we put you forward to a client, we share only what is needed for that, and only after you have agreed to it.

If you visit our website from your employer's network, we can tell from the IP address which organisation it is. We use that to see which companies are looking into our work.

What we do not do: we cannot see who you are. We record no data about you as a person, we place nothing on your device for this, and we do not share these data with anyone. We do not keep the IP address itself; it is used to look up the name of the organisation and deleted afterwards.

If you visit us from home or from your phone, we only see the name of your internet provider and we throw those data away.

If you would rather we did not record the name of your organisation, let us know at info@datastudent.nl. We will then put your organisation on a list that we skip.

Nothing of its own accord. No cookie, no localStorage, no sessionStorage. Your language choice sits in the page address and not in storage: /over-ons is Dutch, /en/about-us is English.

One exception, and you switch it on yourself. If you let a component from another party load somewhere and tick the box saying we may remember that, we store one key with the service and the date. After six months it expires and we ask again.

You can withdraw at any time, through the External media link in the footer. It lists per service when you said yes and until when that holds, with a button to remove it.

The web server keeps an access log to find faults: which page was requested, whether that succeeded, when, and with which browser. The IP address of your connection is deliberately stripped out before the line is written. We keep that log for seven days.

That also means something we would rather say out loud: we cannot trace abuse back to a person that way. That is the price of keeping no IP addresses, and we would rather pay it than have you stored with us.

Two things to keep apart. For recognising visiting organisations the IP address is briefly used to look up the name of the organisation and deleted straight afterwards; it never enters a database. In the web server's access log it does not appear at all.

If you search our site and it returns nothing, that search term ends up in the same log. We use that list to see which subjects our site is missing. No IP address is recorded alongside it and nothing is linked to you; these lines also disappear after seven days. Your browser only sends the term when nothing was found, and not when it looks like an email address or a phone number.

• Access: ask which data we hold about you
• Rectification: have what is wrong corrected
• Erasure: have deleted what we no longer need
• Objection and restriction: object to the processing
• Portability: receive your data in a readable file

One email is enough. We respond within four weeks. If you disagree with the outcome, you can complain to the Dutch Data Protection Authority.