Privacy Policy
Last updated: January 2026
1. Data Controller
Robuust Marketing is responsible for the processing of personal data as set out in this privacy statement. We respect your privacy and process personal data in accordance with the General Data Protection Regulation (GDPR).
2. What personal data do we collect?
We collect personal data that you provide to us or that we automatically collect when you visit our website:
Contact details (for inquiries and quotes)
- First and last name
- Email address
- Phone number
- Company name and position
Technical data (automatically collected)
- IP address (anonymized after 14 months)
- Browser type and version
- Device type (desktop, tablet, mobile)
- Operating system
Usage data (with your consent)
- Pages visited and click behavior
- Session duration and interactions
- Referring website (referrer)
- Conversions and form submissions
We do not collect special categories of personal data (such as data about health, religion or political preference).
3. Legal basis for processing
We only process your personal data on the basis of a valid legal ground pursuant to Article 6 GDPR:
Consent (Art. 6(1)(a) GDPR)
For placing analytical and marketing cookies via our cookie banner (Cookiebot). You can withdraw your consent at any time.
Performance of a contract (Art. 6(1)(b) GDPR)
For processing quote requests, executing assignments and delivering our services.
Legitimate interest (Art. 6(1)(f) GDPR)
For placing necessary cookies, improving our website and securing our systems.
Legal obligation (Art. 6(1)(c) GDPR)
For retaining invoice data (7 years in accordance with tax legislation).
4. Purposes of processing
- Answering contact requests and quotes
- Executing agreements (web design, hosting, maintenance)
- Improving our website and services
- Analyzing website usage to optimize user experience
- Sending relevant information about our services (only with consent)
- Complying with legal obligations (such as tax returns)
5. Cookies and tracking
Our website uses cookies and similar technologies. Cookies are small text files that are stored on your device. We use Google Consent Mode v2 to respect your cookie preferences.
Google Consent Mode v2
We use Google Consent Mode v2 to ensure that Google services (such as Google Analytics and Google Ads) only collect data after you have given your consent. By default, all non-essential cookies are blocked until you make a choice via our cookie banner.
Necessary cookies (always active)
These cookies are essential for the functioning of the website and cannot be disabled.
- Cookiebot (CookieConsent): Remembers your cookie preferences, 12 months
- security_storage: Security features
Functional cookies (preference cookies)
These cookies remember your preferences for a better user experience.
- Language preference (nl/en)
- Display settings
Analytical cookies (statistics)
With your consent, we use analytical cookies to gain insight into how visitors use our website.
- Google Analytics 4 (_ga, _ga_*): Website statistics, 2 years
- IP addresses are anonymized
- Data is processed within the EU
Marketing cookies (advertising)
With your consent, marketing cookies may be placed for showing relevant advertisements and measuring campaign effectiveness.
- Google Ads conversion tracking
- LinkedIn Insight Tag
- Facebook Pixel (if applicable)
Cookie management with Cookiebot
We use Cookiebot as our Consent Management Platform (CMP) to manage your cookie preferences. On your first visit, a cookie banner will appear where you can choose which categories of cookies you accept. You can change your preferences at any time by clicking 'Change cookie settings' at the bottom of this page.
A complete overview of all cookies that our website places can be found in the Cookiebot declaration at the bottom of this page.
You can also block cookies via your browser settings. Please note: this may limit the functionality of the website.
6. Recipients and transfers
We only share your personal data with third parties when this is necessary for our services or when we are legally obliged to do so. We have concluded data processing agreements with all processors.
Hosting providers
- Hetzner (Germany/Finland) - server hosting
- Cloudflare (US, EU Standard Contractual Clauses) - CDN and DDoS protection
Analytics and tracking
- Google Analytics 4 (Google Ireland Ltd) - website statistics
- Google Tag Manager - tag management
CRM and communication
- HubSpot (US, EU Standard Contractual Clauses) - lead management
- Resend (US, EU Standard Contractual Clauses) - email delivery
Security
- Cloudflare Turnstile - bot protection for forms
- Cookiebot (Cybot, Denmark) - consent management
Some of our processors are located outside the EU (US). In those cases, we ensure appropriate safeguards through Standard Contractual Clauses (SCCs) in accordance with Article 46 GDPR.
We never sell your personal data to third parties.
7. Retention periods
We do not retain your personal data longer than necessary for the purposes for which they were collected:
| Categorie | Bewaartermijn |
|---|---|
| Contact form / quote requests | 2 years after last contact |
| Customer data (ongoing agreement) | Duration of agreement + 2 years |
| Invoice data | 7 years (legal retention obligation) |
| Analytical data | 14 months (Google Analytics) |
| Cookie preferences | 12 months |
8. Your rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access: You can request which personal data we process about you
- Right to rectification: You can have incorrect data corrected
- Right to erasure: You can request to have your data deleted ('right to be forgotten')
- Right to restriction: You can have the processing temporarily stopped
- Right to data portability: You can receive your data in a common format
- Right to object: You can object to processing based on legitimate interest
- Right to withdraw consent: You can always withdraw previously given consent
To exercise your rights, you can contact us at [email protected]. We will respond to your request within 30 days. We may ask you for identification to process a request.
You also have the right to lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl) if you believe that we are not processing your personal data correctly.
9. Security
We take appropriate technical and organizational measures to protect your personal data against loss, misuse and unauthorized access:
- SSL/TLS encryption for all data traffic (HTTPS)
- Servers in secure EU data centers (Germany and Finland)
- DDoS protection and Web Application Firewall via Cloudflare
- Regular security updates and monitoring
- Access restriction to personal data on a need-to-know basis
- Encrypted backups
10. Minors
Our website and services are not aimed at persons under the age of 16. We do not knowingly collect personal data from minors. If you suspect that we have collected personal data from a minor, please contact us at [email protected] so that we can delete this data.
11. Automated decision-making
We do not use automated decision-making or profiling that has legal or similarly significant effects on you.
12. Changes
We may update this privacy statement from time to time, for example when changes occur in our services or in legislation. The most current version can always be found on this page. In case of significant changes, we will inform you.
13. Contact
Do you have questions about this privacy statement or about the processing of your personal data? Please contact us:
Cookie Declaration
Below you will find a current overview of all cookies used on our website, automatically generated by Cookiebot.