Privacy notice

CRM Atelier is a trading name of Minimaxnl, KvK 92790836 (sole proprietorship, Jonathanstraat 93, 2524 JD The Hague, the Netherlands). We are the controller for the processing described here.

Questions: hello@crmatelier.com.

This notice is written under the EU GDPR. If you are in the UK, the UK GDPR gives you the same rights; see 'Your rights' for how to exercise them.

Data that clients store in the software we build for them (for example their own customer records) we process as a processor on that client's instructions. The data processing agreement with that client applies, not this notice.

• Visitors to crmatelier.com and crmatelier.nl.
• People who contact us through the form, email, WhatsApp or the booking page.
• Contacts at (prospective) clients and suppliers.

Contact form

Name, company, email, phone (optional, or needed if you want us to call or message you), what you want to fix, your current tools, team size, preferred start, how you would like to continue, language, timestamp, the page you sent the form from and any campaign code in the web address. Purpose: answer your question and prepare an intro call. Legal basis: steps at your request before a contract (Art. 6(1)(b) GDPR). Retention: 12 months after last contact, then deleted automatically.

Confirmation email

Your email and what you submitted. Purpose: show you what we received. Legal basis and retention: as for the contact form.

Tips emails

Only if you tick ‘You may send me tips about …’ in the form (it is unticked by default). Your name, email, company and what you filled in, plus which wording you saw and when you ticked it. Purpose: send you a few emails about the topic you came for. Every email has an unsubscribe link; one click and you get no more. We only record which link in such an email you click, not whether you open an email. Legal basis: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. Retention: until you unsubscribe, at most 12 months after last contact.

Personal example

If you receive tips emails, you may get an example page with four screens we make automatically from your answers, your company name and your website's logo and colour (when publicly readable). The page sits on a personal link without login, is not indexed by search engines and is deleted after 60 days. Legal basis: the same consent as the tips emails.

Spam protection

Technical characteristics of a submission, without IP address. Purpose: prevent abuse of the form. Legal basis: legitimate interest (Art. 6(1)(f) GDPR), a working and secure form. Retention: at most 24 hours.

Email and WhatsApp

Your name, address or number and the message content. Purpose: correspondence. Legal basis: pre-contractual steps or performance of a contract. Retention: as long as needed; at most 12 months after last contact if no contract follows.

Booking page

Name, email, company, phone (optional) and the chosen slot. Purpose: schedule an intro call through our Google Calendar appointment page. Legal basis: pre-contractual steps. Retention: in our calendar; deleted after 12 months.

Clients

Contact details, contract, invoices and correspondence. Purpose: performing the contract; accounting. Legal basis: contract; legal obligation (Dutch tax retention rules). Retention: term of the contract; financial records 7 years.

Website

No personal data: no analytics, no tracking cookies. The contact form keeps your answers in this browser tab (sessionStorage) until you send it or close the tab; it does not reach us.

We do not ask for special-category data and do not use automated decision-making or profiling.

Only CRM Atelier. We do not sell or share your data with third parties for their own purposes. We do use suppliers (processors):

Supabase

Database for form submissions. Frankfurt, Germany (EU).

Vercel

Hosting of the website and form. Vercel Inc. (US); the form runs in Frankfurt (EU). Data processing agreement and EU standard contractual clauses.

Resend

Sending email (confirmation, notification). EU region (Ireland).

ImprovMX

Forwarding of email to hallo@crmatelier.nl. ImprovMX Inc. (US).

Forward Email

Forwarding of email to hello@crmatelier.com. Forward Email LLC (US); forwarded email is not stored.

Google (Gmail, Calendar, Meet)

Our mailbox, the booking page (Google Calendar appointment schedule) and video calls. US; certified under the EU-US Data Privacy Framework.

Meta (WhatsApp)

Messages via WhatsApp, if you choose it. Ireland/US; WhatsApp's own privacy policy applies.

We have a data processing agreement with these parties, or their standard business terms apply. For transfers outside the EU/UK we rely on an adequacy decision (such as the Data Privacy Framework) or the EU standard contractual clauses.

• Submissions are kept in a dedicated, isolated database in the EU, with access rights enforced in the database itself.
• Connections are encrypted (HTTPS/TLS).
• Deletion after the retention period is automatic.
• If a breach puts you at risk, we notify you and the supervisory authority within the legal deadline.

You can ask for access, correction, deletion, restriction and portability, and you can object to processing based on our legitimate interest. Email hello@crmatelier.com; we respond within one month. We may ask you to confirm your identity.

Complaints: the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl). UK residents can also contact the ICO (ico.org.uk).

We may update this notice. The current version is always at crmatelier.com/en/privacy, dated at the top.