This privacy statement explains which personal data ZH Engineering processes when you visit this website or contact me, why I do so and which rights you have. It is written under the EU General Data Protection Regulation (GDPR), which applies in the Netherlands.

Who is responsible for your data

ZH Engineering is the sole proprietorship of Hicham Zak, registered with the Netherlands Chamber of Commerce (KVK) under number 89780183. ZH Engineering is the controller of your personal data under the GDPR. For any question about your data, email info@zh-engineering.com.

Which data I process and why

I only process the data you give me yourself, and the technical data that is needed to show you this website.

SituationDataPurposeLegal basis (GDPR)
Contact formName, company (optional), email address, phone number (optional), project descriptionTo answer your enquiry and, if you ask for it, prepare a proposalArticle 6(1)(b): steps at your request before a contract
Email or phoneYour contact details and the content of your messageTo answer youArticle 6(1)(b)
WhatsAppYour phone number, profile name and messagesTo answer youArticle 6(1)(b)
Visiting the websiteIP address, browser type, requested page and time, kept in the server logs of the hosting providerTo deliver the website securely and prevent abuseArticle 6(1)(f): legitimate interest

Please do not send confidential documents or special categories of personal data, such as health data, through the contact form.

Cookies and tracking

This website does not use cookies, analytics, advertising trackers or social media pixels. The fonts are hosted on this website itself, so your browser does not contact Google Fonts. Because nothing is tracked, there is no cookie banner.

Who receives your data

I do not sell your data and I do not share it with others for marketing. To run this website and answer your enquiries, I use these service providers:

  • Vercel Inc. hosts this website and keeps the technical server logs;
  • Resend (resend.com) sends the contact form to my mailbox, from servers in the EU (Ireland);
  • my email provider stores the messages I receive and send.

If you contact me through WhatsApp, WhatsApp Ireland Limited is responsible for how WhatsApp processes your data, under its own privacy policy.

Some of these providers process data outside the European Economic Area. In that case the transfer relies on the safeguards these providers offer under the GDPR, such as the EU Standard Contractual Clauses. Their privacy policies are available on their own websites.

How long I keep your data

  • Enquiries that do not lead to an assignment are deleted no later than 12 months after our last contact.
  • If you become a client, I keep the relevant data for the duration of the assignment and for 7 years afterwards, as Dutch tax law (Article 52 of the Algemene wet inzake rijksbelastingen) requires for business records.
  • Server logs are kept by the hosting provider for a limited period under its own retention policy.

How I protect your data

The website uses an encrypted HTTPS connection. Only I have access to the enquiries I receive.

Your rights

Under the GDPR you have the right to:

  • see which personal data I hold about you;
  • have incorrect data corrected;
  • have your data deleted;
  • restrict or object to the processing of your data;
  • receive your data in a structured, commonly used format.

Send your request to info@zh-engineering.com. I respond within one month. I may ask you to confirm your identity before I act on a request.

Complaints

If you are not satisfied with how I handle your data, please contact me first. You also have the right to file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Changes to this statement

I update this statement when the way I process data changes. The date at the top shows the latest version.