Privacy Policy for BizDom

1. Introduction & Data Controller

BizDom is a trade name (handelsnaam) registered under Junovy at the Dutch Chamber of Commerce (KvK 71813977), based in Amsterdam, The Netherlands. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit https://bizdom.biz or engage BizDom's consulting services.

Junovy is the data controller responsible for your personal data under the General Data Protection Regulation (GDPR). Under Dutch law a handelsnaam is not a legal person and cannot be a controller; the legal entity behind BizDom is Junovy, the eenmanszaak with KvK 71813977.

Registered Address: [protected], The Netherlands
KvK Number: 71813977
Privacy Contact: [protected email]

2. Information We Collect

We collect information that you provide directly to us and information automatically collected when you use our website or services.

2.1 Personal Data You Provide

When you use our contact form, sign up for services, or communicate with us, we may collect:

• Full name
• Email address
• Phone number (if provided)
• Company name (if applicable)
• Message content and project details
• Any other information you choose to provide

2.2 Automatically Collected Data

• IP address
• Browser type and version
• Device information
• Pages visited and time spent on pages
• Referring website
• Date and time of visit

3. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent (Article 6(1)(a)): When you submit a contact form or subscribe to communications, you provide explicit consent for us to process your data.
• Legitimate Interests (Article 6(1)(f)): To respond to your inquiries, improve our services, and maintain website security.
• Contractual Necessity (Article 6(1)(b)): When processing is necessary to fulfill a consulting engagement you have requested.
• Legal Obligation (Article 6(1)(c)): When required by law (e.g., tax records, accounting).

4. How We Use Your Data

BizDom uses your personal data for the following purposes:

• To respond to your inquiries and provide customer support
• To scope, plan, and deliver business administration and automation consulting engagements
• To provide ongoing advisory services under retainer agreements
• To send you updates about your projects and scheduled engagements
• To improve our website and user experience
• To send marketing communications (only with your consent)
• To comply with legal obligations and prevent fraud
• To maintain website security and protect against threats

5. Cookies & Tracking Technologies

The bizdom.biz marketing site does not set any cookies or localStorage entries until you interact with the cookie consent banner. The banner offers three choices: Decline All, Manage Preferences (per-category toggles), and Accept All. Your choice is recorded in localStorage under the key bizdom_cookie_consent.

If you accept the Functional category, we load our self-hosted Chatwoot live chat widget, which sets one first-party cookie (cw_conversation) to preserve your chat session. If you decline functional cookies, Chatwoot is not loaded at all.

The bizdom.biz site does not use analytics cookies, marketing cookies, advertising cookies, or any third-party tracking technology. There is no Google Analytics, no Meta Pixel, no Segment.

You can change your choice at any time by clearing your browser storage for bizdom.biz and reloading the page — the consent banner will reappear. For full details, see our Cookie Declaration.

6. Data Sharing & Third Parties

We do not sell your personal data. BizDom's website and business email use a minimal set of EU-based processors, each of which has signed a Data Processing Agreement with Junovy under Article 28 GDPR:

• Hetzner Online GmbH (Gunzenhausen, Germany) — Cloud infrastructure hosting bizdom.biz. Location: Germany (EU).
• BunnyWay d.o.o. (Bunny.net) (Ljubljana, Slovenia) — Secondary authoritative DNS, operated as a backup to the primary DNS provider. Processes DNS query metadata only. Location: Slovenia (EU).
• Mailjet SAS (Sinch Group) (Paris, France) — Transactional email delivery for account notifications and support replies. Processes recipient email addresses and message content. Location: France (EU).
• Internet Security Research Group (Let's Encrypt) — Issues SSL/TLS certificates. Processes domain names only; no personal data is shared.

None of these processors are permitted to use the data they process for their own purposes. We do not use any analytics, advertising, or customer-data platforms. There is no Google Analytics, no Meta pixel, no Segment, no Mixpanel.

7. International Data Transfers

Your personal data is primarily stored and processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, including:

• EU Standard Contractual Clauses
• Adequacy decisions by the European Commission
• Data processing agreements with GDPR-compliant providers

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Contact Form Submissions: Retained for 2 years after last contact, unless a business relationship is established.
• Client Project Data: Retained for the duration of the engagement plus 7 years for legal and accounting purposes.
• Email Correspondence: Retained for 3 years after last communication.

9. Your Rights Under GDPR

As a data subject in the EU/EEA, you have the following rights:

• Right of Access (Article 15): Request a copy of the personal data we hold about you.
• Right to Rectification (Article 16): Request correction of inaccurate or incomplete data.
• Right to Erasure (Article 17): Request deletion of your personal data ("right to be forgotten").
• Right to Restrict Processing (Article 18): Request that we limit how we use your data.
• Right to Data Portability (Article 20): Request your data in a structured, machine-readable format.
• Right to Object (Article 21): Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
• Right to Lodge a Complaint: File a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

To exercise any of these rights, please contact us at [protected email] . We will respond to your request within 30 days.

For a plain-language explanation of your rights, see Your Rights.

10. Data Security & Privacy by Design

Privacy by design and by default (Article 25 GDPR) is built into BizDom from the ground up: we host all personal data inside the European Union and we use no third-party analytics, advertising, or tracking vendors of any kind. These choices are architectural — they cannot be toggled off, and they apply to every visitor automatically.

We implement the technical and organisational measures required by Article 32 GDPR, including:

• TLS 1.2+ encryption for all traffic to and from bizdom.biz.
• Encrypted backups stored in EU-based object storage.
• Role-based access control and least-privilege principles for staff access.
• A formal secrets management system (HashiCorp Vault) for credentials.
• Automatic dependency scanning and regular security updates.
• A documented incident response plan.

While we strive to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

11. Data Breach Notification

If a personal data breach occurs, we will notify the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) within 72 hours of becoming aware of it, in accordance with Article 33 GDPR. Where a breach is likely to result in a high risk to your rights and freedoms, we will also notify affected users directly and without undue delay, in plain language and with a description of the likely consequences and the measures we are taking, in accordance with Article 34 GDPR.

11a. Data Protection Officer (Article 37 GDPR)

Junovy is a small Dutch business and is not required to appoint a Data Protection Officer under Article 37 GDPR: we do not carry out large-scale systematic monitoring of individuals, nor do we process special categories of personal data on a large scale. All privacy questions, data subject requests, and breach reports should be sent to the privacy contact below, which is handled directly by the person responsible for BizDom.

12. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately, and we will delete the information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Junovy (trading as BizDom)
[protected]
The Netherlands
KvK: 71813977

Privacy Inquiries: [protected email]
All Privacy Documents: Privacy Center
Legal Notice: Legal Notice

Back to Home