Privacy statement

Last updated 20 September 2026

This site collects as little as possible. There are no trackers on it and nothing is sold on. Below is exactly what data arrives, why, how long it stays and what you can do about it.

Who processes your data

The party responsible for processing your data on this site is:

My Personal CreationsSint-Bernardsesteenweg 422620 HemiksemCompany number 1024.635.744VAT number BE 01024635744elroy@mypersonalcreations.nl

What data, and why

Contact form
Your name, your email address, your phone number if you give one, and your message. I use these only to answer your request and arrange the evening with you. Legal basis: performance of a contract, or the steps leading up to one (Article 6(1)(b) GDPR).
Newsletter
Your email address, your language and the moment you signed up. I use these only to announce new editions. Legal basis: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.
Server logs
On every visit the web server records your IP address, the time, the page requested and your browser type. This is needed to keep the site running and to spot abuse. Legal basis: legitimate interest (Article 6(1)(f) GDPR).
Spam protection
To stop the forms being flooded, the server keeps a count of requests per IP address in memory for at most one hour. None of it is written to disk. Legal basis: legitimate interest (Article 6(1)(f) GDPR).

Who else sees your data

Your data does not go to anyone who does not need it. Two parties are involved, both as processors and both inside the European Union:

Hetzner Online GmbH (Germany)
The site runs here. The server logs and the newsletter list sit on this server.
Zoho (EU servers)
The mailbox that the contact form and the newsletter notifications are sent to.

How long data is kept

Messages from the contact form
Stay in the mailbox for as long as your request and the contact around it need. Ask and I will delete them sooner.
Newsletter signups
Stay until you unsubscribe or ask to be removed. After that your address comes off the list.
Server logs
Are rotated automatically and do not go back further than a few weeks.
Spam counters
Disappear by themselves within an hour, and in any case when the server restarts.

Your rights

You can always ask what data I hold about you, have it corrected, have it deleted, have the processing restricted or object to it. You can also receive your data in a readable file to use elsewhere. Where you gave consent, for the newsletter for instance, you can withdraw it at any time without that making anything done beforehand unlawful.

Send a request to the email address above. I respond within one month. To avoid handing data to the wrong person, I may ask you to confirm your request from the address it concerns.

Security

The site runs entirely over HTTPS and the mail connection is encrypted. The newsletter list sits on a server only I can reach. That does not rule out everything: if you notice something that looks wrong, say so at the address above.

Changes

If anything changes in how this site handles data, this page is updated and the date above moves with it.

Filing a complaint

If we do not work it out between us, you have the right to file a complaint with the supervisory authority:

Gegevensbeschermingsautoriteit

You may do that at any time, including without raising it with me first.