This is how we handle your data.

Who we are

CribConnects B.V., Wibautstraat 137H, 1097 DN Amsterdam. KvK 97365181. We are the controller (verwerkingsverantwoordelijke) for the data you share with us through this website. You can reach us at [email protected].

What data we collect, and why

Contact form: your name, email address, optionally your organization, and your message. We use this only to respond to your message and, if a collaboration follows from it, to get that started. Why this is allowed: we need this data to respond to your question or to take steps towards a collaboration.

Application form: your name, email address, optionally a link to your LinkedIn or portfolio, your CV and cover letter (as a file), optionally a short note, and the vacancy you are applying for. We use this only to handle your application. Why this is allowed: we need this data to assess your application. If we keep your data longer for future vacancies, we only do so with your consent.

You are not required to use our forms. Without a name and email address we cannot respond; for an application we also need your CV, your cover letter and the vacancy. Organization, LinkedIn or portfolio link and the note are always optional.

Email: if you email us directly, we process the data you include yourself. If you reply to an email we sent from our dashboard, your reply is attached to your original message in that dashboard, with a copy in our mailbox. We keep the reply as long as the message it belongs to; replies from customers for no more than 1 year.

How long we keep your data

• Contact messages: as long as needed to handle your question and follow up on any collaboration.
• Digitally signed quotations: if you sign a quotation online, we record your name, the timestamp, your IP address and the signature you drew as proof of agreement. We automatically erase the signature and IP address 7 years after signing, matching the statutory retention period for our administration; if a dispute is running, that term can be extended per quotation. Name and date stay with the invoice afterwards. If you want the signature and IP address removed sooner, just ask.
• Applications: until no later than 4 weeks after the end of the application procedure. Only if you give separate consent for this when submitting do we keep your data for up to 1 year, so we can contact you about future vacancies. That checkbox is optional and has no influence whatsoever on your application. You can withdraw your consent at any time.

Who we share data with

We never sell data. We use a small number of service providers (processors) to make the website and our email work:

• Brevo (France, EU): delivers the messages from our forms to us as email, sends the emails from our dashboard and receives the replies to them.
• Google Workspace: our email system. Google may process data outside the EEA; for transfers to the US, the safeguards of Google Workspace apply, such as the EU-US Data Privacy Framework where applicable and otherwise the EU standard contractual clauses.
• Railway: hosts this website. Form submissions are not stored on the web server.

Data processing agreements are in place with these parties. Beyond these service providers we do not share your data, unless the law requires us to.

Cookies and tracking

This website uses no tracking cookies and no advertising cookies. We only use functional storage in your browser, such as remembering that you have already seen the intro animation. We do not ask for consent for that.

We do keep simple, anonymous visitor statistics: which pages are viewed, through which site visitors arrive and which country they come from. This happens on our own server, without cookies and without profiles. Your IP address is not stored and not shared in the process; we only keep daily totals. We do this on the basis of our legitimate interest (Article 6(1)(f) GDPR): understanding how the site is used, so we can improve it.

Would you rather not be counted at all? You can do that here: Do not count me We remember this choice in your browser as functional storage, so no cookie is needed for this either.

We only recognize returning visitors if you say yes to that in the banner. If you accept, we store one random, anonymous marker in your browser (first-party; no third party is involved). It lets us count how many visitors come back. The marker says nothing about who you are and never leaves our own systems. Declining or withdrawing has no effect on your visit at all. You can change your choice here: Recognize me as a returning visitor

Security

The connection to this website is encrypted (HTTPS). Form submissions are delivered to us directly as email and are not stored on the web server. Access to our email is protected with two-step verification.

No automated decisions

We make no automated decisions about you and do not build a profile of you, not for marketing and not for selection. Every application and every message is read by a human.

Your rights

You may ask what data we hold about you. You may ask for correction, deletion, restriction of use or transfer of your data, and you may object. If you have given consent, you may withdraw it at any time; from that moment on we no longer use your data for that purpose. To do so, email [email protected]; we respond within one month.

Last updated: 1 September 2026. If we change this statement, you will see it in this date.