Last updated: 9 November 2026
1. Data controller
Bas Brader is responsible for the processing of personal data through basbrader.com.
For questions about this privacy statement or the processing of personal data, contact hello@basbrader.com.
2. What data is processed
When you visit this website, technical information may be processed to deliver and secure the site. This may include your IP address, browser and device information, pages visited, referring page and timestamps.
This website does not offer user accounts, contact forms or comments. If you contact me by email, I process the information you choose to provide, such as your email address and the contents of your message, to respond to your enquiry.
The website also processes limited statistical information about visits. Independent Analytics creates a pseudonymous visitor identifier using a one-way hash based on the visitor’s IP address, browser User-Agent and a site-specific salt. The plugin stores this hashed identifier rather than the original IP address.
When your browser loads the website’s font, Playfair Display, from Google Fonts, Google receives the request and may process your IP address and technical browser information to deliver the font.
3. Why data is processed and the legal basis
Personal data is processed for the purposes below, on the applicable legal basis under Article 6 of the General Data Protection Regulation (GDPR).
- Operating and securing the website: Technical information and server logs may be processed on the basis of legitimate interests (Article 6(1)(f)) in maintaining the website, diagnosing technical issues and protecting against attacks, where those interests are not overridden by your rights and freedoms.
- Responding to enquiries: Information provided by email is processed to respond to messages and handle related correspondence. The legal basis is legitimate interests (Article 6(1)(f)) or, where applicable, steps taken at your request before entering into a contract (Article 6(1)(b)).
- Website statistics: Independent Analytics is used to understand general website usage. It operates locally within WordPress, does not use cookies and does not send analytics data to an external analytics service. The legal basis is legitimate interests (Article 6(1)(f)), where the processing is necessary and proportionate and does not override your rights and freedoms.
- Cookie-consent records and preferences: Consent choices are stored to remember your preferences and keep a record of the choice made. Processing is based on compliance with applicable legal obligations (Article 6(1)(c)) where relevant, and legitimate interests (Article 6(1)(f)) where appropriate.
- External font delivery: Google Fonts is used to display the selected typeface. Where permitted by applicable law, the processing necessary to deliver the font is based on legitimate interests (Article 6(1)(f)); where consent is required, the relevant request should only take place after consent.
- Legal obligations: Where personal data must be processed to comply with a legal requirement, the legal basis is Article 6(1)(c).
Where processing relies on consent, you can withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. Legitimate interests are not used as a substitute for consent where applicable law requires consent.
4. Cookies, consent records and local storage
This website currently uses two necessary functional cookies:
- Lynbro Cookie Consent: stores your cookie-consent choice so the website can remember the decision you made.
- pll_language (Polylang): remembers the language detected or selected for your visit, so the website can provide the English or Dutch version. This cookie may be set even if you reject optional cookies because it supports the language functionality of the website.
This website does not currently use any optional cookie categories. Independent Analytics, described in the next section, operates without cookies and stores statistics locally in the website’s WordPress database.
Consent logging is enabled. Consent records are stored locally in the website’s WordPress database and may include the policy version, selected consent categories, consent method, language, region and a salted, pseudonymous identifier. The plugin documentation describes this identifier as a hash rather than a stored raw IP address. Consent records are automatically deleted after 365 days.
Anonymous, aggregated and cookieless statistics about interactions with the consent banner are enabled. These statistics are stored locally and may include aggregate counts of banner actions, such as accepting, rejecting or opening the settings panel. They are not used to identify individual visitors.
Automatic language detection is enabled, with English and Dutch available. You can manage cookies through your browser.
5. Website statistics
This website uses Independent Analytics to understand general visitor activity, such as page views, visitor numbers, sessions and referral sources.
Independent Analytics runs within WordPress. It does not use cookies or send analytics data to external analytics servers. Statistics are created and stored in this website’s WordPress database.
To recognise returning visitors, the plugin creates a pseudonymous identifier by applying a one-way hash to the visitor’s IP address, browser User-Agent and a site-specific salt. The original IP address is not stored by the analytics plugin; the hashed identifier is stored so that repeat visits can be recognised. This means the identifier should not be described as fully anonymous.
Analytics data is retained for up to 365 days and is automatically deleted after that period. The statistics are used to understand how the website is used, not to build advertising profiles or track visitors across different websites. Analytics data is not shared with an external analytics provider.
6. External services and links
This website loads Playfair Display through Google Fonts. When your browser requests the font files, Google may receive your IP address and technical information, such as browser details and the requested resource. For more information, see Google’s Privacy Policy.
This website also contains ordinary links to external websites, including social media platforms. When you follow a link, the privacy policy of the destination website applies. Merely displaying a standard link does not ordinarily transmit your personal information to that destination.
7. Sharing with third parties
Personal data may be processed by service providers where necessary to operate the website, including:
- Hosting and infrastructure providers: to deliver, maintain and secure the website and its WordPress database.
- Google: when your browser requests font files through Google Fonts.
Independent Analytics stores statistics locally and does not transmit analytics data to an external analytics provider. Lynbro benchmark sharing is disabled. The Broken Link Checker plugin checks links locally on this WordPress installation.
Personal data is not sold. This website does not use advertising networks or cross-site advertising trackers.
8. How long data is kept
Personal data is retained only for as long as reasonably necessary for its purpose or as required by law.
Analytics data is automatically deleted after 365 days. Consent records are stored locally in the website’s WordPress database and are automatically deleted after 365 days. Email correspondence is retained as needed to handle enquiries and related follow-up. Technical logs are subject to the retention policies of the hosting provider.
9. Security
Reasonable technical and organisational measures are used to protect personal data against unauthorised access, loss, alteration or disclosure. These may include access restrictions, software maintenance and security measures provided by the hosting infrastructure. No method of transmission or storage can be guaranteed to be completely secure.
10. Your rights
Under applicable data protection law, you may have the right to access your personal data, correct inaccurate information, request deletion, restrict or object to certain processing, request data portability where applicable, withdraw consent where processing is based on consent, and lodge a complaint with a data protection supervisory authority.
To exercise your rights, contact hello@basbrader.com. In the Netherlands, you can also contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
11. Changes
This privacy statement may be updated when necessary. The latest version will be published on this page, together with its revision date.
12. Contact
Bas Brader
Email: hello@basbrader.com
Website: https://www.basbrader.com