Privacy Policy

JAM-IT B.V., based at Houtzaagmolen 113, 2986 GE Ridderkerk (Chamber of Commerce 65313097), is responsible for the processing of personal data through this website. This statement explains which data we process, why, how long we keep it and who else receives it.

Data you give us yourself

Through the forms on this website you can get in touch with us, request a call back, request a quick scan, leave your details with the cost calculator, subscribe to the newsletter or apply for a job. We record what you fill in: depending on the form, your name, email address, phone number, company name, your message, the vacancy you are applying for, and the page you sent the form from.

The cost calculator also keeps your answers and the outcome, even if you leave no contact details. Without contact details we only use them to see what visitors are asking for.

Form	What we use it for	Legal basis
Contact, call back request, quick scan, cost calculator	Answering your question, calling you back, preparing a meeting or a quote	You ask us to do something before there is a contract (Article 6(1)(b) GDPR)
Job application	Assessing your application and getting in touch with you	Same
Newsletter	Sending you the newsletter	Your consent (Article 6(1)(a) GDPR); you can unsubscribe at any time

We keep what you send through a form or the cost calculator in our database for 2 years (730 days). After that it is deleted automatically; that check runs every day. For every form we also receive an email in our mailbox. We keep that email for as long as we need it to handle your request. If you want us to delete your data sooner, let us know.

To prevent misuse of the forms, we limit how often something can be sent from one connection. We do not store your IP address for this. We use an irreversible derivative (a hash) that exists only in the server's memory and stops counting after one hour. We do this on the basis of our legitimate interest in keeping the website working and secure (Article 6(1)(f) GDPR).

Data the server records

Like every web server, ours records for each visit which IP address requested which page, when, and with which browser. We use these access logs only to detect outages and attacks. An address that attacks the website is blocked automatically for at most one day. The logs are kept in the server's system log. That log is capped at 1 GB; the oldest lines are overwritten automatically once that limit is reached. The legal basis is our legitimate interest in keeping the website secure (Article 6(1)(f) GDPR).

Where your data is kept and who receives it

We do not sell your data and do not share it for other purposes. We do work with a few suppliers who process data for us:

Supplier	What	Where
Hetzner Online GmbH	The servers of this website and the database with form submissions	Germany
Hetzner Online GmbH	Encrypted backups of that database	Germany
Microsoft (Azure Communication Services)	Sends us an email when a form comes in	Europe
Microsoft 365	Our mailbox, where that email arrives	European Union
Google and Microsoft (Clarity)	Website statistics, only with your consent (see below)	Also outside the EU

Backups. We make an encrypted backup of the database every night. We keep daily backups for 14 days, Sunday backups for 90 days and backups from the first of the month for 365 days. Data we delete from the database can therefore remain in a backup for up to 365 days. We only use these backups to restore the website after an outage.

Website use

Only if you give consent in the cookie notice do we measure how you use this website. Without your consent nothing is loaded and nothing is sent. The legal basis is your consent (Article 6(1)(a) GDPR). We use:

• Google Tag Manager, to load the services below.
• Google Analytics, to see which website you came from, which pages you visit, for how long, and with which device and browser. That shows us which pages work and which do not.
• Google Ads, to measure whether a visit through an advertisement leads to a request. We do not use your visit to show you targeted advertisements later.
• Microsoft Clarity, to see how visitors move through a page, with heatmaps and recordings of sessions. By default, Clarity makes what you type into form fields unreadable.

If you have given consent and you send a form or book an appointment, Google Analytics may send the email address or phone number on the page to Google in hashed (unreadable) form. Google uses it to link a request to the advertisement you came in through.

How long these services keep data.

• Google Analytics keeps data about visitors and individual events for at most 14 months. After that only combined figures remain, in which you cannot be identified (data retention in Google Analytics).
• Google removes part of the IP address from advertising data in its server logs after 9 months, and the cookie information after 18 months (Google's retention policy).
• Microsoft Clarity keeps session recordings for 30 days. Recordings we mark as a favourite and a random sample are kept for up to 9 months (Clarity frequently asked questions).

Transfers outside the EU. Google and Microsoft may process this data in the United States. Both companies are certified under the EU-U.S. Data Privacy Framework. According to the European Commission, that gives your data an adequate level of protection. For Clarity, Microsoft also has standard contractual clauses in place between Microsoft Ireland and Microsoft in the United States.

Cookies we use

A cookie is a small text file stored in the browser of your computer, tablet or smartphone. This website sets one functional cookie itself. All other cookies are set only once you give consent.

Cookie	From	Purpose	Kept for
jam-analytics-consent	JAM-IT	Remembers whether you gave or declined consent	1 year
_ga, _ga_*	Google Analytics	Tells visitors and visits apart	2 years
_gcl_au	Google Ads	Links a request to the advertisement you came in through	90 days
_clck	Microsoft Clarity	Recognises a returning visitor	1 year
_clsk	Microsoft Clarity	Keeps the pages of one visit together	1 day

After a year we ask for your consent again.

In addition, the cost calculator remembers during your visit whether you have already given your details, so it does not ask again. That stays in your browser only and disappears when you close the tab.

Changing your choice

You can change your choice at any time. If you withdraw your consent, we delete the cookies these services had already set, and from that moment nothing more is measured. What was measured before you withdrew your consent stays with Google and Microsoft until the retention periods above run out.

Security

We take appropriate measures against misuse, loss, unauthorised access and unwanted changes to your data. Form submissions can only be viewed by JAM-IT employees who work with them, and the backups are encrypted. If you feel your data is not properly secured, or you see signs of misuse, please contact us at info@jam-it.nl.

Your rights

You have the right to:

• see your data;
• have incorrect data corrected;
• have your data deleted;
• have the processing restricted;
• object to processing based on our legitimate interest;
• receive your data in a common file format;
• withdraw your consent, without affecting what we did before.

Send your request to info@jam-it.nl. We respond within one month. If you are not satisfied with how we handle your data, you can file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Contact

JAM-IT B.V., Houtzaagmolen 113, 2986 GE Ridderkerk, Chamber of Commerce 65313097, info@jam-it.nl.

We update this statement when the website changes.

Last updated: 7 October 2026