Privacy statement
Jazetti B.V. is the controller for the personal data processed on this website.
Jazetti B.V. · Flight Forum 3503, Industrienummer 5754, 5657 DW Eindhoven, the Netherlands
Chamber of Commerce 73591211 ·
info@jazetti.com ·
+31 6 10 100 843
Last changed: 2 October 2026
This is a translation. The Dutch text is authoritative; if the two ever disagree, the Dutch version is the one that applies.
In short
This website uses no cookies, no analytics and no trackers. It loads no fonts, scripts or images from anyone else either, so your IP address goes nowhere else. We process what you type into the contact form, plus what a web server unavoidably records in order to work.
The contact form
What we ask for. Your name, email address and your message.
What happens to it. Your message is sent to our mailbox as email. It is not put in a database and not kept on the web server. The reference number is shown on the thank-you page (and in the confirmation e-mail, when one is sent); that confirmation contains nothing of what you filled in.
What for. To answer your question and, where there is reason to, to prepare an assignment.
Legal basis. Steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
How long. Enquiries that do not lead to an assignment are deleted within twelve months. If your message does become part of an assignment, the correspondence moves into the client file and is kept for as long as we are required to keep it — seven years for our administration.
Messages that look like spam are marked in the subject line and are not confirmed automatically; they do reach us. The marker records a technical assessment of the submission and contains none of the information you entered. Submissions we treat as abuse do not get through.
Who can see it. Dennis Spoelder, and the person working on your assignment. Nobody else within Jazetti.
Keeping spam out
To protect the form against abuse, the server keeps technical data about submissions. Your IP address is kept in pseudonymised form only. If a submission is treated as abuse, the name and e-mail address entered may be kept to prevent repetition. What is recorded automatically is deleted after at most thirty days; manually blocked entries are kept for as long as needed to prevent abuse. Our hosting provider keeps the server's daily system copies for at most seven days longer. We use this data for nothing else.
Legal basis. Our legitimate interest in keeping the form usable (Article 6(1)(f) GDPR).
Contact form event log
We also record how many submissions were refused and by which rule. This event log contains no email addresses, phone numbers, free-text input, query strings, IP addresses or full user-agent strings.
Retention period: rows in the event log are kept for thirty days and then removed automatically.
Server logs
For every visit, the web server records the IP address, the date and time, the page requested, the status code, the referring page if there is one, and the browser identification. We use this only to investigate faults and abuse. We do not build visitor profiles from it and we do not link it to the contact form.
How long. Thirty days at most; the system then erases the logs automatically.
Legal basis. Legitimate interest: keeping the website available and secure (Article 6(1)(f) GDPR).
Cookies
None. This website sets no cookies at all, not even functional ones. So there is nothing to refuse and nothing to configure. Your browser does briefly remember your details after you send the form: your email address, to show it on the thank-you page, and your message, to put it back if sending fails. This temporary browser copy is then erased and is not sent to us separately.
Who else processes your data
- Jazetti Holding B.V. — our parent company. It rents the server and the backup storage and holds the account for our business email, and processes your data there only on our instructions, under a processing agreement with us. It uses three parties for this:
- UpCloud Oy (Finland) — hosting. The server is in Amsterdam; your data stays within the European Union.
- Google Cloud EMEA Limited (Ireland) — business email (Google Workspace). Where Google processes data outside the European Economic Area, it does so under Google's Cloud Data Processing Addendum, which incorporates the European Commission's standard contractual clauses.
- Scaleway SAS (France) — storage of the encrypted backup. The storage is in Paris; the data stays within the European Union.
The website, the contact form event log and the abuse-prevention data are stored on a server hosted by UpCloud in Amsterdam, which processes the data on that server. We do not keep the content of your message on the server: it arrives as an email in our Google Workspace mailbox.
Jazetti Holding B.V. has a processing agreement with all three. Apart from the service providers described on this page, we do not share this data with other parties, such as advertisers or tracking providers, and we do not sell data.
Data from client assignments
This domain also carries a private application interface
(jazetti.com/api/) belonging to a custom application. It is
not intended for visitors. The data in it belongs to the client
organisation: there, Jazetti acts as processor rather than as controller.
The data clients put into ExcelForge themselves falls outside this
statement; the processing agreement with that client governs it. What we
do record here is who signs in and what happens.
What we record. Two logs. The access log holds the timestamp, username, IP address and the operation performed; we keep that for seven months. The error log holds the timestamp, username, IP address, the application's version and the error the application reports; we keep that for 31 days. Clearing out happens when the application is used; if it lies idle for a while, old files go at the next use.
Why the IP address is in there. Seeing, stopping and investigating unauthorised access needs the real address — a derivative only tells you it is the same visitor again, not who or from where. For the contact form it is the other way round, and there we keep no address at all.
When the service ends we delete both logs along with that client's other data.
Backups
The periods above apply to the live system. Our hosting provider makes a daily system image of the server and keeps it for seven days. So data removed from the live system can remain in an image for at most seven more days.
In addition, every night we make a copy of the website and of the programming interface's logs. We keep that copy on the server for fourteen days; an encrypted copy of it goes to Scaleway in Paris (France) and is kept there for at most sixty days. The data the contact form records to prevent abuse is in neither copy.
Security
All traffic runs over HTTPS. The web server cannot modify its own program code, and the one directory the website may write to is not reachable over the web. Access to the server is through named administrative accounts using key authentication.
Your rights
You can ask us what data we hold about you, and ask for it to be corrected, erased or its processing restricted. You can object to processing that rests on a legitimate interest. We do not take automated decisions about you.
Write to info@jazetti.com; we reply within four weeks. If you disagree with what we do, you can lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl.
Changes
We update this statement when the website changes. The date at the top says when that last happened.