Privacy Policy

This website is managed by Sumix Studio, based in the Netherlands. We are responsible for the processing of personal data as described in this privacy policy. We process your data in accordance with the General Data Protection Regulation (GDPR).

Last updated: June 2025

1. Contact form

What data do we collect?

Through the contact form on this website, we process the following personal data:

• Name
• Email address
• Phone number
• Subject
• Message content

Why do we process this data?

We process your data solely to be able to respond to your contact request. The legal basis for this is legitimate interests (Article 6(1)(f) GDPR). Responding to communication you initiated is a legitimate interest that is not disproportionate to your privacy interests.

How long do we retain this data?

We do not retain your data longer than necessary. Once your question or request has been fully handled, your data will be deleted. In practice, this means a retention period of a maximum of six months after handling, unless a legal retention obligation requires a longer period.

Is your data shared?

Your data is not sold or passed on to third parties for commercial purposes. Our hosting provider may, in theory, have access to server data in the context of technical management and maintenance; this occurs solely for that technical purpose.

2. Form security via Cloudflare Turnstile

To prevent misuse of the contact form, we use Cloudflare Turnstile, a CAPTCHA alternative from Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). Turnstile analyzes visitor behavior in the background to detect automated abuse, without requiring the user to solve a puzzle.

When using Turnstile, Cloudflare may process technical data, such as:

• IP address
• Browser characteristics (user agent, screen resolution)
• Behavioral patterns on the page

Cloudflare processes this data as an independent data controller for the purpose of providing and securing its services. For data transfers to the United States, Cloudflare relies on the EU-US Data Privacy Framework certification as its legal basis. More information can be found in Cloudflare’s privacy policy.

3. Cookies

This website does not place tracking or analytical cookies. Only technical (functional) cookies that are strictly necessary for the website to function are placed, such as session cookies from the CMS. No consent is required for these cookies.

4. Your rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): you can request which data we process about you.
• Right to rectification (Art. 16 GDPR): you can have inaccurate data corrected.
• Right to erasure (Art. 17 GDPR): you can request that your data be deleted.
• Right to restriction of processing (Art. 18 GDPR): in certain cases, you can request that processing be restricted.
• Right to object (Art. 21 GDPR): you can object to the processing of your data.
• Right to data portability (Art. 20 GDPR): you can request your data in a structured, commonly used format.

To submit a request, please contact us at contact@sumix.nl. We will respond within the statutory period of four weeks. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl.

5. Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. Communication through our website takes place via an encrypted HTTPS connection.

6. Changes to this policy

We reserve the right to amend this privacy policy. Changes will be published on this page. We recommend that you review this page periodically.

7. Contact

Do you have questions about this privacy policy or about the processing of your data? Please contact us: