Privacy Policy
Data controller
Last updated: 12 August 2026
This policy is provided in English only, which is the authoritative version.
This policy describes our current data practices for the bona-agency.com website and may be updated as those practices change. It does not itself create or modify any commercial agreement. The terms of any client engagement are set out exclusively in the signed contract for that specific project, not here.
1.What This Policy Covers
This policy explains what personal data Bona Agency collects through bona-agency.com (and related domains), why, how it's stored, and what rights you have over it.
2.What Data We Collect
We collect personal data only when you actively provide it to us, for example:
- Contact form submissions: name, email address, and any project details you choose to share (project type, budget range, timeline, description). Submitting the form requires confirming you have read this policy; that confirmation is recorded with a timestamp and the policy version in effect at the time. This confirmation is an acknowledgement that the policy was read, not consent as a legal basis for processing (see §3).
- Direct email correspondence: if you email us directly, we retain that correspondence and any details you share in it.
We do not use Google Analytics or any third-party analytics or tracking cookies. All fonts used on this site are self-hosted; no font or other asset requests are sent to third parties before or during page load.
3.Why We Collect It, and the Legal Basis
| Data | Purpose | Legal basis |
|---|---|---|
| Contact form submissions | Responding to project inquiries | Steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) |
| Email correspondence | Ongoing communication about an active or prospective project | Performance of a contract, or our legitimate interest in responding to business inquiries where no contract yet exists (Art. 6(1)(b) or 6(1)(f) GDPR) |
4.Where Your Data Is Stored, and Who Processes It
- Glaucidae: data submitted through this site is processed and stored on Glaucidae, our own data platform, hosted in Frankfurt, Germany (EU). Bona Agency and Glaucidae are operated by the same legal entity.
- Vercel (website hosting, Vercel Inc., United States): the site is hosted via Vercel, which processes technical data (such as IP address and request logs) as part of standard web hosting infrastructure. We have a data processing agreement in place with Vercel, which relies on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) as its transfer mechanism, and production hosting is pinned to Vercel's EU region (Frankfurt), aligning with where Glaucidae is also hosted.
- Google Workspace (email, Google Ireland Limited): our email correspondence is handled through Google Workspace, covered by Google's standard Data Processing Amendment.
We do not sell or share your personal data with any other third party for marketing purposes.
5.How Long We Keep Your Data
- Contact form submissions where no client relationship results: retained for 12 months from the date of last contact, then deleted.
- Correspondence and records where a project proceeds: retained for the duration of the engagement, plus 7 years afterward, in line with Dutch statutory bookkeeping retention requirements (Art. 52 AWR).
6.Your Rights
Under the GDPR/AVG, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data ("right to be forgotten"), where applicable
- Restrict or object to certain processing
- Request a portable copy of your data
- Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe your data has been mishandled
To exercise any of these rights, contact us at info@bona-agency.com.
7.Security
We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, or misuse. No system is completely secure, but we aim to handle your data responsibly and limit access to what's necessary.
9.Changes to This Policy
We may update this policy as our data practices change. The most recent version is always available on this page.
10.Contact
Questions about this policy can be sent to info@bona-agency.com.