Privacy policy

Plaincodelab is a trading name of Kurdbits, a sole proprietorship registered with the Dutch Chamber of Commerce. Kurdbits is the controller for the data that arrives through this site.

All privacy questions, requests for access or deletion and complaints can go to hallo@plaincodelab.com. Messages about personal data always get an answer, including when the answer is that nothing about you turns out to be stored.

Anyone sending a message through the form on this site provides a name, an email address, a topic and the message itself. There is also the option to speak instead of type; in that case the recording is sent along and stored with the message. The time of sending is recorded.

That data is used to answer your question and — if a commission follows — to handle the contact about it. The basis is the performance of a contract or the steps preceding it; for general questions it is the legitimate interest of being able to reply to a message.

Messages and any recordings sit on a server inside the European Union and are accessible only to Plaincodelab. They are not used for advertising, not sold on and not shared with third parties, except where the law requires it.

Messages that do not lead to a collaboration are deleted after two years at the latest. If a commission does follow, the correspondence belongs to the file and the retention period for projects below applies.

Clients with an active project get access to a closed portal. Accounts are created by Plaincodelab; you cannot sign up for one yourself. Such an account holds a name, a company name, an email address and a password that is stored encrypted — the password itself is not readable, not even to Plaincodelab.

On login, the time and IP address of the last sign-in are recorded, and failed attempts are counted. That happens solely to recognise abuse and to lock accounts temporarily; it is not meant to track behaviour.

The portal further holds the data belonging to the project: project description, steps and status, requests from Plaincodelab, files supplied by you or by Plaincodelab, and the questions and answers exchanged about them.

Files sit outside the public folders of the server and are reachable only after logging in, and only within your own project. After a commission is completed the file and its documents are kept for seven years insofar as tax law requires, or shorter if you ask and no legal obligation stands in the way.

This site measures visits with its own installation of Umami on a Plaincodelab server. No cookies are placed, nothing is stored on your device and no profiles are built. No data goes to Google, to advertising networks or to other third parties.

What is recorded: which page was visited, which site or search engine someone came from, the country, the type of device, the browser and operating system, and the screen width. The IP address is not stored; it is only used with a daily rotating key to create a short, irreversible code that allows two visits on the same day to be counted as one visitor.

The basis is the legitimate interest of knowing which pages work and which do not. Because nothing is stored on your device and no personal profiles arise, no consent is required for this. Anyone who still prefers not to take part can switch statistics off in the cookie bar; that choice is respected.

These figures are kept for a maximum of 24 months and deleted afterwards.

This site uses no advertising cookies and no third-party cookies. There are two things that can be stored in your own browser.

The first is your choice in the cookie bar. It is stored in a cookie named pcl_consent so the bar does not return on every visit. That is functional storage, for which no consent is required. The choice lasts a year and can always be revised through the link at the bottom of every page.

The second is the personal greeting. If you used the form and gave consent for 'preferences', the site remembers your first name, email address, topic and last visited page in your own browser's storage. That happens only on your device; that data is not sent to the server. Withdrawing consent erases it immediately.

In the client portal a session cookie is used to keep you logged in. Without it the portal does not work; that too is functional storage.

Plaincodelab involves as few parties as possible. The site, the database, the files and the visitor figures run on its own server space inside the European Union; so no analytics service, no advertising network and no external form platform is involved.

What does exist: the party providing the server space and the means to manage it, and the mail environment through which messages are received and answered. Processor agreements are concluded with parties processing personal data in that role.

Data is not sold, not rented out and not used to track you elsewhere. No transfer outside the European Economic Area takes place. Only where the law requires it — for instance a demand from a competent authority — may data have to be shared.

All traffic with this site and with the portal is encrypted. Passwords are never stored as readable text but as a hash with a modern algorithm, and changing a password invalidates existing sessions.

Access to the portal is limited to your own project: files and messages of other clients are unreachable, including by guessing the address. Login attempts are rate-limited to counter automated guessing.

Files sit outside the public folders of the server. Backups are made of the database and the files, and the software in use is kept up to date because outdated components are the largest risk.

Anyone who nevertheless finds a weakness is asked to report it to hallo@plaincodelab.com rather than make it public. Reports are taken seriously and answered.

You have the right to know which data about you is processed and to receive a copy of it. If it is incorrect, you can have it corrected or completed. You can ask for deletion, for restriction of processing, or object to processing based on legitimate interest.

Data you supplied yourself and that is processed on the basis of consent or a contract can be provided to you in a common file format. Consent you gave — for instance for remembering your name — can be withdrawn at any time, without consequences for what happened before.

A request goes to hallo@plaincodelab.com. To prevent data reaching the wrong person, confirmation of your identity may be requested. A reply follows within the statutory period.

If you cannot resolve it together, you can lodge a complaint with the Dutch Data Protection Authority. That right stands apart from contact with Plaincodelab.

If something changes in the site or in the way data is processed, this page is updated. The date of the last change is stated at the top.

If it concerns a material change — a new category of data or a new party processing something — clients with an active commission are informed at the next contact.

Questions about an earlier version can always be asked at hallo@plaincodelab.com.