Privacy Policy

Version 1.1 — Last updated: 2026-05-09
Effective from: 2026-05-09

Article 1 — Data controller

Ramon Horst Media (sole proprietorship of Ramon Dominique Horst), CCI 90340620, VAT-id NL004807239B26, established at Weerdingerkanaal ZZ 148, 7831 AJ Nieuw-Weerdinge, the Netherlands, is the data controller for the processing of personal data described in this privacy policy.

Contact: hijzelf@ramonhorst.nl.

Article 2 — What data do we process?

2.1 Use of the scanner (/en/geo-audit/): IP address and the URL entered by the visitor.

2.2 Order process (Stripe Checkout): name, email address, payment data (processed by Stripe), IP address and timestamp of the business confirmation, and — if provided — EU VAT number.

2.3 Audit delivery: email correspondence. If Customer actively grants read-only access to Google Search Console or comparable systems, this access is used solely for performing the audit and revoked after delivery.

2.4 Citation Monitor: email address, scan history, dashboard login.

Article 3 — Purpose and legal basis

3.1 The legal basis is performance of the Agreement (Art. 6(1)(b) GDPR).

3.2 For scanner rate-limiting, fraud prevention and statutory record-keeping, Ramon Horst Media relies on legitimate interest (Art. 6(1)(f) GDPR).

Article 4 — Retention periods

  • Customer and invoice data: 7 years (Dutch fiscal record-keeping obligation, art. 52 AWR).
  • Scanner IP address and URL logs: 30 days (rate-limit purpose).
  • Email correspondence: 1 year after last contact.
  • Citation Monitor scan history: as long as the subscription is active, plus 1 year after.

Article 5 — Third parties (processors and recipients)

  • Stripe Payments Europe Ltd. — payment processor, established in Ireland (EU). Data processing agreement in place.
  • Hetzner Online GmbH — hosting provider, established in Germany (EU).
  • Telegram notifications to Ramon Horst Media — only anonymised metadata ("new order, click dashboard"). No customer-identifiable data is sent via Telegram.
  • Cloud86 BV — mail provider for customer communication (sending confirmation and order emails). Established in the Netherlands (EU). Data processing agreement in place via hosting contract.

Article 6 — Transfer outside the EEA

6.1 Stripe processes personal data partly in the United States. For this transfer, Stripe uses Standard Contractual Clauses (SCC) approved by the European Commission.

6.2 Apart from Stripe, no transfer outside the European Economic Area takes place.

Article 7 — Security

7.1 The website is secured with HTTPS via Let's Encrypt certificates.

7.2 Stripe is PCI-DSS-compliant.

7.3 The server is hardened with systemd restrictions, fail2ban and a UFW firewall.

7.4 Customer data is stored exclusively within Stripe and Hetzner systems.

Article 8 — Your rights under GDPR

You have the right to:

  • access to your personal data;
  • rectification of inaccurate data;
  • erasure ("right to be forgotten");
  • restriction of processing;
  • objection to processing;
  • data portability;
  • withdrawal of previously given consent.

Requests can be submitted via hijzelf@ramonhorst.nl. Ramon Horst Media responds within 30 days.

Article 9 — Right to lodge a complaint

If you have a complaint about the processing of your personal data, you can contact Ramon Horst Media via hijzelf@ramonhorst.nl. You also have the right to lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

Article 10 — Cookies

This website does not place tracking or marketing cookies.

10.1 Stripe Checkout (on stripe.com) and the Stripe Customer Portal place functional session cookies. These are necessary for the operation of the payment service and fall under the exception to the cookie consent requirement.

10.2 If analytics or marketing cookies are introduced in the future, a cookie banner will be implemented and consent will be actively requested.

Article 11 — Changes

11.1 Version 1.1 — Effective from 2026-05-09. Added: Cloud86 BV as processor.

11.2 Material changes to this privacy policy are communicated to active customers by email at least 30 days before they take effect.

Note: this Privacy Policy is an English translation of the Dutch original. In case of conflict between the Dutch and English versions, the Dutch text prevails. The Dutch original is available at ramonhorst.nl/privacy/.