This statement explains what happens to personal data on this website. It covers visitors and the contact form. It does not cover the way MOOTS handles client or supplier data outside this website.
Last updated: 14 August 2026
MOOTS Products & Projects decides what happens to the personal data on this website and is therefore the controller within the meaning of the GDPR. You can reach us at:
When you send us a message we ask for your name, your email address and the message itself. A company name is optional. We use these details for one purpose: to answer you, and to make you a proposal if you ask for one. Name, email address and message are required, because without them we cannot reply. The legal basis is our legitimate interest in responding to enquiries; once an enquiry turns into an assignment, it is the performance of our agreement with you.
To stop the form being abused for spam, we briefly record the IP address a message comes from and count how many were sent. That counter runs on Upstash, an external service that stores the tally for us temporarily. It allows five messages per ten minutes and then deletes the address automatically. We do not use it to recognise or follow you. The legal basis is our legitimate interest in keeping the form usable.
Like any website, ours keeps technical logs: the requested page, the time, the browser type and the IP address. These are used to keep the site running and secure, never to build a profile. Our hosting provider deletes them automatically after a short period.
This website places no cookies and uses no analytics or tracking software. Nothing is shared with advertising networks or social media, and the fonts are hosted on our own server rather than loaded from a third party. The site is also configured to block any connection to another party outright. That is why you will not see a cookie banner: there is nothing to consent to.
We use a small number of suppliers to run this website. They only process your data on our instructions and may not use it for their own purposes.
Vercel, Resend and Upstash are American companies. Both the website and the spam counter run on servers in Frankfurt, so that data stays within the European Union. Sending your message goes through Resend, where processing in the United States cannot be ruled out. Access from the United States for maintenance and support cannot be entirely ruled out either. Where that happens, it is covered by the safeguards in our agreements with these suppliers, such as the European Commission standard contractual clauses.
We keep an enquiry for as long as we need it to handle your question properly. If it leads to an assignment, the correspondence becomes part of our records and we are legally required to keep those for seven years. If it does not lead to an assignment, we delete the correspondence once it is no longer needed. The IP address used for abuse prevention is kept for ten minutes at most.
Your message is not stored in a database on this website; it is forwarded straight to our mailbox. Beyond that we have taken the following measures:
The GDPR gives you a number of rights regarding your data. Email info@moots-products.nl and we will respond within one month. We may ask you to confirm your identity so that we do not hand your data to someone else.
We do not use automated decision-making or profiling. Every enquiry is read and answered by a person.
If you feel we handle your data incorrectly, we would rather hear it from you first, so we can put it right. You also have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl.
If the website changes in a way that affects personal data, we will update this statement. The date at the top of this page shows when it was last revised.
