Privacy Policy
Last updated: October 11, 2026
Data Controller
Responsible for data processing on this website:
What data we process
Based on the services we provide, we process the following data:
Website hosting
IP addresses, HTTP requests, browser and device information
Legitimate interest (Art. 6(1)(f) GDPR)
Vercel Inc. (EU edge nodes)
Database and authentication
Account data (email address, hashed password)
Performance of contract (Art. 6(1)(b) GDPR)
Supabase Inc. (Frankfurt, DE)
CDN and media storage
IP addresses, media files
Legitimate interest (Art. 6(1)(f) GDPR)
Cloudflare Inc. (EU R2)
Cookie consent
Preference cookies
Consent (Art. 6(1)(a) GDPR)
Contact form
Name, email address, message
Consent (Art. 6(1)(a) GDPR)
Newsletter
Email address, first name, signup moment, consent
Consent (Art. 6(1)(a) GDPR)
Twilio SendGrid (US, EU SCCs)
Online courses
Progress, enrollment, payment data
Performance of contract (Art. 6(1)(b) GDPR)
Stripe Inc. (US/EU Dublin)
Community
Messages, email address, display name
Performance of contract (Art. 6(1)(b) GDPR)
Assessments
Answers, scores, recommendations
Consent (Art. 6(1)(a) GDPR)
Lead management
Contact data, interaction history
Legitimate interest (Art. 6(1)(f) GDPR)
Chatbot
Conversation history, optionally name and email address; also when an AI assistant (agent) acting for the visitor performs the interaction, such as retrieving available times or booking a call
Consent (Art. 6(1)(a) GDPR)
Anthropic PBC (US, EU SCCs)
Sub-processors
To provide our services, we use the following processors:
| Name | Location | Purpose | Data |
|---|---|---|---|
| Supabase Inc. | Frankfurt, DE | Database, authentication, file storage | All platform data |
| Vercel Inc. | EU edge nodes | Frontend hosting, CDN | HTTP requests, IP addresses |
| Cloudflare Inc. | EU (R2: EU jurisdiction) | Media storage, CDN, video streaming | Media files, IP addresses |
| Anthropic PBC | San Francisco, US | AI language model (Claude): chatbot, content generation | Pseudonymized profiles, conversation history |
| Twilio SendGrid | US | Email delivery | Email addresses, names, email content |
| Stripe Inc. | US/EU (Dublin) | Payment processing | Payment data, billing addresses |
| Deepgram Inc. | US | Audio transcription, text-to-speech | Audio files |
| Sentry (Functional Software) | EU | Error tracking | Error reports, session info (no PII) |
| Google LLC (Tag Manager + Analytics + Ads) | US / EU (Frankfurt edge) | Tag Manager (loads marketing and measurement scripts), Google Analytics 4 (website statistics), Google Ads (conversion tracking). Only active after cookie banner acceptance (Consent Mode v2 defaults to "denied"). | IP address, browser identifier, page interactions, conversion events |
Cookies
This website uses the following cookies:
- Essential: cookie consent (necessary to remember your choice)
Retention periods
Your rights
Under the GDPR, you have the following rights:
- Right of access to your personal data
- Right to rectification of inaccurate data
- Right to erasure of your data
- Right to restriction of processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
Contact us at support@paulveth.com
Supervisory authority
Dutch Data Protection Authority (Autoriteit Persoonsgegevens) https://autoriteitpersoonsgegevens.nl
Changes
We reserve the right to modify this privacy policy. The most current version is always available on this page.