Privacy policy

Who is responsible

This site is run by one person, Richard v.d. Heuvel of Mystic Meshworks, without a registered business. I decide what happens with the details you send through the contact form. You can reach me at info@mysticmeshworks.com.

What I collect

When you use the contact form:

• your name and email address,
• your message and the topic you choose (a piece from the collection, a custom idea, or something else), plus the piece if you started from one,
• the page you sent it from and the time it was received.

Filling in the form is voluntary. Without these details I cannot reply. I do not make automated decisions about you.

Why, and on what basis

Only to reply to your message and to continue the conversation you started, for example about a piece in the collection or a custom idea. That is taking steps at your request (Article 6(1)(b) GDPR) and my legitimate interest in answering questions sent to me (Article 6(1)(f)). No newsletters or marketing emails.

How long

Your message stays in my mailbox as long as needed to handle it and any follow-up, after which it is deleted. It is not stored anywhere else.

Who else sees it

This site and its email are hosted by STRATO AG in Germany, who process data on my behalf under a data processing agreement. Your message reaches me as an email through STRATO and is not passed on to anyone else. No analytics, tracking scripts, cookies or third-party services are used on this site, and I do not send your details outside the European Union.

Like any web host, STRATO's servers technically handle your IP address when you open a page; that falls under STRATO's own privacy terms.

Spam check

The contact form has an invisible spam check. It runs in your browser and on this site's own server, with no cookies and no third parties. To prevent abuse (my legitimate interest in keeping the form usable), a one-way scrambled form of your IP address is kept for at most 24 hours. It cannot be turned back into your IP address.

Your rights

You can ask me at any time, by email, to:

• show you which details I have about you,
• correct them, or delete them,
• limit how I use them, or hand them over to you in a common format,
• stop using them, if you object to how I use them.

I will answer within one month. If you think I handle your details wrongly, you can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.