Last updated: 27 September 2026 · Version 1.1
This privacy statement describes how Beyond Borders Marketing Consultancy processes personal data when you use this website and when you contact us. In doing so, we comply with the General Data Protection Regulation (GDPR), the GDPR Implementation Act and Article 11.7a of the Telecommunications Act (the Dutch cookie provision).
1. Data controller
- Organisation
- Beyond Borders Marketing Consultancy
- Address
- 38 Sint Annalaan, 6217 KB Maastricht, the Netherlands
- architect@beyondbordersmarketingconsultancy.nl
- Telephone
- +31 6 17 00 49 67
- Chamber of Commerce number
- 88259137
- Data Protection Officer
- Not appointed. We are not obliged to do so, as we do not carry out large-scale or systematic monitoring of data subjects and do not process special categories of personal data on a large scale. Enquiries regarding privacy are sent directly to the address above.
2. The short answer
- Without your consent, we will only set strictly necessary cookies and will not load Google Tag Manager or Google Analytics.
- If you give your consent, we will track how this site is used: which pages you view, for how long, where you click and how far you scroll.
- We do not sell your data or use it for third-party advertising.
- You can withdraw your consent at any time, just as easily as you gave it.
3. What data we process
3.1 Every time you visit the website (server logs)
Our hosting provider records technical data necessary to deliver and secure the site: your IP address, the date and time of the request, the page accessed, the HTTP status code, the amount of data transferred, the browser type and operating system, and any referring page.
- Objective
- Technical delivery of the website, fault-finding, security and prevention of misuse.
- Basis
- Legitimate interest (Article 6(1)(f) of the GDPR): a fully functional and secure website.
- Retention period
- Short-term; the hosting provider deletes the logs automatically. The exact timeframe is set out in ALL-INKL.COM’s privacy policy.
- Hosting provider
- ALL-INKL.COM – Neue Medien Münnich, Friedersdorf, Germany. The servers are located in Germany, within the EU.
3.2 When you contact us
If you contact us by email, telephone or WhatsApp, or if you book an appointment, we will process the details you provide: your name, email address, telephone number, company name and the content of your message.
- Objective
- To answer your enquiry, arrange an appointment and map out the process leading up to a potential assignment.
- Basis
- The performance of, or preparation for, a contract (Article 6(1)(b) of the GDPR), and for other correspondence, our legitimate interest in normal business communications (point (f)).
- Retention period
- Correspondence that is not followed up will be deleted no later than 24 months after the last contact. If the contact leads to an assignment, the statutory tax retention period of 7 years applies to the records.
3.3 Google Analytics 4 — website statistics
With your consent, we use Google Analytics 4 (GA4) to understand how this website is used. GA4 is loaded via Google Tag Manager; both are only loaded once you have clicked ‘Accept’ in the cookie banner. GA4 processes, amongst other things: a randomly generated user and session ID, pages visited, the time and duration of the visit, click and scroll events, device type, screen resolution, browser, language setting, estimated country and region, and the source through which you arrived at the site.
We have configured GA4 so that IP addresses are not stored: GA4 uses the IP address only briefly to determine your approximate location and then deletes it. We do not use GA4 for ad personalisation, do not link Google Ads signals, and have disabled the ad reporting features.
- Processor
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We have entered into a data processing agreement with Google.
- Measurement ID
- G-SBKPR2ZLHQ (via the Google Tag Manager container GTM-WJW8QZL)
- Objective
- Statistics: understanding what content works, where visitors drop off and how the site can be improved.
- Basis
- Solely your consent (Article 6(1)(a) of the GDPR and Article 11.7a of the Telecommunications Act).
- Retention period
- Event data in GA4 is automatically deleted after 14 months.
- Transfer outside the EU
- See paragraph 5.
4. Cookies and similar technologies
Cookies are small files that are stored on your device. We set strictly necessary cookies without your consent, as the website cannot function without them and the law provides for an exception in this regard. We only set all other cookies once you have clicked ‘Accept’ in the cookie banner.
| Cookie | Party | Objective | Retention period | Permission required |
|---|---|---|---|---|
| cookie_notice_accepted | Beyond Borders (own) | Remembers your cookie preferences so that the banner doesn’t reappear on every visit | 6 months | No, absolutely essential |
| _ga | Google Analytics 4 | Distinguishes visitors with a random ID | 24 months | Yes |
| _ga_<container-id> | Google Analytics 4 | Tracks the status of the session | 24 months | Yes |
Withdrawing or amending consent
You can change your preferences at any time via the cookie settings at the bottom of every page. Withdrawing your consent is just as easy as giving it and takes effect immediately: from that moment onwards, no further statistical data will be collected. Withdrawing your consent does not affect the lawfulness of the processing carried out prior to that time. In addition, you can always delete cookies yourself via your browser settings.
5. Transfer outside the European Economic Area
Google Analytics is provided by Google Ireland Limited, which is based in the EU. However, Google may also process data on servers belonging to Google LLC in the United States. For this transfer, we rely on the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision and under which Google LLC is certified, supplemented by the European Commission’s standard contractual clauses.
Despite these safeguards, the level of protection in the United States is not in all respects equivalent to that within the EEA, and US authorities may, under certain circumstances, demand access to data. By consenting to the use of statistical cookies, you also consent to this transfer.
6. Recipients of your data
We share personal data exclusively with parties that help us to operate this website and our services, and only to the extent that this is necessary. We enter into a data processing agreement with all these parties. These include our hosting provider ALL-INKL.COM (Germany), Google Ireland Limited for analytics and for the calendar used to schedule appointments, and our email software. In addition, we may disclose data where we are required to do so by law.
We do not sell personal data or make it available to third parties for advertising purposes.
7. Automated decision-making and profiling
We do not make any decisions with legal effect or similar significant consequences based on automated processing. We use the statistics to improve our pages, not to assess or select individual visitors.
8. Security
This website is accessible exclusively via an encrypted HTTPS connection. Access to the statistics and the email system is restricted to those who need it and is secured with strong passwords and two-factor authentication.
9. Your rights
Under the GDPR, you have the following rights:
- Access to the personal data we process about you.
- Correction of incorrect or incomplete data.
- Deletion of your data when we no longer require it or you withdraw your consent.
- Restriction of processing, for example whilst the accuracy of the data is being disputed.
- Objection to processing on the grounds of a legitimate interest.
- Portability: receiving data that you have provided yourself in a commonly used file format.
- Withdrawal of consent, at any time and without giving a reason.
You can send a request to architect@beyondbordersmarketingconsultancy.nl. We will respond within one month. To ensure we do not disclose information to the wrong person, we may ask you to provide evidence of your identity.
10. Make a complaint
If you are not satisfied with the way we handle your data, please let us know first. You also always have the right to lodge a complaint with the Dutch supervisory authority: the Dutch Data Protection Authority, PO Box 93374, 2509 AJ The Hague, autoriteitpersoonsgegevens.nl.
11. Amendments
We will update this statement whenever the website or our practices change. The date at the top indicates when the last change was made. In the event of significant changes to the way we collect data, we will ask for your consent again.
The company details and information regarding responsibility for the content of this website can be found in the legal notice. You can also ask questions via the contact page.