What we measure, why, and how to set it up.

Last updated: 24 October 2026 · Version 1.2

This privacy statement describes how Beyond Borders Marketing Consultancy processes personal data when you use this website and when you contact us. In doing so, we comply with the General Data Protection Regulation (GDPR), the GDPR Implementation Act and Article 11.7a of the Telecommunications Act (the Dutch cookie provision).

1. Data controller

Organisation

Beyond Borders Marketing Consultancy

Address

38 Sint Annalaan, 6217 KB Maastricht, the Netherlands

Email

architect@beyondbordersmarketingconsultancy.nl

Telephone

+31 6 17 00 49 67

Chamber of Commerce number

88259137

Data Protection Officer

Not appointed. We are not obliged to do so, as we do not carry out large-scale or systematic monitoring of data subjects and do not process special categories of personal data on a large scale. Enquiries regarding privacy are sent directly to the address above.

2. The short answer

• Without your consent, we will only set strictly necessary cookies and will not load Google Analytics or Hotjar.
• If you give your consent, we will track how this site is used: which pages you view, for how long, where you click and how far you scroll.
• We do not sell your data or use it for third-party advertising.
• You can withdraw your consent at any time, just as easily as you gave it.

3. What data we process

3.1 Every time you visit the website (server logs)

Our hosting provider records technical data necessary to deliver and secure the site: your IP address, the date and time of the request, the page accessed, the HTTP status code, the amount of data transferred, the browser type and operating system, and any referring page.

Objective

Technical delivery of the website, fault-finding, security and prevention of misuse.

Basis

Legitimate interest (Article 6(1)(f) of the GDPR): a fully functional and secure website.

Retention period

Short-term; the hosting provider deletes the logs automatically. The exact timeframe is set out in ALL-INKL.COM’s privacy policy.

Hosting provider

ALL-INKL.COM – Neue Medien Münnich, Friedersdorf, Germany. The servers are located in Germany, within the EU.

3.2 When you contact us

If you contact us by email, telephone or WhatsApp, or if you book an appointment, we will process the details you provide: your name, email address, telephone number, company name and the content of your message.

Objective

To answer your enquiry, arrange an appointment and map out the process leading up to a potential assignment.

Basis

The performance of, or preparation for, a contract (Article 6(1)(b) of the GDPR), and for other correspondence, our legitimate interest in normal business communications (point (f)).

Retention period

Correspondence that is not followed up will be deleted no later than 24 months after the last contact. If the contact leads to an assignment, the statutory tax retention period of 7 years applies to the records.

3.3 Google Analytics 4 — website statistics

With your consent, we use Google Analytics 4 (GA4) to understand how this website is used. GA4 is only loaded once you have clicked ‘Accept’ in the cookie banner. GA4 processes, amongst other things: a randomly generated user and session ID, pages visited, the time and duration of the visit, click and scroll events, device type, screen resolution, browser, language setting, estimated country and region, and the source through which you arrived at the site.

We have configured GA4 so that IP addresses are not stored: GA4 uses the IP address only briefly to determine your approximate location and then deletes it. We do not use GA4 for ad personalisation, do not link Google Ads signals, and have disabled the ad reporting features.

Met dezelfde toestemming houden we in je browser bij het hoeveelste bezoek dit is (localStorage bbmc_visits: een volgnummer en de tijd van je eerste en laatste bezoek). Zo zien we of bezoekers terugkomen. Dit staat alleen op je eigen apparaat, gaat als volgnummer mee naar GA4 en wordt verwijderd zodra je je toestemming intrekt. Een persoonlijke link met een code (?k=…) wordt niet naar Google gestuurd.

Processor

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We have entered into a data processing agreement with Google.

Measurement ID

G-0SZYSP6WG3

Objective

Statistics: understanding what content works, where visitors drop off and how the site can be improved.

Basis

Solely your consent (Article 6(1)(a) of the GDPR and Article 11.7a of the Telecommunications Act).

Retention period

Event data in GA4 is automatically deleted after 14 months.

Transfer outside the EU

See paragraph 5.

3.4 The red napkin: your personal first look

On this website you can request a personal video in which Jean takes a first look at your business. All you enter is the address of your website. We process that website address, the sector you chose, the time of your request and a random code contained in your personal link. To prevent misuse, we also keep an encrypted, non-reversible derivative of your IP address for 24 hours.

Objective

To make the video and make it available to you behind your personal link.

Basis

Your request, as a step towards a possible agreement (Article 6(1)(b) of the GDPR); for the protection against misuse, our legitimate interest (point (f)).

Retention period

12 months after the video is ready; after that we delete the request.

We use the website address for nothing else: no newsletter, no sales calls.

3.5 Hotjar — clicks, scrolling and mouse movement

With your consent, we use Hotjar to see how visitors use our pages: where they click, how far they scroll and how the mouse moves, as aggregated heatmaps and as session recordings. Hotjar is only loaded once you have clicked ‘Accept’ in the cookie banner. What you type into form fields is not recorded. We use this data to improve the website, not to assess individual visitors.

Processor

Hotjar Ltd., Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta. Hotjar stores the data in the European Union.

Objective

Usability: seeing where visitors get stuck, what they read and what they skip.

Basis

Solely your consent (Article 6(1)(a) of the GDPR and Article 11.7a of the Telecommunications Act).

Retention period

We keep recordings and heatmap data for no more than 365 days.

4. Cookies and similar technologies

Cookies are small files that are stored on your device. We set strictly necessary cookies without your consent, as the website cannot function without them and the law provides for an exception in this regard. We only set all other cookies once you have clicked ‘Accept’ in the cookie banner.

Hotjar plaatst daarnaast kortstondige technische testcookies die met _hj beginnen.

Withdrawing or amending consent

You can change your preferences at any time via the cookie settings at the bottom of every page. Withdrawing your consent is just as easy as giving it and takes effect immediately: from that moment onwards, no further statistical data will be collected. Withdrawing your consent does not affect the lawfulness of the processing carried out prior to that time. In addition, you can always delete cookies yourself via your browser settings.

5. Transfer outside the European Economic Area

Google Analytics is provided by Google Ireland Limited, which is based in the EU. However, Google may also process data on servers belonging to Google LLC in the United States. For this transfer, we rely on the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision and under which Google LLC is certified, supplemented by the European Commission’s standard contractual clauses.

Despite these safeguards, the level of protection in the United States is not in all respects equivalent to that within the EEA, and US authorities may, under certain circumstances, demand access to data. By consenting to the use of statistical cookies, you also consent to this transfer.

Hotjar Ltd. is established in Malta and stores the data in the European Union.

6. Recipients of your data

We share personal data exclusively with parties that help us to operate this website and our services, and only to the extent that this is necessary. We enter into a data processing agreement with all these parties. These include our hosting provider ALL-INKL.COM (Germany), Google Ireland Limited for analytics and for the calendar used to schedule appointments, Hotjar Ltd. (Malta) for heatmaps and session recordings, and our email software. In addition, we may disclose data where we are required to do so by law.

We do not sell personal data or make it available to third parties for advertising purposes.

7. Automated decision-making and profiling

We do not make any decisions with legal effect or similar significant consequences based on automated processing. We use the statistics to improve our pages, not to assess or select individual visitors.

8. Security

This website is accessible exclusively via an encrypted HTTPS connection. Access to the statistics and the email system is restricted to those who need it and is secured with strong passwords and two-factor authentication.

9. Your rights

Under the GDPR, you have the following rights:

• Access to the personal data we process about you.
• Correction of incorrect or incomplete data.
• Deletion of your data when we no longer require it or you withdraw your consent.
• Restriction of processing, for example whilst the accuracy of the data is being disputed.
• Objection to processing on the grounds of a legitimate interest.
• Portability: receiving data that you have provided yourself in a commonly used file format.
• Withdrawal of consent, at any time and without giving a reason.

You can send a request to architect@beyondbordersmarketingconsultancy.nl. We will respond within one month. To ensure we do not disclose information to the wrong person, we may ask you to provide evidence of your identity.

10. Make a complaint

If you are not satisfied with the way we handle your data, please let us know first. You also always have the right to lodge a complaint with the Dutch supervisory authority: the Dutch Data Protection Authority, PO Box 93374, 2509 AJ The Hague, autoriteitpersoonsgegevens.nl.

11. Amendments

We will update this statement whenever the website or our practices change. The date at the top indicates when the last change was made. In the event of significant changes to the way we collect data, we will ask for your consent again.

The company details and information regarding responsibility for the content of this website can be found in the legal notice. You can also ask questions via the contact page.