Privatlivspolitik

Version 1.0 · i kraft fra 1. november 2026.

The short version: this website has no accounts, no newsletter, no marketing cookies and no third-party analytics. When you visit, our server records basic technical data (IP, browser, pages viewed) so we can keep the site online and tell which pages people actually read. When you email or use the contact form, we receive what you send and reply to you. We don’t sell your data, we don’t hand it to advertisers, and we never will.

The rest of this page gives the detail European data-protection law expects a privacy notice to contain: who is responsible, what we collect, why, who receives it, how long we keep it, and the rights you have.

1 · Who is responsible for your data

The data controller is Litenett Finansrådgivning Ltd., Herengracht 141, 1015 BH Amsterdam, the Netherlands, company number KvK 00000000. All data-protection correspondence to [email protected].

We are not required to appoint a Data Protection Officer because the scale of our processing is below the threshold, but you can reach a senior partner on the same address.

2 · What we collect, and why

From visits to this site: our server automatically records the IP address of each visit, the browser user-agent string, the pages viewed, the URL you arrived from and the time. This happens because that’s how the Internet works — a web server cannot deliver you a page without those basic pieces.

From contact-form submissions and emails: whatever you choose to send us. That typically includes a name, an email address, a few lines on what you need help with, and sometimes the name of a firm or offer you’d like checked.

Cookies: this site sets one small, strictly technical cookie if you’re an administrator logged into WordPress; ordinary visitors receive no cookies at all. We don’t run Google Analytics, Meta Pixel, Hotjar, Clarity, or any other third-party tracker. See our cookies page for the single-line detail.

From clients: during an engagement you may share documents or figures. We record only what the engagement letter requires, we store it in a European-hosted encrypted workspace, and we delete it at the end of the retention period set out below.

3 · Our legal basis

Under Article 6 of the GDPR we rely on the following grounds:

• Legitimate interest — to deliver, secure and improve this website (technical logs).
• Steps taken at your request before entering a contract — for messages you send us about possibly engaging Litenett.
• Contractual necessity — for the engagement itself.
• Legal obligation — for tax, anti-money-laundering and other records we must keep.

4 · Who else sees your data

A small number of service providers, each bound by a data-processing agreement:

• Our European hosting provider (keeps the site online).
• Our European email provider (delivers your emails to us and our replies to you).
• A European accountancy firm (sees only what is strictly required for our books).

We don’t share your data with advertisers, data brokers, financial product providers or anyone else. Ever.

5 · Does any of it leave Europe?

Our hosting and email providers store and process all data inside the European Economic Area. If that ever changes, we’ll update this notice and name the country and the legal mechanism (Standard Contractual Clauses or equivalent) before the change takes effect.

6 · How long we keep it

What	How long
Web-server logs	30 days, then deleted
Contact-form & enquiry emails that don’t become engagements	12 months
Engagement files and correspondence	7 years from engagement end, as required by Dutch professional rules
Accounting records	7 years, as required by law

7 · Your rights

Under the GDPR you have the right to:

• Ask for a copy of the data we hold about you.
• Ask us to correct anything wrong or incomplete.
• Ask us to delete your data (where we aren’t required to keep it).
• Object to processing based on legitimate interest.
• Receive your data in a portable format.
• Withdraw any consent you gave, at any time, with no reason.

To use any of these rights, email [email protected]. We reply within one calendar month.

8 · How to complain

If you believe we’ve mishandled your data, we’d rather you told us first — but you can also complain directly to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), Hoge Nieuwstraat 8, 2514 EL The Hague, autoriteitpersoonsgegevens.nl.

9 · How we keep it safe

TLS on every page load, strong at-rest encryption on our mail and file storage, two-factor authentication on every staff account, and a least-privilege policy for who inside the firm can see what. We carry out an annual review of these controls and a security test of the website.

10 · Children

This site is for adults. We don’t knowingly collect data from anyone under 16. If you are a parent and believe your child has sent us something, email [email protected] and we’ll delete it.

11 · Changes to this notice

Minor wording updates may happen quietly — the version date above tells you when the current text took effect. Material changes (new recipients, new purposes, longer retention) are announced on this page at least 30 days before they take effect.

12 · Review history

• Version 1.0 · 1 November 2026 — first published version of the Litenett privacy notice.