Legal
Privacy statement
Disclaimer: The Dutch version of this document is the only legally binding version. The English document is for translation purposes only. Wherever the English version differs from the Dutch version, the Dutch version applies.
Last updated: 7 October 2026
Introduction
Afternoon Code takes your privacy very seriously and will process and use data about you (the data subject) in a secure manner. In this Privacy Statement, we will explain to you about the data we process and for what purposes. In addition, you can read in this Privacy Statement about the right to protection of your personal data. We advise you to read this Privacy Statement thoroughly. If you have any questions or remarks, please contact us at info@afternooncode.com.
Who is Afternoon Code?
Afternoon Code is the besloten vennootschap Afternoon Code BV, with registered office at Orteliuslaan 9, (3528 BA) Utrecht, listed at the Trade Register of the Dutch Chamber of Commerce under 42129277.
When Afternoon Code processes your personal data, Afternoon Code is the data controller.
How does Afternoon Code use your personal data?
Underneath you will find an overview of the purposes for the processing of your personal data. You will also find a specification of which data Afternoon Code uses for that specific purpose, the legal basis, the period of time Afternoon Code keeps this data and which processors are involved. For clarity’s sake, we have categorised the purposes.
Website
- Purpose
- Website analytics
- Information
- Online behaviour
- Legal basis
- Legitimate interests
- Interest concerned
- Commercial interests
- Storage period
- 30 days
- Processors
- Vercel
- Purpose
- Hosting
- Information
- IP address and technical data about your visit
- Legal basis
- Legitimate interests
- Interest concerned
- A secure, working website
- Storage period
- 30 days
- Processors
- Vercel
- Purpose
- Preventing abuse of the contact form and the customer portal login
- Information
- IP address and browser data
- Legal basis
- Legitimate interests
- Interest concerned
- Protection against spam and bots
- Storage period
- Briefly, only for as long as the check takes
- Processors
- Cloudflare Turnstile (see the Turnstile Privacy Addendum (opens in a new tab)), Upstash
Contact form
- Purpose
- Answering your question and getting in touch with you
- Information
- Name, organisation, email address, phone number and your message
- Legal basis
- Consent
- Storage period
- maximum 2 years
- Processors
- Brevo
Customer portal
- Purpose
- Signing in to the customer portal
- Information
- Email address, IP address and browser data
- Legal basis
- Providing services, Legitimate interests
- Interest concerned
- Secure access for contacts of our customers
- Storage period
- A session 7 days; expired sessions up to 30 days; the account for the duration of the engagement + 2 years
- Processors
- Neon, Brevo
How did Afternoon Code obtain your personal data?
Afternoon Code has obtained your data because you have provided this data to us.
What are your rights?
Under the European General Data Protection Regulation you have a number of rights with regard to your data and the processing thereof:
Access
If you would like to see which personal data Afternoon Code has obtained about you, you may exercise your right of access by submitting a request to Afternoon Code.
Making changes
If you wish to make changes to the personal information that you have seen as a result of a request for access, you may request that Afternoon Code makes these changes for you. You may request that Afternoon Code modifies, corrects, supplements, erases or shields your information.
Restriction of processing of personal data
You also have the right, under certain conditions, to request Afternoon Code to restrict the processing of your personal data.
Right to object
If processing of personal data is based on ‘legitimate interest’ of Afternoon Code or a third party, you have the right to object to that processing.
Data transfer
You have the right to obtain your personal data from Afternoon Code. Afternoon Code will provide this in a structured and commonly used format, which can easily be opened using commonly used digital systems. This will also allow you to transfer your data to another provider.
Withdrawing consent
When the legal basis for a particular processing is your consent, you have the right to withdraw that consent. This does not affect data processed in the past, but it does mean that we are then no longer allowed to process this data in the future. As a result, Afternoon Code may no longer be able to provide you with certain services.
Response from Afternoon Code
A request can be sent to info@afternooncode.com. Afternoon Code will comply with your request as soon as possible and in any event no later than one (1) month after Afternoon Code has received such a request. If Afternoon Code rejects your request, we will indicate in our reply why the request is rejected.
Recipients of your personal data
Your data may be transmitted to data processors. Which processor belongs to which purpose is listed above. Afternoon Code works with these processors:
| Processor | Established in | Storage and transfer |
|---|---|---|
| Vercel Inc. (Hosting) | San Francisco, United States | Data centre within the EEA, Frankfurt region. No transfer outside the EEA. |
| Neon, Inc. (Database) | San Francisco, United States | Data centre within the EEA, Frankfurt region. No transfer outside the EEA. |
| Upstash, Inc. (Caching) | San Jose, United States | Data centre within the EEA, Frankfurt region. No transfer outside the EEA. |
| Sendinblue SAS, trading as Brevo (Email) | Paris, France | France, within the EEA. No transfer outside the EEA. |
| Cloudflare, Inc. (Abuse prevention) | San Francisco, United States | Transfer to the United States on the basis of standard contractual clauses. |
Afternoon Code may be obliged to provide your data to a third party, for example on the basis of a legal obligation.
Can changes be made to this Privacy Statement?
This Privacy Statement is subject to changes. We therefore advise you to check the Privacy Statement regularly for any changes.
Questions, remarks, and complaints
If you have any questions regarding this Privacy Statement and the way Afternoon Code uses your data, please send an e-mail to info@afternooncode.com. If you have a complaint about the way your data is processed, please send an e-mail to info@afternooncode.com. Furthermore, you always have the right to contact the competent national data protection supervisor. In The Netherlands, this is the Autoriteit Persoonsgegevens (opens in a new tab).