Privacy policy
Last updated: 31 October 2026
This privacy statement explains how Thijssens Project Solutions handles personal data collected through thijssensps.com. We comply with the EU General Data Protection Regulation (GDPR). Because we also work from Penang, Malaysia, we also respect the Malaysian Personal Data Protection Act 2010 (PDPA).
Who is responsible
The controller of your personal data is:
Thijssens Project Solutions (owner: Ron Thijssens)
Registered in the Netherlands, KVK 91243378
Email: info@thijssensps.nl
What data we collect
We only collect data that you give us through the forms on this website:
- Contact form: name, email address, company (optional), subject and message.
- Consultation requests: name, email address, company, phone number, country, topic, message, requested and alternative meeting times, time zone and meeting type.
- Reviews: name, role, company, email address (never published), rating and review text.
- IP address: stored only in a scrambled (hashed) form and used only to protect the forms against spam and abuse.
We do not buy personal data and do not collect data from social media.
Why we use your data
- To answer your questions and messages.
- To handle your consultation request: confirm, decline or propose another time, and prepare the meeting.
- To send the invoice or payment link after a consultation has been confirmed.
- To publish your review on this website, only with your explicit consent.
- To keep the website and its forms secure and free of spam.
Legal basis
- Steps before a contract (GDPR art. 6(1)(b)): when you request a consultation or ask about our services.
- Legitimate interest (GDPR art. 6(1)(f)): answering general questions and protecting the website against spam and abuse.
- Consent (GDPR art. 6(1)(a)): publishing your review. You can withdraw your consent at any time.
- Legal obligation (GDPR art. 6(1)(c)): keeping invoices and financial records.
How long we keep your data
We keep your data for 24 months after our last contact, unless a longer period is required by law. For example, invoices and related records are kept as long as Dutch tax law requires (currently 7 years). Published reviews stay online until you ask us to remove them.
Who processes your data for us
We use the following processors, who only process data on our instructions:
- Lovable / Lovable Cloud: website hosting and database.
- Lovable Emails: sending emails from this website.
We do not sell or rent your data to anyone.
International transfers
Our service providers may store or process data outside the European Economic Area, and we work from Malaysia. When data leaves the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision. Under the PDPA, we only transfer data outside Malaysia with your consent or where needed for the purposes described above.
Your rights
You have the right to:
- access the personal data we hold about you;
- have incorrect data corrected;
- have your data deleted;
- object to processing based on legitimate interest, or restrict processing;
- receive your data in a common format (data portability);
- withdraw your consent at any time.
To use these rights, email info@thijssensps.nl. We respond within one month.
You may also file a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). If you are in Malaysia, you may contact the Personal Data Protection Department (JPDP).
Cookies
This website uses only technically necessary cookies, for example to keep the admin area signed in. We do not use tracking, analytics or advertising cookies, so no cookie consent is required.
Changes to this statement
We may update this privacy statement. The date at the top shows when it was last changed.