Legal
Privacy and cookie policy
Last updated: 30 October 2026
1. Who is responsible
Codeff, Rotterdam, the Netherlands (KvK 96201304) is the controller for the personal data described here. For any privacy question or request, email info@codeff.nl.
2. What we collect and why
Visiting the website
Like any web server, ours processes your IP address, the page requested, the time, and your browser's user-agent string so the page can be delivered and the service can be kept secure. These technical logs are rotated automatically and are not used to build visitor profiles. Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).
Contact form
When you send an enquiry we store your name, email address, and message so we can reply and discuss a possible project. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
To protect the website against spam and automated abuse, we also store the IP address, the approximate location (country, region, city) derived from it by our network provider when available, your browser's user-agent string, and the time of submission. We use this only to limit repeated submissions and to block addresses that keep sending abusive traffic. Legal basis: our legitimate interest in keeping the website and our inbox free from abuse (Art. 6(1)(f) GDPR). You can object to this at any time; see section 6.
Software demos
Files you upload to the demos are processed only to show you the result. Images extracted by the PDF demo are stored temporarily so they can be displayed and are deleted automatically within 24 hours. The weather demo sends only the place name you enter to WeatherAPI.com. Please do not upload documents containing personal or confidential information.
3. Cookies and local storage
We do not use analytics, advertising, or tracking cookies, and no third-party scripts or fonts are loaded on this website. Because we only use what is strictly necessary, no consent is required; we inform you about it here and in the notice shown on your first visit.
| Name | Type | Purpose | Duration |
|---|---|---|---|
session | First-party cookie, strictly necessary | Holds a security token that protects the contact form against forged requests (CSRF). | Until you close your browser |
codeff-cookie-notice-dismissed | Local storage, strictly necessary | Remembers that you closed the cookie notice so it is not shown again. | Until you clear your browser data |
4. How long we keep data
| Data | Retention |
|---|---|
| IP address, approximate location, and user agent of contact-form submissions | Automatically removed after 1 year |
| Addresses blocked because of abuse | Automatically removed 1 year after the last blocked attempt. Addresses that keep sending abusive traffic therefore stay blocked while the abuse continues. |
| Name, email address, and message | As long as needed to handle your enquiry and any resulting assignment, or until you ask us to delete it. Data that we must keep for tax or accounting purposes is kept for the statutory period of 7 years. |
| Images extracted by the PDF demo | Deleted automatically within 24 hours |
| Web server logs | Rotated automatically and overwritten |
5. Who receives your data
We do not sell your data or share it for marketing. It is only processed by service providers that we need to run the website:
- the hosting provider that runs the server and database of this website;
- Microsoft (Microsoft 365 / Outlook), which delivers contact-form notifications and our email correspondence. Microsoft may process data outside the European Economic Area; such transfers are covered by the EU–US Data Privacy Framework and Microsoft's Standard Contractual Clauses;
- WeatherAPI.com, which only receives the place name entered in the weather demo.
6. Your rights
Under the GDPR you can ask us for access to, correction of, or deletion of your personal data, ask us to restrict its processing, receive it in a portable format, and object to processing that is based on our legitimate interest. Email info@codeff.nl; we will respond within one month. If you sent us an enquiry, please include the email address you used so we can find it.
If you are not satisfied with how we handle your data, you can file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens ↗.
7. Changes
We will update this policy when the way we process data changes. The date at the top shows when it was last revised.