Privacy statement

Last updated on 6 August 2026.

This is my personal website. There are no forms, no accounts, no shop and no newsletter. No cookies are placed, no visitor statistics are kept, and nothing is stored in your browser.

That leaves one thing that is unavoidable, your IP address, and one thing you set in motion yourself: getting in touch. Both are described below.

1. Who is responsible

Thierry Alen
Bargelaan 200, 2333 CW Leiden
Netherlands
Email: [email protected]
Telephone: +31 20 222 4402

This website is run by me personally, not by a company. There is no data protection officer; one is not required for a website of this kind. The address above reaches me directly.

2. What this statement covers

This website, thierryalen.eu, and the email and telephone conversations that follow from it. Not the websites of coVoIP, txtflow, Dosmax or Althicom: those have their own statement and their own controller.

3. Your visit to this website

To send you a page, the server has to know where to send it. Your IP address is therefore received on every visit. That is not a choice: without an IP address there is no connection and no page.

For each request the web server records: the IP address, the address requested, the date and time, the status code, the amount of data sent, and what your browser reports about itself.

• Purpose: to deliver the site, to find faults, and to recognise misuse.
• Lawful basis: legitimate interests, Article 6(1)(f) GDPR, namely the interest in a working and secure website.
• How long: the logs are rotated daily and seven files are kept. A line about your visit therefore disappears within eight days at the latest, automatically.

This data is not used to follow you, is not combined with other sources, and no profiles are built from it. Nobody returning to the site is recognised by it.

4. Delivery through Cloudflare

All traffic to this website passes through Cloudflare, which processes your IP address on my instructions, as a processor. Specifically:

• Cloudflare terminates the encrypted connection and passes the request to the server.
• Cloudflare runs a small script in your browser that recognises automated traffic, in order to counter misuse of the website.
• Cloudflare obscures the email addresses on the page so that they cannot be harvested automatically.

Cloudflare places no cookie on this website in doing so.

5. If you get in touch

If you send an email or telephone, I process what you supply yourself: your name, your email address or telephone number, and what your message is about.

• Purpose: to answer your message. Nothing beyond that.
• Lawful basis: legitimate interests in being able to reply, Article 6(1)(f) GDPR.
• How long: there is no customer database, no CRM and no list. Your message sits in my mailbox and nowhere else, and stays there for as long as it is relevant. After that it is deleted.

If it becomes an engagement, that continues at whichever company it best belongs to. From that moment on that company is the controller, with its own privacy statement and the statutory retention period that applies to its administration. This statement does not cover that.

6. Who else is involved

Your data is not sold and not shared for commercial purposes. The following are involved in delivering this website and the email that goes with it:

• Cloudflare, for delivery and security of the website; processes your IP address and the details of the request.
• Dosmax Development B.V., for the server the website runs on; your IP address appears in the access logs.
• Microsoft, for email to an alen.nl address; processes the content and sender of your message.

Beyond that I disclose data only where the law or a court order requires me to.

7. Transfers outside the European Economic Area

The server is in the European Union. Cloudflare and Microsoft are American companies and may process data outside the EEA. For those transfers I rely on the EU-US Data Privacy Framework, under which both are certified, and additionally on the European Commission's standard contractual clauses.

8. Cookies and storage in your browser

This website places no cookies and stores nothing in your browser: no cookies, no local storage, no session storage.

There is no analytics or tracking software, no Google Analytics, no Matomo, no advertising pixels and no social media buttons. No fonts, scripts or images are fetched from third parties either: everything the site needs is on its own server.

That is why you see no cookie banner here. There is nothing to accept and nothing to refuse.

9. Security

• The website is reachable only over an encrypted connection, HTTPS with HSTS, so your browser never connects unencrypted.
• The website is static: no database, no login, no form. There is therefore nowhere for data to leak from.
• This domain neither sends nor receives email. That is recorded in DNS with SPF and DMARC, so nobody can send mail that appears to come from it.
• The server is maintained and updated by Dosmax Development B.V.
• Cloudflare stops automated misuse at the edge of the network, before it reaches the server.

10. Your rights

You have the right of access to the data I hold about you, to rectification of inaccurate data, to erasure, to restriction of processing, to portability, and to object to the processing. Where I rely on legitimate interests you may object; I will then weigh it again and comply unless there are compelling grounds not to.

One practical limitation, which I would rather state than have you run into: I cannot connect an IP address in an access log to you, because I do not know whose it is and have nothing to compare it against. If you want access to that, I need your IP address and the time from you, and even then the line has most likely already disappeared automatically.

You can send your request to [email protected]. State clearly who you are, so that I do not disclose or delete the data of the wrong person. I will respond within one month.

11. Making a complaint

If you are unhappy with how I handle your data or your request, you can lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl. If you live in another EU country you may also approach the supervisory authority there.

12. Changes

I may amend this statement. The date at the top shows when that last happened.

13. Contact

Thierry Alen
Bargelaan 200, 2333 CW Leiden
Netherlands
Website: thierryalen.eu
Email: [email protected]
Telephone: +31 20 222 4402