Privacy Policy

Last updated: 5 April 2026

1. Who We Are

WebNasr ("we", "us", "our") is a software development and IT services company registered in the Netherlands.

  • Company name: WebNasr
  • KvK number: 94966990
  • Address: Zaandam, North Holland, the Netherlands
  • Contact: contact@webnasr.com

2. What Data We Collect

We collect the following categories of personal data:

  • Contact data: Name, email address, and message content when you submit our contact form.
  • Usage data: IP address, browser type, pages visited, and time spent on pages — collected automatically via Google Analytics 4 (GA4).
  • Technical data: Cookies placed by Google Analytics for anonymous aggregate traffic analysis.

We do not collect payment information, sensitive personal data, or data from children under 16.

3. How We Use Your Data

We use your data solely for the following purposes:

  • Responding to your enquiries and providing our services
  • Understanding how visitors use our website to improve content and performance
  • Complying with legal obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis (GDPR)

Under the General Data Protection Regulation (GDPR), our legal bases for processing are:

  • Legitimate interests (Art. 6(1)(f)) — for analytics and website improvement
  • Consent (Art. 6(1)(a)) — where you voluntarily submit a contact form
  • Legal obligation (Art. 6(1)(c)) — where required by Dutch or EU law

5. Cookies

We use Google Analytics 4 cookies to measure anonymous website traffic. These cookies do not identify you personally. You may opt out via your browser settings or using the Google Analytics Opt-out Browser Add-on.

We use one functional cookie (sw-cache) to enable offline functionality via our service worker. This cookie contains no personal data.

6. Data Retention

Contact form submissions are retained for a maximum of 12 months, after which they are permanently deleted. Analytics data is retained for 14 months in Google Analytics and then automatically deleted.

7. Third-Party Services

We use the following third-party services that may process your data:

  • Google Analytics 4 — website analytics (Google LLC, USA). Data is processed under Google's standard contractual clauses.
  • Google Fonts — typography (Google LLC, USA). Fonts are loaded via the Google Fonts API.

8. Your Rights

Under GDPR, you have the following rights:

  • Access: Request a copy of the personal data we hold about you
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Restriction: Request that we limit how we use your data
  • Portability: Receive your data in a structured, machine-readable format
  • Objection: Object to processing based on legitimate interests

To exercise any of these rights, contact us at contact@webnasr.com. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organisational measures to protect your data, including HTTPS/TLS encryption, server-side input validation, and restricted access to contact form data.

10. International Transfers

Google Analytics may transfer data to the United States. Google participates in the EU-US Data Privacy Framework, providing an adequate level of protection under GDPR.

11. Complaints

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

12. Changes to This Policy

We may update this Privacy Policy periodically. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of our website after changes constitutes acceptance of the updated policy.

Questions? Email us at contact@webnasr.com