Privacy Policy

The data controller within the meaning of the General Data Protection Regulation (GDPR) is:

• —Contact form messages: a maximum of 1 year after the last contact or after the enquiry has been resolved.
• —Server logs:a maximum of 30 days in accordance with Vercel's policy, unless longer retention is required for security investigations.
• —Google Fonts: no storage by us; the IP address is processed per request by Google.
• —Newsletter signup: for as long as you remain subscribed; deleted immediately upon unsubscribing.

We only share your personal data with third parties to the extent necessary for the provision of our services. The parties we work with are:

For the newsletter: we send the confirmation email and manage the unsubscribe list via Resend. Signing up always uses double opt-in, and every newsletter email includes a direct unsubscribe link.

We never sell your personal data to third parties and do not provide it to other parties without your explicit consent, unless we are legally obliged to do so (e.g. at the request of a competent authority).

Resend, Vercel and Google are based in the United States, a country outside the European Economic Area (EEA). The transfer of personal data to these countries takes place on the basis of Standard Contractual Clauses (SCCs) established by the European Commission, which ensure an adequate level of protection for your data in accordance with the GDPR. Our database (Neon) runs in the EU, so no transfer outside the EEA applies to it.

Under the GDPR, you have the following rights regarding your personal data. You can exercise them by contacting us at info@jennybhasin.com. We will respond to your request within four weeks.

• —Right of access: you have the right to know which personal data we process about you and to receive a copy (Art. 15 GDPR).
• —Right to rectification: you can have incorrect or incomplete data corrected (Art. 16 GDPR).
• —Right to erasure ("right to be forgotten"): you can request that we delete your data, unless we have a legal obligation to retain it (Art. 17 GDPR).
• —Right to restriction of processing: you can request that we temporarily restrict the processing of your data (Art. 18 GDPR).
• —Right to data portability: you have the right to receive your data in a structured, commonly used and machine-readable format (Art. 20 GDPR).
• —Right to object: you can object to the processing of your data on the basis of our legitimate interests (Art. 21 GDPR).

We may ask you to verify your identity before processing your request, to prevent data from being disclosed to the wrong person.

If you believe that we are not processing your personal data correctly, you have the right to file a complaint with the Dutch supervisory authority:

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, unwanted disclosure and unauthorised modification. Our website is secured with HTTPS encryption (TLS). Access to contact messages is restricted to the data controller only.

This website does not place third-party tracking cookies and does not use third-party analytics services (such as Google Analytics). Instead, we use our own cookieless statistics: we count page visits and clicks without placing a cookie on your device as a visitor.

To avoid counting the same visitor twice, we calculate a daily-rotating, encrypted code based on your IP address and browser type. This code changes automatically every day and cannot be traced back to you as an individual; we do not store IP addresses ourselves. This measurement records, among other things: which page was visited, which website you came from (only the domain, not the full link), your country, device type (mobile/tablet/desktop) and language preference.

The admin section of the website (accessible only to the website administrator) uses one technically necessary session cookie to stay logged in. This cookie is not placed for regular visitors.

Because we do not place a cookie on your device for this statistics measurement, no consent via a cookie banner is required for it.

We do not use automated decision-making or profiling based on your personal data.

We may periodically update this privacy policy, for example due to changes in our services or new legislation. The most current version is always available on this page. In the event of material changes that affect the way we process your data, we will announce this on our website.

Date of last update: July 2026