Privacy policy

Last updated: 28 August 2026

Who I am

Bart Knijnenberg, operating as an independent Fractional CMO. Based in Valencia, Spain. Website: bartknijnenberg.com Contact: info@bartknijnenberg.com

In this privacy policy, I explain which personal data I collect, why, and what your rights are. I keep it short and understandable, no legal jargon where it's not needed.

What data I collect

1. Contact form & email

When you send me a message via the contact form or email:

• Name
• Email address
• Content of your message

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR), to respond to your enquiry. Retention period: For the duration of the business relationship, plus a maximum of 2 years after last contact.

2. Appointment scheduling (Cal.com)

When you schedule a meeting via Cal.com:

• Name
• Email address
• Selected date and time
• Any notes you add

Processor: Cal.com, Inc. (US), processing under Standard Contractual Clauses (SCCs). Legal basis: Performance of a contract (Art. 6(1)(b) GDPR), to schedule the appointment. Retention period: As long as needed for the appointment and follow-up, maximum 1 year.

3. Website analytics (Google Analytics 4)

I use Google Analytics 4 to understand how visitors use my website. This includes:

• Anonymised visitor data (page views, session duration, bounce rate)
• Device type, browser, operating system
• Estimated location (country/region, not street level)
• Referral source (how you arrived at the site)

IP anonymisation: GA4 anonymises IP addresses by default, I do not store full IP addresses. Processor: Google LLC (US), processing under SCCs and the EU-US Data Privacy Framework. Legal basis: Consent (Art. 6(1)(a) GDPR), via the cookie banner. Retention period: 14 months (default GA4 setting).

Google Analytics Tracking ID: G-15HVWY94ZH

I do not use Google Tag Manager. GA4 is loaded directly, and only after you have given consent, so that what gets sent is visible per event.

4. Email communication

When you send me an email at info@bartknijnenberg.com:

• Your email address and name
• Content of the message

Email forwarding: Incoming emails are forwarded via ImprovMX to my Gmail account. ImprovMX does not store emails long-term, it functions as a relay. Processors: ImprovMX (FR) and Google LLC (US, Gmail). Legal basis: Legitimate interest (Art. 6(1)(f) GDPR).

5. LinkedIn and social media

If you follow me or send messages via LinkedIn, that platform's privacy terms apply. I do not process personal data from LinkedIn outside the platform, unless you give explicit consent (e.g., if you send me your contact details for a collaboration).

6. Business lead generation (B2B)

For business purposes, I collect publicly available company information from B2B contacts:

• Company name and website
• Job title
• Business email address (via publicly available sources)

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR), for B2B marketing and acquisition. Balancing test: I only process business contact data of individuals in relevant decision-making roles. You can opt out at any time. Retention period: Maximum 1 year after last interaction. Upon objection: immediate deletion.

Cookies and tracking

Necessary cookies

The cookie banner stores your choice in a single cookie, `cc_consent`, which lasts 365 days. It is needed to remember that you made a choice, and therefore does not require consent. Beyond that the website sets no cookies of its own: it consists of static files, with no sessions and no accounts.

Analytical cookies

Google Analytics 4 places cookies to measure website usage. These are only placed after your consent via the cookie banner.

Marketing cookies

I currently use no marketing or retargeting cookies.

Cookie banner

On your first visit, you can choose via the cookie banner:

• Accept: Analytical cookies will be placed.
• Decline: Only necessary cookies will be placed.

You can change your choice at any time via Cookie settings at the bottom of every page. That link reopens the same banner, so withdrawing consent is as easy as giving it (GDPR Article 7(3)).

Processors (sub-processors)

Your rights (GDPR)

You have the following rights regarding your personal data:

1. Right of access: Request which data I hold about you.
2. Right to rectification: Have incorrect data corrected.
3. Right to erasure: Request deletion of your data.
4. Right to restriction: Temporarily halt processing.
5. Right to data portability: Receive your data in a common format.
6. Right to object: Object to processing based on legitimate interest.
7. Right to withdraw consent: Where processing is based on consent (e.g., cookies).

How to exercise these rights?

Send an email to info@bartknijnenberg.com with your request. I will respond within 30 days.

Filing a complaint

If you believe I am not handling your data carefully, you can file a complaint with:

• Agencia Espanola de Proteccion de Datos (AEPD): aepd.es
• Or the supervisory authority in your own country.

Security

I take appropriate technical and organisational measures to protect your personal data, including:

• HTTPS/TLS encryption across the entire website
• Access restriction to personal data (only I have access)
• Regular review of processors and their security measures
• No storage of passwords or financial data

Changes

I may update this privacy policy. The date at the top indicates when the last change was made. In case of substantial changes that affect your rights, I will communicate this clearly.

Contact

Questions about this privacy policy? Get in touch:

Bart Knijnenberg info@bartknijnenberg.com bartknijnenberg.com Valencia, Spain