Privacy Policy

Last updated: 23 June 2026

This Privacy Policy explains how Hipsdynam.ddd ("we", "us", "our") collects, uses, stores, and protects personal data when you visit our website or contact us. Our data controller is established in Amsterdam, the Netherlands.

We process personal data in accordance with applicable legislation, including:

• the General Data Protection Regulation (EU) 2016/679 (GDPR), as applied in the Netherlands through the Algemene verordening gegevensbescherming (AVG);
• the Uitvoeringswet Algemene verordening gegevensbescherming (UAVG);
• the Telecommunicatiewet (including rules on cookies and electronic communications);
• the Telecomwet where relevant to electronic communication services;
• guidance and decisions of the Autoriteit Persoonsgegevens (AP), the Dutch Data Protection Authority.

This policy fulfils our information obligations under Articles 13 and 14 GDPR (AVG). Please read it together with our Cookie Policy and Terms of Use.

1. Data Controller and Contact

The data controller (verwerkingsverantwoordelijke) responsible for your personal data is:

Hipsdynam.ddd
Frederiksplein 8, 1017 XM Amsterdam
Netherlands
Email: support@hipsdynam.world
Phone: +31 643 866 739

Data Protection Officer (DPO): We are not required to appoint a DPO under Article 37 GDPR / UAVG. All data protection enquiries are handled directly by the data controller using the contact details above.

Response time: We respond to data subject requests without undue delay and in any event within one month of receipt, as required by Article 12 GDPR. That period may be extended by two further months where necessary; we will inform you of any extension and the reasons.

2. Supervisory Authority

If you believe we have processed your personal data unlawfully, you have the right to lodge a complaint with the Dutch supervisory authority:

Autoriteit Persoonsgegevens (AP)
Bezuidenhoutseweg 30, 2594 AV Den Haag
Netherlands
Website: autoriteitpersoonsgegevens.nl
Complaint portal: Submit a complaint to the AP

You may also contact a supervisory authority in another EU/EEA member state if you live or work there.

3. Personal Data We Collect and Sources

We may collect the following categories of personal data:

• Contact and identity data: name, email address, and message content when you submit our contact form — provided directly by you;
• Technical and usage data: IP address, browser type and version, operating system, device identifiers, referring URL, pages visited, date and time of access — collected automatically when you use the website;
• Cookie and consent data: your cookie preferences and, if consented, analytics or marketing identifiers — collected via our cookie banner and related technologies (see Cookie Policy);
• Communication records: copies of correspondence we maintain to respond to your enquiries — created when you contact us.

We do not intentionally collect special categories of personal data under Article 9 GDPR (such as health data). Please do not include medical or health information in contact messages. We do not use automated decision-making or profiling within the meaning of Article 22 GDPR.

Provision of data: You are not legally or contractually obliged to provide personal data to browse this website. Contact form fields marked as required are necessary for us to respond to your message; without them we cannot process your enquiry.

4. Purposes, Legal Bases, and Retention

We process personal data only where a legal basis under Article 6 GDPR applies:

Purpose	Legal basis	Retention period
Responding to contact form enquiries and follow-up correspondence	Art. 6(1)(b) GDPR — steps at your request prior to a potential contract; Art. 6(1)(f) — legitimate interest in handling communications	Up to 24 months after last contact, unless a longer period is required for legal claims
Website operation, security, abuse prevention, and server log analysis	Art. 6(1)(f) GDPR — legitimate interest in secure and stable operation of our website	Server logs: up to 90 days, unless needed for incident investigation
Storing cookie consent preferences	Art. 6(1)(c) GDPR — compliance with Telecommunicatiewet / Art. 6(1)(f) — proof of consent	Up to 12 months
Strictly necessary cookies and local storage	Art. 6(1)(f) GDPR — legitimate interest in essential site functionality	Session or up to 12 months (see Cookie Policy)
Analytics cookies (only if you consent)	Art. 6(1)(a) GDPR — consent	Per provider settings, maximum 26 months
Marketing cookies (only if you consent)	Art. 6(1)(a) GDPR — consent	Per provider settings, maximum 13 months
Compliance with legal obligations (e.g. responding to authority requests)	Art. 6(1)(c) GDPR — legal obligation	As required by applicable Dutch or EU law

Legitimate interests (Art. 6(1)(f)): Where we rely on legitimate interests, we have assessed that our interests in operating a secure website and responding to enquiries are not overridden by your rights and freedoms. You may object to such processing under Article 21 GDPR (see Section 8).

After the retention period expires, personal data is deleted or anonymised unless statutory retention obligations under Dutch law require longer storage.

5. Recipients and Processors

We do not sell personal data. We may share personal data with the following categories of recipients:

• Hosting and infrastructure providers (EU/EEA or adequacy countries) that store and deliver our website;
• Analytics and advertising providers (e.g. Google, Meta) — only if you have given consent via our cookie banner;
• Email and communication tools used to process contact enquiries;
• Professional advisers (legal, technical) bound by confidentiality where necessary;
• Public authorities (including the AP, courts, or law enforcement) when required by Dutch or EU law.

Processors (verwerkers) act only on our documented instructions under Article 28 GDPR and are bound by data processing agreements that meet AVG/UAVG requirements, including appropriate security measures and sub-processor rules.

6. International Transfers

We prefer to process personal data within the EU/EEA. Where data is transferred to countries without an EU adequacy decision (e.g. the United States), we implement appropriate safeguards as required by Chapter V GDPR, including:

• Standard Contractual Clauses (SCCs) adopted by the European Commission (2021 modules);
• supplementary measures where required following Schrems II case law and AP guidance;
• transfers only where necessary and proportionate to the stated purpose.

You may request a copy of relevant safeguards by contacting us at support@hipsdynam.world.

7. Your Rights Under the AVG/GDPR

Under the AVG (GDPR), you have the following rights in relation to your personal data:

• Right of access (Art. 15) — obtain confirmation and a copy of your data;
• Right to rectification (Art. 16) — correct inaccurate or incomplete data;
• Right to erasure (Art. 17) — request deletion in certain circumstances;
• Right to restriction of processing (Art. 18) — limit how we use your data in specific situations;
• Right to data portability (Art. 20) — receive data you provided in a structured, machine-readable format where processing is based on consent or contract and carried out by automated means;
• Right to object (Art. 21) — object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent (Art. 7(3)) — withdraw consent at any time where processing is consent-based, without affecting the lawfulness of processing before withdrawal;
• Right not to be subject to automated decision-making (Art. 22) — we do not use such processing on this website.

To exercise your rights, email support@hipsdynam.world or use our contact form. We may request reasonable information to verify your identity before responding. Exercising your rights is free of charge, unless requests are manifestly unfounded or excessive (Art. 12(5) GDPR).

8. Data Security and Breach Notification

We implement appropriate technical and organisational measures under Article 32 GDPR / UAVG, including:

• HTTPS/TLS encryption for data in transit;
• access controls and least-privilege principles for systems holding personal data;
• regular review of security practices and processor compliance;
• confidentiality obligations for anyone with access to personal data.

No method of transmission or storage is completely secure. In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the Autoriteit Persoonsgegevens within 72 hours where required by Article 33 GDPR, and inform affected data subjects without undue delay where required by Article 34 GDPR.

9. Direct Marketing and Electronic Communications

We do not send unsolicited marketing emails. If you contact us voluntarily, we may reply to your enquiry. Any future newsletter or marketing communication would require your explicit consent in accordance with the Telecommunicatiewet and Article 6(1)(a) GDPR. You may opt out of marketing at any time using the unsubscribe method provided or by contacting us.

10. Online Advertising and Measurement

This website may be promoted through online advertising platforms (including Google Ads). If you arrive via an advertisement, the landing page content matches the ad topic: free educational information about daily movement habits in the Netherlands.

With your cookie consent, we or our partners may use analytics and advertising technologies to measure visits and campaign performance. This processing is based on your consent (Art. 6(1)(a) GDPR) and is managed through our cookie banner with Google Consent Mode v2. We do not use advertising cookies without consent. See our Cookie Policy.

We do not collect health data for advertising purposes and do not create health-related audience segments.

11. Children

This website is not directed at children under 16 years of age (the minimum age for consent to information society services under Article 8 GDPR as implemented in the Netherlands). We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in law, AP guidance, or our processing activities. The "Last updated" date at the top indicates the latest revision. Where changes materially affect your rights, we will provide additional notice where appropriate (for example, a notice on the website).

13. Contact

For privacy-related questions or to exercise your rights: support@hipsdynam.world or our contact form.