Privacy policy
One form, one recipient, no sharing. This site collects personal data in exactly one place — the booking form — and what you type there goes to Marcel and nobody else.
Who is responsible
- Controller
- Marcel Harmsen
- Registered address
- Waterweg 125, 3731 HG De Bilt, Netherlands
- Chamber of Commerce (KVK)
- 30268698
- info@marcelharmsen.nl
- Telephone
- 06 22 41 31 94
There is no data protection officer. A one-person performing business is nowhere near the threshold that requires one.
What the booking form collects
Whatever you put in it:
- Your name, and your company if you give one
- Your email address
- The date of the event, the format you are after and the size of the audience — all optional
- What you write in the box about the occasion
Sent with it, automatically: the IP address the form was submitted from, your browser's user-agent string, and the time. Those three are kept because they are what tells a real enquiry apart from a spam run when one gets through the filters. Nothing else about your visit is recorded, and none of it is combined with anything else.
Why he is allowed to hold it
Article 6(1)(b) of the GDPR — steps taken at your request before entering into a contract. You asked about booking a show; he needs your details to answer. The IP address and user agent rest on Article 6(1)(f), the legitimate interest in not having the form used as a spam relay.
Where it goes
Two places, both of them his:
- An email to info@marcelharmsen.nl, which he reads and answers himself.
- A file on this website's own server, written before the email is sent, so that an enquiry is not lost if the mail fails. It is stored outside the public part of the site and is not reachable from the web.
It is not sold, not shared with any other company, not used for a mailing list, and not sent outside the European Economic Area. The only third parties involved are the hosting provider that runs this server and the mail provider that carries the message, both of them acting as processors on instruction.
How long it is kept
- An enquiry that does not lead to a booking: 24 months, then deleted. Event planning runs on long cycles and the same person often comes back a year later about the following year's conference.
- An enquiry that does lead to a booking: seven years from the end of that financial year, because Dutch tax law requires the records behind an invoice to be retained for that long.
What else the site does
Very little, and the cookie policy covers it in full. In short: no analytics, no advertising, no tracking, no hosted fonts, no social widgets, and nothing loaded from YouTube until you press play on a film. One session cookie, set only if you open the booking page, holding a random security token and nothing about you.
The web server keeps ordinary access logs — page, time, IP address, user agent — for a short period, as every web server does, for security and fault-finding.
Your rights
Under the GDPR you can ask for a copy of what is held about you, ask for it to be corrected or deleted, ask for its use to be restricted, object to it being held at all, or ask for it in a portable form. Write to info@marcelharmsen.nl or call 06 22 41 31 94. You'll get an answer within a month, and it costs nothing.
There is no automated decision-making and no profiling here. A person reads every enquiry, which is rather the point of the business.
If you are not satisfied
Say so first — it's one person and it's usually a misunderstanding. If that does not settle it, you have the right to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl.
Changes
If what the site does changes, this page changes with it and the date below changes too. There is no mailing list to notify, because there is no mailing list.
Last reviewed 4 August 2026.