Privacy Notice

Last updated: 10 July 2026

This notice explains how Casati Consulting (“we”, “us”) handles the personal data you choose to share with us through this website. We keep data collection to the minimum needed to reply to you, and we treat what you send us in confidence.

Who is responsible for your data

The data controller is Casati Consulting, the sole proprietorship (eenmanszaak) of Tatiana Adele Casati, established in Alkmaar, the Netherlands. Our Chamber of Commerce registration number is KvK 42112451. You can reach us about anything in this notice at tatiana@casaticonsulting.nl.

What we collect, and why

When you use the enquiry form, we collect the details you enter: your name, your email address, your company (if provided) and the content of your message. We use these solely to respond to your enquiry and to correspond with you about it.

Our lawful basis for this is our legitimate interest in receiving and responding to business enquiries and corresponding with you about our services (Article 6(1)(f) GDPR). Where your enquiry is a step towards possibly working together, we also rely on the need to take steps at your request before entering into a contract (Article 6(1)(b) GDPR). You can object to this processing, or ask us to delete your data, at any time by emailing us.

How your enquiry is sent

When you submit the form, your message is processed by Formspree, which delivers it to us by email and keeps a copy in our account. Spam is filtered by Cloudflare Turnstile, an anti-bot check that runs when you submit the form. Your enquiry then arrives in our inbox, which is provided by Google Workspace. Formspree, Cloudflare and Google each act as our processor under a data processing agreement, handling your submission only on our instructions.

Because these providers are based in or operate from the United States, your submission may be transferred outside the European Economic Area. That transfer is covered by appropriate safeguards, principally the European Commission’s Standard Contractual Clauses, and, where applicable, the EU–U.S. Data Privacy Framework. You can read more in the providers’ notices, and request a copy of the safeguards from us: Formspree, Cloudflare and Google.

Hosting

This site is hosted on Cloudflare Pages. To deliver and secure the site, Cloudflare processes limited technical data such as your IP address in its server logs. As above, any transfer of that data outside the European Economic Area is covered by Standard Contractual Clauses and, where applicable, the EU–U.S. Data Privacy Framework.

Cookies

This site sets no analytics or advertising cookies, and our own code stores nothing on your device. Fonts and other assets are served from our own domain, so simply viewing the site sends nothing to third-party font or tracking services. When you submit the enquiry form, Cloudflare Turnstile may place a strictly necessary token on your device for the sole purpose of telling humans apart from bots. Because we use no tracking or other non-essential cookies, no cookie-consent banner is needed.

How long we keep it

If your enquiry doesn’t lead to us working together, we keep the correspondence for up to 12 months after our last contact about it, then delete it, including the copy held by Formspree. If it does lead to a working relationship, we keep it for as long as that relationship needs, plus any period we are legally required to retain records.

Your rights

Under the GDPR you have the right to access, correct, delete or restrict the processing of your personal data, to object to processing, and to data portability. To exercise any of these, email tatiana@casaticonsulting.nl. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes to this notice

We may update this notice from time to time. The date at the top shows when it last changed.

Return home