Overslaan naar de hoofd content

Thijs Cobben – Data Alchemist

Deze site is een provocatie aan de AVG, hier leest u waarom.

En zoals u in de privacy policy kunt lezen, maken we gebruik van zogenaamde functionele cookies: _ga en _ga_KGZW781RSR (Google Analytics). Als u dat niet wilt, mag u deze site per direct verlaten.

Privacy

Privacy policy

Last updated: 24 October 2026

In short: I only collect what I need to answer you, send you what you asked for, and keep this site running. I don’t sell your data, I don’t build profiles, and you can ask me at any time to see, correct or delete what I hold about you.

Questions? Write to info@thijscobben.nl.

Who is responsible

This website, thijscobben.nl, is run by Trip6 Holding BV, the company through which Thijs Cobben works as an independent trainer, consultant and coach. Trip6 Holding BV is the controller for the personal data described in this policy.

Contact for anything privacy-related: info@thijscobben.nl.

What I collect, and why

1. Speaking requests

When you invite me to speak via the form on the Talks page, I receive your name, email address, organisation, the talk you’re interested in, event details (name, date, location, audience, size, language) and your message.

  • Purpose: to reply to your request, send you a confirmation, and prepare a possible talk.
  • Legal basis: taking steps at your request before entering into an agreement (Art. 6(1)(b) GDPR).
  • Retention: up to two years after our last contact. If the request leads to an assignment, records needed for invoicing are kept for the seven years required by Dutch tax law.

2. Newsletter and free book

If you tick the newsletter box, or request the free History of Data chapter, I store your email address (and name, if you give it) to send you the book and occasional dispatches — the Data Alchemist Digest.

  • Legal basis: your consent (Art. 6(1)(a) GDPR). The box is never pre-ticked.
  • Withdrawing: every email has an unsubscribe link, or just email me. Withdrawing doesn’t affect anything sent before.
  • Retention: until you unsubscribe.

3. Booking a call

When you book a call, Calendly processes your name, email address, chosen time and any answers you give, so we can meet.

  • Legal basis: steps before an agreement (Art. 6(1)(b) GDPR).
  • Retention: as for speaking requests.

4. Email

If you email me directly, I keep the correspondence as long as needed to help you, and in any case no longer than two years after our last contact, unless it becomes part of an assignment.

5. Website statistics

This site uses Google Analytics 4 to understand which pages are read and how visitors find the site. Google Analytics places cookies (_ga and _ga_…, retained up to two years) and processes data such as your approximate location, device and browser, pages visited and an online identifier. I don’t use this to identify you, and I don’t share it for advertising.

  • Legal basis: legitimate interest in understanding and improving the site (Art. 6(1)(f) GDPR).
  • Opting out: block or delete cookies in your browser, or use Google’s opt-out browser add-on.

6. Security and hosting

Like every website, the server logs technical data such as IP addresses. Security plugins use these to block attacks and repeated failed log-in attempts.

  • Legal basis: legitimate interest in keeping the site secure (Art. 6(1)(f) GDPR).
  • Retention: short-lived logs, typically weeks rather than months.

7. Fonts

The site loads fonts from Google Fonts. To deliver them, your browser connects to Google’s servers, which receive your IP address.

Who else processes your data

I use a small number of service providers. Each processes data only on my behalf and under a data processing agreement or equivalent terms.

ProviderWhat forWhere
Brevo (Sendinblue SAS)Forms, contact list, confirmation emails, newsletterEU (France)
Strato AGWebsite hostingEU (Germany)
Google (Analytics, Fonts, Search Console)Site statistics, fonts, search performanceEU and USA
Calendly LLCBooking callsUSA

Where data goes to the USA, the transfer is covered by the EU–US Data Privacy Framework and/or the European Commission’s standard contractual clauses.

I never sell your data and never use it for automated decision-making or profiling.

Your rights

You have the right to:

  • see the personal data I hold about you;
  • have it corrected or deleted;
  • restrict or object to its processing;
  • receive it in a portable format;
  • withdraw consent at any time, where processing is based on consent.

Email info@thijscobben.nl and I’ll respond within one month. I may ask you to confirm your identity first.

If you believe I’m not handling your data properly, please tell me. You can also lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Security

The site runs over HTTPS, is protected by a firewall and log-in limits, and has a backup tool in place. Access to your data is limited to me.

Changes

I may update this policy when the site or the services I use change. The date at the top always shows the latest version.