Privacy policy

Last updated: 27 October 2026

Who is responsible

This website, thijscobben.nl, is run by Trip6 Holding BV, the company through which Thijs Cobben works as an independent trainer, consultant and coach. Trip6 Holding BV is the controller for the personal data described in this policy.

Contact for anything privacy-related: info@thijscobben.nl.

What I collect, and why

1. Speaking requests

When you invite me to speak via the form on the Talks page, I receive your name, email address, organisation, the talk you’re interested in, event details (name, date, location, audience, size, language) and your message. These details are stored in my Brevo account, which sends you an automatic confirmation and notifies me.

• Purpose: to reply to your request, send you a confirmation, and prepare a possible talk.
• Legal basis: taking steps at your request before entering into an agreement (Art. 6(1)(b) GDPR).
• Retention: up to two years after our last contact. If the request leads to an assignment, records needed for invoicing are kept for the seven years required by Dutch tax law.

2. Requesting the free book

When you request the free edition of History of Data on the Book page, I receive your first name and email address. They are stored in my Brevo account, in a list of book requests. Brevo sends you an automatic confirmation and notifies me; I then send you the book myself.

• Purpose: to send you the book you asked for, and to answer if you reply.
• Legal basis: performing your request (Art. 6(1)(b) GDPR). Requesting the book does not sign you up for the newsletter.
• Retention: up to two years after the request, so I can send you a corrected version if needed. Ask me and I delete it sooner.

3. Newsletter

Only if you tick the newsletter box (on the Book or Talks page) do I add your email address and first name to my newsletter list in Brevo, to send you occasional dispatches on data patterns and war stories.

• Legal basis: your consent (Art. 6(1)(a) GDPR). The box is never pre-ticked.
• Measurement: Brevo records whether a newsletter is opened and which links are clicked, so I can see what is read. I use this only in aggregate.
• Withdrawing: every newsletter has an unsubscribe link, or just email me. Withdrawing doesn’t affect anything sent before.
• Retention: until you unsubscribe.

4. Booking a call

When you book a call, Calendly processes your name, email address, chosen time and any answers you give, so we can meet.

• Legal basis: steps before an agreement (Art. 6(1)(b) GDPR).
• Retention: as for speaking requests.

5. Email

If you email me directly, I keep the correspondence as long as needed to help you, and in any case no longer than two years after our last contact, unless it becomes part of an assignment.

6. Website statistics

This site uses Google Analytics 4 to understand which pages are read and how visitors find the site. Google Analytics places cookies (_ga and _ga_…, retained up to two years) and processes data such as your approximate location, device and browser, pages visited and an online identifier. I don’t use this to identify you, and I don’t share it for advertising.

• Legal basis: legitimate interest in understanding and improving the site (Art. 6(1)(f) GDPR).
• Your browser decides: this site uses Google Consent Mode. If your browser sends a Global Privacy Control or Do Not Track signal, Google Analytics sets no cookies. The site records that choice in small wp_consent_… cookies.
• Opting out: block or delete cookies in your browser, or use Google’s opt-out browser add-on.

7. Security and hosting

Like every website, the server logs technical data such as IP addresses. Security plugins use these to block attacks and repeated failed log-in attempts.

• Legal basis: legitimate interest in keeping the site secure (Art. 6(1)(f) GDPR).
• Retention: short-lived logs, typically weeks rather than months.

8. Fonts

The site loads fonts from Google Fonts. To deliver them, your browser connects to Google’s servers, which receive your IP address.

Who else processes your data

I use a small number of service providers. Each processes data only on my behalf and under a data processing agreement or equivalent terms.

Where data goes to the USA, the transfer is covered by the EU–US Data Privacy Framework and/or the European Commission’s standard contractual clauses.

I never sell your data and never use it for automated decision-making or profiling.

Your rights

You have the right to:

• see the personal data I hold about you;
• have it corrected or deleted;
• restrict or object to its processing;
• receive it in a portable format;
• withdraw consent at any time, where processing is based on consent.

Email info@thijscobben.nl and I’ll respond within one month. I may ask you to confirm your identity first.

If you believe I’m not handling your data properly, please tell me. You can also lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Security

The site runs over HTTPS, is protected by a firewall and log-in limits, and has a backup tool in place. Access to your data is limited to me.

Changes

I may update this policy when the site or the services I use change. The date at the top always shows the latest version.