Privacy Statement
Last updated: July 8, 2025
Data Controller Information
Daybreak Development
Email: hello@daybreakdevelopment.eu
Introduction
At Daybreak Development, we take your privacy seriously. This Privacy Statement explains how we collect, use, and protect your personal data when you visit our website, use our services, or work with us as a client. We comply with the General Data Protection Regulation (GDPR) and the Dutch implementation of privacy laws (UAVG).
What Personal Data We Collect
Contact and Communication Data:
- Name, email address, phone number, and company information
- Messages and correspondence through contact forms, email, or other communication channels
- Technical support requests and related communications
Website Usage Data—collected automatically and not humanly reviewed:
- IP address, browser type, device information, and operating system
- Pages visited
Client Service Data:
- Project specifications, requirements, and deliverables
- Payment information processed through secure third-party providers (Stripe, PayPal)
- Website hosting data including files, databases, and technical configurations
- Support tickets and maintenance records
How We Use Your Personal Data
Service Delivery (Legal Basis: Contract Performance):
- Providing web development, hosting, and support services
- Processing payments and managing client accounts
- Communicating about projects, technical issues, and service updates
Customer Support (Legal Basis: Legitimate Interest):
- Responding to inquiries and providing technical assistance
- Troubleshooting and resolving service issues
- Maintaining service quality and client satisfaction
Legal Compliance (Legal Basis: Legal Obligation):
- Maintaining financial records for tax purposes
- Complying with Dutch business and tax regulations
- Responding to legal requests and regulatory inquiries
Data Sharing and International Transfers
Third-Party Service Providers:
We work with trusted partners to deliver our services:
- Payment processors (Stripe, PayPal) for secure payment handling
- Cloud hosting providers for reliable infrastructure
- Communication tools for client collaboration and support
All third-party providers are carefully selected and bound by data processing agreements that ensure GDPR compliance.
International Transfers:
When serving international clients, we may transfer personal data outside the EU/EEA. We ensure appropriate safeguards through:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions for countries with equivalent protection levels
- Additional security measures for high-risk transfers
We never sell, rent, or otherwise commercialize your personal data.
Data Retention
We retain personal data only as long as necessary:
- Client project data: Duration of service plus 5 years for warranty and legal purposes
- Financial records: 7 years as required by Dutch tax law
- Website analytics: Maximum 24 months
- Contact inquiries: 2 years unless ongoing business relationship develops
Your Privacy Rights
Under GDPR and Dutch law, you have comprehensive rights regarding your personal data:
- Access Right: Request copies of personal data we hold about you
- Rectification Right: Correct inaccurate or incomplete information
- Erasure Right: Request deletion of your data (subject to legal retention requirements)
- Restriction Right: Limit processing in certain circumstances
- Portability Right: Receive your data in a structured, machine-readable format
- Objection Right: Object to processing based on legitimate interests
- Consent Withdrawal: Withdraw consent for marketing communications at any time
To exercise these rights, contact us at hello@daybreakdevelopment.eu. We will respond within one month and verify your identity before processing requests.
Data Security
We implement comprehensive security measures to protect your personal data:
- Encryption of data in transit and at rest
- Access controls limiting data access to authorized personnel only
- Regular security audits and vulnerability assessments
- Secure backup systems with geographic redundancy
- Staff training on data protection and security procedures
In the unlikely event of a data breach affecting your rights, we will notify the Dutch Data Protection Authority within 72 hours and inform affected individuals without undue delay.
Cookie Policy
Cookie Usage:
Our website does not use any form of cookies.
Contact and Complaints
Data Protection Questions:
Email: hello@daybreakdevelopment.eu
Response time: Within 5 business days
Supervisory Authority:
If you have concerns about our data processing practices, you can contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):
- Website: autoriteitpersoonsgegevens.nl
- Phone: 0900-2004-642
Updates to This Privacy Statement:
We may update this Privacy Statement to reflect changes in our practices or legal requirements. Material changes will be communicated through our website and, where appropriate, by email.