Privacy policy

This website runs no advertising and no tracking pixels, and sets no cookies of its own. It measures its own loading speed and counts visits, anonymously and without cookies, so that the performance it promises can be checked against what real visitors experience. We process personal data in exactly two situations: when you book a consultation through the embedded scheduler, and when you email us. A page made privately for one brand also notes when its video is watched (section 6). That's it. The details below exist because the law, rightly, asks us to spell them out.

The controller responsible for data processing on this website is:

fioel (KVK 42176961; registered details on the legal page)
Eifel 12, 1567 KD Assendelft, The Netherlands
Email: contact@fioel.com

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you visit the site, the hosting infrastructure automatically processes technical data that your browser transmits, IP address, date and time of the request, the page requested, browser type and operating system, in server logs, for the purpose of delivering the site securely and reliably.

Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in providing a secure, functioning website). Log data is not merged with other data sources and is retained for a limited period before deletion. Data processing takes place on the basis of Vercel’s data processing agreement pursuant to Art. 28 GDPR; transfers to the United States are safeguarded by the EU-US Data Privacy Framework and EU standard contractual clauses. See Vercel’s privacy policy for details.

To book a consultation, this site embeds the scheduling tool of Cal.com, Inc., 2261 Market Street #4382, San Francisco, CA 94114, USA. The scheduler loads only on the booking section of the page. When you use it, Cal.com processes the data you enter, typically your name, email address, the time slot you select, your time zone and any optional message, for the purpose of arranging and confirming the appointment. Technical data (such as your IP address) is processed by Cal.com when the embedded scheduler loads.

Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract, taken at your request). Cal.com acts as our processor; data may be processed in the United States, safeguarded by EU standard contractual clauses. See Cal.com's privacy policy for details. Booking data is retained for as long as needed to conduct the consultation and any engagement that follows from it.

If you email us, we process your email address, the contents of your message and any data you choose to include, for the purpose of handling your enquiry. Legal basis: Art. 6(1)(b) GDPR where your enquiry relates to a potential engagement, otherwise Art. 6(1)(f) GDPR (our legitimate interest in answering correspondence). Our email is hosted on Google Workspace, provided to customers in the EEA by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Google acts as a processor, and any processing in the United States is safeguarded under the EU-US Data Privacy Framework. Emails are retained as long as required to handle the enquiry and any statutory retention periods.

This site no longer offers an AI chat. Nothing you read or type on this site is sent to an AI provider.

Every page reports its own loading performance to Vercel Speed Insights (Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA), operated as a processor on our behalf. What is sent is the page address, the loading measurements themselves (Largest Contentful Paint, Cumulative Layout Shift, Interaction to Next Paint), and coarse technical context such as browser, device type and country. No cookies are set, no identifier is stored on your device, and individual visitors are not profiled or followed between visits. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in knowing whether the site performs for real visitors as promised; this is measurement of our own delivery, not audience analytics. Transfers to the United States are safeguarded by the EU-US Data Privacy Framework and the Standard Contractual Clauses.

Visits are counted with Vercel Web Analytics, on the same terms: which page was seen, the referring site, country, browser and device type, with no cookies and no identifier stored on your device. When you arrive through a link with campaign tags (such as utm_source, from one of our posts or ads), those tags, the page, the referring site and your country are also written once to our own database, again with nothing that identifies you. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in knowing which pages and campaigns bring visitors.

Some pages are made privately for one brand, at an address that is not listed anywhere, and hold a short video about that brand's shop. On those pages only, we note when the page is opened, when its video is played and how far, and when its booking or prototype link is used, together with the country. No cookie is set and nothing that identifies the person watching is stored; the note belongs to the brand the page was made for. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in knowing whether a message we sent was seen. Kept twelve months.

This website itself sets no cookies and uses no tracking or fingerprinting technologies. The embedded Cal.com scheduler may set technically necessary cookies or use local storage strictly to provide the booking function when you interact with it. No consent banner is required for technically necessary storage; we use nothing beyond that.

All fonts, images and the opening film are self-hosted. No requests are sent to Google Fonts or other third-party content delivery networks when the site loads. The only third-party connection this site initiates is to Cal.com on the booking section, as described above.

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15),
• rectification of inaccurate data (Art. 16),
• erasure (Art. 17) and restriction of processing (Art. 18),
• data portability (Art. 20),
• object to processing based on legitimate interests (Art. 21),
• withdraw any consent at any time with effect for the future (Art. 7(3)).

To exercise any of these rights, email contact@fioel.com. You also have the right to lodge a complaint with a supervisory authority, in the Netherlands, the Autoriteit Persoonsgegevens.

This website is served exclusively over TLS-encrypted connections (HTTPS). We apply reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access.

We update this policy when the website's functionality changes. The date at the top of this page is the date of the current version.