Privacy notice

Last updated September 20, 2026

I’m Maarten van Loon, based in Utrecht, Netherlands. I’m responsible for how personal information is used through this CV website. For privacy questions or requests, contact me through the contact form or LinkedIn.

When you contact me

The form asks for your email address and message so I can receive your inquiry and respond. Please avoid including sensitive information that isn’t needed for our conversation. These fields are required to send a message; you can browse my CV without submitting them.

I use this information to handle your inquiry and any related conversation, not to subscribe you to marketing emails. My basis for handling general inquiries is my legitimate interest in responding to people who contact me. Where your request concerns entering into a contract, processing may instead be necessary to take steps at your request before that contract.

Services involved

Resend delivers your message to my Gmail inbox, where I receive and reply to it. My website hosting provider and Cloudflare provide the infrastructure that keeps this site available. Hosting and email providers may process technical information, such as IP addresses, request times, browser details, and delivery logs, to operate and secure their services.

Cloudflare Turnstile checks browser and connection signals to help prevent automated abuse. The site also stores a protected identifier derived from your email address, submission counts, and expiry times to limit repeated submissions. This identifier is pseudonymous, not anonymous. The counter database does not store your message or plain-text email address.

These providers may process information outside the European Economic Area. Their privacy information explains their processing and applicable transfer safeguards: email delivery, email inbox, website hosting, and spam protection.

How long information is kept

I delete contact-form messages and related replies from my inbox within six months after the conversation ends.

Email-based submission counters expire after 15 minutes, and the shared site counter expires after one hour. Expired records are removed during the next CAPTCHA-verified submission, so they may remain stored longer when the form is inactive. Provider logs and backups follow the respective providers’ retention arrangements.

Your choices and rights

You can ask me for access to your information, to correct or delete it, or to restrict its use. You can object to processing based on legitimate interests and request portability where applicable. These rights depend on the circumstances; I may need to verify your identity before responding.

You can also complain to your local data protection authority, including the Dutch Autoriteit Persoonsgegevens.