Privacy policy

Portara (“we”, “us”) is the controller for personal data processed through this website and through our own sales and support channels. We operate as a vennootschap onder firma (general partnership, “VOF”) under Dutch law, based in Eindhoven, the Netherlands.

Contact: team@portaragroup.com. WhatsApp: +31 6 85191268.

KvK (Chamber of Commerce) number: 96067500. VAT/btw identification number: NL867455664B01. Legal form: vennootschap onder firma (general partnership). Visiting address: Philitelaan 67-177, 5617 AM Eindhoven, the Netherlands. Partners (vennoten): Diego Mercado Alzamora and Destina Nadiroglu.

For websites we build and host for clients, the client is the controller of visitor and customer data on that website. Portara then acts as a processor under Article 28 AVG. That relationship is set out in the client agreement, not in this statement.

We only collect data we need to respond to you and run the studio:

• Contact form: name, email, business name, current website (optional), project type and your message.
• Email: whatever you send to team@portaragroup.com, including attachments.
• WhatsApp: your phone number, display name and the content of messages or voice notes you send us.
• Proposals and contracts: billing details, KvK/VAT numbers you provide, and project notes needed to quote and deliver.
• Technical data: standard server logs (IP address, browser, requested URL, time) generated when you visit this site.

The contact form currently runs in your browser and does not post to a third-party form service. We receive enquiries when you email us or message us on WhatsApp. If we later connect the form to email or a CRM, this statement will be updated first.

Under the Algemene Verordening Gegevensbescherming (AVG / GDPR) we need a legal basis for each use:

• Responding to enquiries and sending a proposal — Article 6(1)(b) AVG (steps prior to a contract) and, where you contact us as a business, Article 6(1)(f) (legitimate interest in answering B2B requests).
• Performing an agreement (design, build, hosting, support, invoicing) — Article 6(1)(b).
• Legal obligations such as tax records under Dutch law — Article 6(1)(c). Invoices are kept for the statutory term (generally 7 years).
• Business administration and defending our rights — Article 6(1)(f).
• Non-essential cookies or marketing — only with consent, Article 6(1)(a) AVG and Article 11.7a of the Telecommunicatiewet. We do not currently set marketing or analytics cookies on this website.

Dutch cookie rules sit in Article 11.7a of the Telecommunicatiewet, alongside the AVG. Strictly necessary storage (for example a session needed to show the site) does not require prior consent. Tracking, advertising and most analytics do.

This Portara website does not load Google Analytics, advertising pixels or other tracking cookies. We therefore do not show a cookie banner: there is nothing non-essential to accept or refuse. If that changes, we will add a banner with equally prominent Accept and Reject options, and no tracker will fire before a choice.

The site loads fonts from Google Fonts. Your browser may contact Google’s servers to fetch those files; Google can see your IP address. That is a third-party request, not a cookie we set. You can block third-party requests in your browser if you prefer.

We do not sell personal data. We share it only with parties that help us operate:

• WhatsApp / Meta: if you message +31 6 85191268, Meta Platforms Ireland Limited processes that conversation under WhatsApp’s own terms. We cannot control WhatsApp’s retention on their side.
• Email and hosting providers that store our mailbox and this website. We choose EU-based providers where practical.
• Accountants, banks and payment providers for invoicing.
• Authorities if Dutch law requires it.

Where a party processes personal data for us as a processor, we put a verwerkersovereenkomst (Article 28 AVG) in place.

WhatsApp/Meta and Google Fonts may process data in the United States. Where we rely on a US provider, we do so on an approved transfer mechanism under Chapter V AVG (typically the EU–US Data Privacy Framework where the importer is certified, otherwise Standard Contractual Clauses).

• Unsuccessful enquiries: up to 12 months after the last contact, unless you ask us to delete sooner.
• Client files needed to deliver and support a project: for the contract term plus a reasonable winding-up period.
• Invoices and tax records: 7 years (Dutch tax law).
• Server logs: typically no longer than 30 days.

You can request access, rectification, erasure, restriction, objection and data portability, as set out in Articles 12–22 AVG. You may also withdraw consent where processing is based on consent, without affecting earlier lawful processing.

Email team@portaragroup.com and we will respond within one month, as Article 12 AVG requires.

You may lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens. We would rather fix the issue with you first.

We use HTTPS, access control on our tools, and backups for client sites we host. No method of transmission is perfectly secure; we take measures appropriate to a small studio under Article 32 AVG.

If we start using analytics, a form processor or a newsletter tool, we will update this page and, where the AVG requires it, ask for consent. The date at the top is the publication date of this version.

This statement is written to match how this website actually works and typical AVG/AP expectations for a Dutch web studio. It is not legal advice.