Privacy policy
1. Controller
The controller for data processing on this website is Maxime Doucet, trading as "Gmax Media", Sophiaweg 500, A242, 6523 NJ Nijmegen, the Netherlands. Phone: +33 6 64 53 78 21. Email: info@gmaxweb.com.
2. Hosting and server log files
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the website, Vercel automatically stores access data (IP address, date and time, requested file, browser type) in server log files. This may involve a transfer to the USA. The legal basis is our legitimate interest in running the website securely and without disruption (Article 6(1)(f) GDPR).
3. Content loaded from third-party servers
The website concept demos under /concepts/ load fonts from Google Fonts (Google Ireland Limited, Google LLC). When you open one of these demos, your browser sends your IP address to Google. The concept demos under /concepts/flooring/ and /concepts/pilates/ also load program code from jsDelivr (cdn.jsdelivr.net), as does an older, non-indexed page version under /mobile/a/; your browser then also sends your IP address to jsDelivr.
4. Web analytics
4.1 Vercel Web Analytics
We count visits with Vercel Web Analytics, a service of our hosting provider Vercel Inc. (address in section 2). On every page view your browser loads a script from our own domain and sends the address of the page and the referring page to Vercel. The script sets no cookies and stores nothing in your browser's storage (local storage, session storage). Only aggregated values are evaluated: pages viewed, referring website, country, device type, browser and operating system. According to Vercel, visitors are not recognised by cookies but by a hash value created from the request, which expires after 24 hours; recognising a visitor across days or across other websites is therefore not possible. Vercel Web Analytics runs without your consent, including when you decline cookies. Data may be transferred to the USA in the process (section 2). The legal basis is our legitimate interest in measuring how the website is used (Article 6(1)(f) GDPR). You can object to this processing (section 10).
4.2 Google Analytics 4 (only with your consent)
With your consent we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics counts visits, page views, the approximate origin (country, city) and the device type of visitors so that we can improve the website. For this, the cookies _ga and _ga_VNGQR3Q37Z are set (kept for up to 13 months). According to Google, Google Analytics 4 does not store IP addresses. Google Signals and personalised advertising are switched off.
Google Analytics is only loaded after you choose "Accept" in the cookie notice. If you choose "Reject", no connection to Google is made. The legal basis is your consent (Article 6(1)(a) GDPR, Article 11.7a Telecommunicatiewet, Section 25(1) TDDDG). Data may be transferred to the USA.
You can withdraw your consent at any time with effect for the future, using the "Cookie settings" link at the bottom of every page or this button. After withdrawal the analytics cookies are deleted and the page reloads; from then on no data is sent to Google.
5. Information stored in your browser
So that the website can respect your choices, it stores in your browser:
- the cookie
gmax_consent: your cookie choice (selected categories), the time of the choice, a randomly generated consent ID and the language; kept for 182 days (about 6 months); - the local storage entry
gmax_lang: your chosen language; it stays until you clear your browser storage; - when you click a link within the website, a timestamp under the key
gmax-ptin session storage for the page transition; it is deleted when the next page loads.
6. Contact form
When you write to us using the contact form, we process the information you enter: your name (required), your email address or phone number (required), and if you wish your website and your message, plus the services, package and budget you select. The form also sends the type of enquiry, the page it was sent from and the language of the page. A field you cannot see helps us block automated spam.
Your information goes to a server function at Vercel (/api/preview, section 2), which forwards it by email to our inbox info@gmaxweb.com. Depending on the technical configuration, the function sends it via Resend (Resend, Inc., USA) or via FormSubmit (formsubmit.co). If the server function cannot forward your enquiry, your browser sends the same information directly to FormSubmit (formsubmit.co) so that your enquiry still arrives; FormSubmit then also receives your IP address. The server function does not store your information in a database; if a technical error occurs, it logs only the error message from the sending service. How long Resend or FormSubmit keep copies of the message is decided by those services; we have no influence on this.
We use your information to answer your enquiry and, where relevant, to prepare a quote. The legal basis is Article 6(1)(b) GDPR (steps taken at your request before entering into a contract) and Article 6(1)(f) GDPR (legitimate interest in answering enquiries). We need the required fields to be able to reply; without them the form cannot be sent. We keep enquiry emails for 14 days and then delete them, unless statutory retention obligations require longer storage (for example if the enquiry leads to an assignment).
7. Contact by email or phone
If you contact us by email or phone, we process the information you give us (for example name, email address, phone number, content of your enquiry) solely to deal with your request (Article 6(1)(b) and (f) GDPR). We keep enquiry emails for 14 days and then delete them, unless statutory retention obligations require longer storage (for example if the enquiry leads to an assignment).
8. Contact via WhatsApp
This website offers contact via WhatsApp. If you tap the WhatsApp button, you are taken to the WhatsApp app or website. It is operated by WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), a company of the Meta group. If a form enquiry fails to arrive, the page offers a WhatsApp link that fills in your form details as a draft message; it is only sent when you tap Send in WhatsApp yourself.
If you write to us on WhatsApp, we process the data you send (including your phone number and the content of the message) to deal with your enquiry (Article 6(1)(b) and (f) GDPR). At the same time, WhatsApp or Meta processes connection and usage data under its own responsibility; this may involve a transfer to the USA. We have no influence over this processing. Details: WhatsApp Privacy Policy (EEA).
If you prefer to avoid this, you can always reach us by phone or email as well (see the legal notice).
9. Recipients and transfers to third countries
Depending on how you use the website, recipients of your data are: Vercel Inc. (hosting, server function, web analytics; USA), Google Ireland Limited (only with consent; transfer to the USA possible), for the contact form, depending on the technical configuration, Resend, Inc. (USA) or FormSubmit (formsubmit.co), WhatsApp or Meta if you use WhatsApp, and Google (Google Fonts) and, for some demos, jsDelivr when you open a concept demo under /concepts/.
10. Your rights
You have the right of access, rectification, erasure, restriction of processing and data portability. You can withdraw any consent you have given at any time with effect for the future (Article 7(3) GDPR).
Right to object: where we process data on the basis of our legitimate interest (Article 6(1)(f) GDPR), you can object to this processing at any time on grounds relating to your particular situation (Article 21 GDPR). To do so, write to info@gmaxweb.com.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state where you live (Article 77 GDPR). The competent supervisory authority for Gmax Media is the Dutch Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
