This website is operated by Frank van de Koppel, based in Amsterdam, the Netherlands. As a natural person offering a personal portfolio site, Frank van de Koppel acts as the data controller for any personal data collected through this website.
Questions about this policy or your data can be directed to the contact form.
This is a personal portfolio website. It does not run advertising trackers, social media pixels, or any external font services. It uses a self-hosted, cookieless analytics tool to understand how the site is used — no data leaves this server. The table below covers data processing that happens automatically. Some pages also include optional third-party content, such as embedded video — this only loads if you actively choose to view it, and is covered separately under Embedded content.
| Source | Data involved | Purpose |
|---|---|---|
| Contact form | Name, email address, LinkedIn profile (optional), reason for contact, message | Responding to your enquiry |
| Browser storage | Cookie preference | Site functionality |
| Hosting server | IP address, browser type, pages visited (server logs) | Security & site performance |
| Simplestats | Page views, referrer URL, device type — cookieless, no personal data stored | Understanding site usage |
The contact page includes a form that collects your name, email address, optionally your LinkedIn profile URL, your reason for contact, and a message. Submitting the form sends this data directly to Frank van de Koppel via server-side mail handling, powered by Kirby CMS running on TransIP servers in the Netherlands.
Your data is used solely to respond to your enquiry and is not shared with third parties, added to any mailing list, or used for any other purpose. The legal basis is your explicit consent, given via the checkbox on the form (Article 6(1)(a) GDPR).
You can request deletion of any message data at any time via the contact form.
This site does not set tracking or advertising cookies. It uses localStorage – browser-based storage that does not transmit data to any server – for the following functional purpose only:
| Key | Type | Purpose | Expires |
|---|---|---|---|
| cookie_accepted | localStorage | Remembers that you have dismissed the cookie notice | Until browser storage is cleared |
This value is not shared with any third party. You can clear it at any time through your browser settings.
This site uses Simplestats, a self-hosted analytics plugin. It tracks page views, referrers, and device types using a salted fingerprint that cannot be traced back to you personally. No cookies are set and no data leaves this server.
Some pages on this site include content hosted on a third-party platform — for example, a video player on a case study. In every case, this follows a click-to-play design: by default, only a static preview image is shown. Nothing is requested from the third-party platform, and no data leaves your browser, until you actively choose to play or open it.
A case study on the Work page, for instance, may include a video hosted on YouTube. Until you press play, no connection to YouTube is made — the preview image is served directly from this website. Once you press play, the video loads directly from YouTube, and Google's own systems may collect data such as your IP address, device and browser information, and may set their own cookies — for example, to measure viewership or maintain playback settings. This site loads YouTube in its privacy-enhanced mode, which limits this processing before playback begins. From the moment you press play, that data exchange is between your browser and the platform directly, governed by the platform's own privacy practices rather than this policy.
| Example | When it loads | Data involved |
|---|---|---|
| YouTube video | Only once you press play | IP address, device & browser information; the platform may set its own cookies once playback starts |
The same principle applies to any other embedded content used on this site — such as a player from a different video platform, a social media post, or an audio embed: nothing is loaded from that platform until you take an action to request it. The legal basis for this processing is your consent, given by the act of choosing to play or open the embedded content (Article 6(1)(a) GDPR).
This website is hosted by TransIP B.V., a Dutch hosting provider based in Leiden, the Netherlands. All server infrastructure is located within the European Union. TransIP processes server log data (including visitor IP addresses) for security and performance purposes. For details, see TransIP's privacy policy.
The site is built on Kirby CMS, developed by Bastian Allgeier GmbH, based in Mannheim, Germany. Kirby is a flat-file system – it stores no visitor data in a database. Contact form submissions are handled server-side and delivered directly by email; no submission data is retained in the CMS.
All typefaces used on this site are self-hosted on TransIP servers. No font requests are made to external services.
Under the General Data Protection Regulation (GDPR) and Dutch privacy law (UAVG), you have the following rights regarding any personal data held about you:
| Right | What it means |
|---|---|
| Access | Request a copy of the personal data held about you |
| Rectification | Request correction of inaccurate or incomplete data |
| Erasure | Request deletion of your personal data |
| Restriction | Request that processing of your data is limited |
| Objection | Object to processing based on legitimate interest |
| Portability | Receive your data in a structured, machine-readable format |
To exercise any of these rights, use the contact form. You also have the right to lodge a complaint with the Dutch Data Protection Authority: Autoriteit Persoonsgegevens.
For any questions about this policy or requests relating to your personal data, please get in touch via the contact form.
This policy was last updated in September 2026. Any material changes will be reflected here with an updated date.