Privacy
Last updated: 10 July 2026
This website practices what it preaches: no analytics, no trackers, no advertising cookies, no third-party scripts. This page describes the little data that is processed, why, and your rights under the GDPR.
Who is responsible
Ironstack, operated by Damjan Sajinovic, Amsterdam, the Netherlands. For anything related to your data, email d.sajinovic@ironstack.nl.
The contact form
When you submit the form, the details you enter — name, company, email address, optional phone number, the reason for contact, company size, and your message — are delivered to Ironstack’s own self-hosted systems: the automation platform and the CRM. Both run on a server in an EU data center, managed solely by me. No third party receives or processes this data.
This data is used for one purpose: answering you. The legal basis is legitimate interest in responding to your own inquiry and, where a project follows, the preparation of a contract. Inquiries that lead nowhere are deleted within twelve months; client data is kept for as long as the relationship and legal retention periods require.
Direct email
If you email me directly, your message lives in Ironstack’s mailbox and follows the same principles: it is used only to answer you and shared with no one.
Local storage
The site stores exactly two things in your browser: your language choice and your light or dark mode preference. Neither ever leaves your device, contains nothing personal, and is not a tracking cookie.
Server logs
Like any web server, the reverse proxy that serves this site keeps short-lived technical logs (IP address, time, requested page) for security and troubleshooting. They are rotated automatically and used for nothing else.
Your rights
Under the GDPR you can request access to, correction of, or deletion of your data at any time; one email is enough. You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens.