Privacy and cookie notice
Last updated: 21 July 2026
Who controls your data
0101 BV, based in Mechelen, Belgium, is responsible for personal data processed through this portfolio. Questions or privacy requests can be sent to konrad@gajda.be.
Data this site processes
- Contact requests: your name, email address, optional subject, message, language, IP address, browser user agent, delivery status, and submission time.
- Technical records: limited server and security logs needed to operate, protect, and troubleshoot the service.
- Administrator account: account details, secure authentication cookies, authenticator configuration, and one-time recovery codes. This applies only to the private administration area.
- Device preferences: the language, theme, and acknowledgement of this notice are stored in your browser.
Purposes and legal bases
Contact information is used to answer your request and, where relevant, take steps toward a professional engagement. Service security, abuse prevention, diagnostics, and administration are based on the legitimate interest in operating a secure and reliable website. Data is not used for automated decision-making or behavioural advertising.
Sharing and processors
Personal data is not sold. It may be processed by infrastructure and email providers only where needed to host the site, deliver a contact message, maintain security, or meet a legal obligation. Providers must protect the data and may act only for the agreed service purpose. Where a provider processes data outside the European Economic Area, an applicable legal transfer safeguard is required.
Retention
Stored contact-form records are automatically removed after 365 days. Correspondence may be retained longer when needed for an active professional relationship, a legal obligation, or the establishment, exercise, or defence of legal claims. Security records are retained only for the operational period needed to investigate and protect the service.
Cookies and browser storage
| Item | Purpose | Duration |
|---|---|---|
portfolio.auth | Secure administrator sign-in; set only after a successful login. | Up to 14 days, renewed while the administrator remains active |
| Temporary two-factor sign-in cookie | Carries the protected login challenge between password and authenticator verification. | Session only |
portfolio.locale | Remembers the language you explicitly select. | Until removed in your browser |
portfolio.theme | Remembers the light or dark theme you explicitly select. | Until removed in your browser |
portfolio.cookie-notice | Remembers that this necessary-storage notice was shown. | Until removed in your browser or the notice changes |
No analytics, advertising, social-media tracking, or marketing cookies are currently used. The necessary authentication and preference storage described above is not used to profile visitors. If optional tracking is introduced later, it must remain off until a separate, informed choice is provided.
Your rights
Subject to the conditions in the GDPR, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You may also complain to the Belgian Data Protection Authority.