Privacy policy

Who is responsible

Henk Boelman operates henkboelman.com and is responsible for the personal data described in this policy. Privacy questions and requests can be sent through LinkedIn.

Information processed when you visit

Like most websites, the hosting infrastructure may process technical request information such as your IP address, browser type, requested page, timestamp, and error details. This information is used to deliver the site, prevent abuse, diagnose failures, and maintain security.

The site uses Plausible Analytics to understand aggregate page visits and referral trends. Plausible is configured as a privacy-friendly, cookie-free analytics service. It does not create advertising profiles or track visitors across websites.

Protected timeline access

The private travel timeline is available only to approved email addresses. When you request access, the site temporarily holds your email address and a one-time code in server memory. The code expires after 15 minutes and the record is removed after successful use or expiry.

MailerSend processes the email address to deliver the access code. After verification, the necessary session cookie stores only an authenticated-session flag; it does not store your email address.

Embedded and external services

• YouTube: videos use YouTube’s privacy-enhanced domain. YouTube may receive technical information and store data when a video is loaded or played.
• CARTO and OpenStreetMap: map tiles and attribution are loaded on event and protected travel pages. Their servers receive the requests needed to display the map.
• Social and event platforms: following links to LinkedIn, GitHub, YouTube, Sessionize, conference sites, or other external destinations takes you to services governed by their own policies.

Website fonts, article images, audio, waveform data, CSS, and JavaScript are served directly from this site.

Legal reasons for processing

Technical logs, security controls, and aggregate analytics are processed for legitimate interests in operating, protecting, and improving the site. Timeline access data is processed to provide a requested protected service and maintain its security.

Retention and sharing

One-time timeline access records are kept for no longer than their 15-minute validity period. Aggregate analytics are retained according to the Plausible configuration. Hosting and security logs are retained only as needed for reliable operation, troubleshooting, and abuse prevention.

Personal data is not sold. Information is shared only with service providers needed to operate the site, comply with law, or protect the site and its visitors. Some providers may process information outside the European Economic Area under their applicable safeguards.

Your rights

Depending on applicable law, you may ask to access, correct, delete, restrict, or object to processing of your personal data, and you may have a right to data portability. You may also lodge a complaint with the Dutch Data Protection Authority or your local supervisory authority.

Because most site usage is anonymous and cookieless, I may need enough information to verify and locate any data connected to a request.

Changes to this policy

I will update this policy when the site’s data practices or services materially change. The latest revision date appears at the top of this page.