Last updated: 22 October 2026
This Privacy Policy explains how personal data is processed when you visit www.melissakampers.com (the “website”). It is written to meet the information duties of the EU General Data Protection Regulation (GDPR), in particular Articles 13 and 14.
1. Who is responsible for your data
The controller of your personal data is Melissa Kampers, a private individual based in The Hague, the Netherlands, who runs this website as a personal blog. You can reach me at business@melissakampers.com.
2. What data is processed, why, and on what legal basis
Visiting the website (server and security logs) When you visit the website, the hosting server and security services automatically process technical data such as your IP address, browser type, operating system, the pages you request, the referring page and the date and time of your visit. This is needed to deliver the website to you, keep it secure (for example against hacking attempts and spam) and fix errors. Legal basis: legitimate interest (Article 6(1)(f) GDPR) in running a secure and working website.
Fast loading of images and files (content delivery) Images and some scripts are served through the content delivery network of Jetpack (Automattic), using the domains i0.wp.com, c0.wp.com and s.w.org. To deliver these files, your IP address and browser data are sent to those servers. Legal basis: legitimate interest (Article 6(1)(f) GDPR) in a fast and reliable website.
Visitor statistics with Jetpack Stats I use Jetpack Stats (Automattic) to see how many people visit the website and which articles are read. Jetpack Stats processes data such as your IP address (shortened or hashed by Automattic), browser information, the pages you view and the referring website. It is used only for aggregated statistics, not to build a profile of you. Legal basis: legitimate interest (Article 6(1)(f) GDPR) in understanding the reach of the website.
Google Analytics (only with your consent) With your consent, I use Google Analytics 4, connected through the Google Site Kit plugin, to analyse how the website is used. Google Analytics places cookies (see the Cookie Policy) and processes data such as an online identifier, your IP address, device and browser information, the pages you view, how long you stay and how you arrived at the website. Legal basis: your consent (Article 6(1)(a) GDPR). You can withdraw your consent at any time via the cookie settings button on the website.
Remembering your preferences The website stores small pieces of information in your browser (cookies and local storage) to remember your cookie choices and, for example, the date of your previous visit so new articles can be highlighted. This data stays on your device and is not sent to me. Legal basis: legitimate interest (Article 6(1)(f) GDPR) for strictly necessary storage, and your consent where required.
Contacting me If you email me, I process your name, email address and the content of your message in order to reply. Legal basis: legitimate interest (Article 6(1)(f) GDPR) in answering your message, or the steps needed before entering into an agreement (Article 6(1)(b) GDPR) if your message is about working together.
Email updates (newsletter) If you sign up for email updates, your email address is processed by Jetpack Subscriptions (Automattic) to send you new posts. Legal basis: your consent (Article 6(1)(a) GDPR). Every email contains an unsubscribe link and you can withdraw your consent at any time.
Comments Comments are currently switched off on this website. If they are enabled in the future, the name, email address, IP address and content of a comment will be processed to publish and moderate it, and comments may be checked for spam by Akismet (Automattic). Legal basis: legitimate interest (Article 6(1)(f) GDPR).
Sharing and links to other websites The share buttons and the links to Facebook, X (Twitter), YouTube, Instagram, LinkedIn, WhatsApp and Telegram are ordinary links. No data is sent to these platforms until you click such a link. Once you visit another website, the privacy policy of that website applies.
I do not sell your personal data, do not use it for automated decision making or profiling with legal effects, and do not show personalised advertising.
3. Who receives your data
Your data is only shared with service providers that help run the website (processors), and only as far as needed:
- TransIP (the Netherlands): web hosting and server logs.
- Automattic Inc. (United States) and its affiliates: Jetpack (statistics, security, content delivery, backups, email subscriptions) and Akismet (spam protection).
- Google Ireland Ltd. / Google LLC: Google Analytics, only with your consent.
- WordPress.org: delivery of some standard files (s.w.org).
I may also share data if the law requires it, for example at the request of a competent authority.
4. Transfers outside the European Economic Area
Automattic and Google may process data in the United States. These transfers are based on the EU-U.S. Data Privacy Framework, for which these companies are certified, and/or on the Standard Contractual Clauses approved by the European Commission.
5. How long data is kept
- Server and security logs: for a limited period, in line with the hosting and security providers’ standard retention, usually no longer than a few months.
- Jetpack Stats: aggregated statistics are kept for as long as the website exists; Automattic does not keep the raw data longer than needed for this.
- Google Analytics: according to the retention setting in Google Analytics, at most 14 months. Cookies expire as listed in the Cookie Policy.
- Emails: as long as needed to handle your message and any follow-up, after which they are deleted.
- Email subscriptions: until you unsubscribe.
- Your cookie choice: 12 months, after which the website asks you again.
6. Your rights
Under the GDPR you have the right to:
- access the personal data I hold about you;
- have incorrect data corrected;
- have your data deleted;
- restrict the processing of your data;
- object to processing based on legitimate interest;
- data portability;
- withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.
To use these rights, email me at business@melissakampers.com. I will respond within one month. I may ask you to confirm your identity first.
7. Complaints
If you believe your personal data is not being handled properly, please contact me first so we can solve it together. You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or with the supervisory authority in the EU country where you live.
8. Security
I take appropriate technical and organisational measures to protect your data, including an encrypted (HTTPS) connection, security monitoring, protection against brute force login attempts and regular backups.
9. Changes
I may update this Privacy Policy when the website or the law changes. The date at the top shows when it was last updated.
See also the Cookie Policy and the Terms and Conditions.