Privacy

Who is responsible

OutsideSmart.com is published by Vivedis Assetmanagement B.V. ("we", "us"). We are the controller for the personal data described on this page.

For any privacy question or request, email privacy@vivedis.nl.

What this site does not do

• No cookies.
• No analytics, trackers or advertising tags.
• No scripts.
• No external fonts or other files from third parties. Every page, image and stylesheet loads from this site only.
• No other company can collect information about your activity across websites through this site.

Server logs

This site runs on a virtual server that we rent from Strato, a European hosting provider that processes data on our behalf. Like most web servers, ours keeps logs:

• Access log. For each request: the time, a shortened IP address (IPv4 shortened to /24, IPv6 shortened to /48), port, protocol, method, domain, the path without the query string, TLS version and cipher, status code, bytes sent and how long the request took. It does not record your full IP address, your browser's user agent, the referring page, cookies or other headers, or the query string. Access logs are deleted automatically after 7 days.
• Error log. Technical errors, certificates and TLS handshakes. This log can contain full IP addresses. It is deleted automatically after 7 days.

We use these logs only to deliver the site, keep it secure and fix errors. Our legal basis is our legitimate interest in running a secure, working website (Article 6(1)(f) GDPR). We do not use logs to profile visitors. If we need a specific entry to deal with a security incident, we keep that entry until the incident has been resolved.

Strato may also process technical connection data, such as IP addresses, at network level to keep its infrastructure secure and available. We do not receive or use that data. To the extent Strato processes it for its own purposes, Strato's own privacy policy applies.

Email

If you email us, we use your email address, your name if you give it, and your message to reply and to handle your question. Our legal basis is our legitimate interest in answering you (Article 6(1)(f) GDPR); for a privacy request, it is our legal obligation (Article 6(1)(c) GDPR). Emailing us is voluntary. We keep your email for as long as we need it to answer you, and delete it no later than 12 months after our last contact. If you sent a request about your rights, we keep a record of that request and our reply for up to 2 years, so we can show we handled it.

Our email runs on Google Workspace. Google processes emails on our behalf, as our processor, under a data processing agreement. Google may process this data in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision.

Who receives your data

Only the service providers that process data for us: Strato (hosting and server logs) and Google (email). We do not sell, rent or share personal information for advertising, and we have not done so in the past 12 months. We disclose data to authorities only where the law requires it.

Paid links to Amazon

Links marked "(paid link)" go to Amazon. This site sends nothing about you to Amazon. When you click such a link, your browser opens Amazon, and Amazon can see that you came from OutsideSmart. From then on, Amazon's own privacy notice and cookie policy apply (see amazon.com).

Your rights

You can ask us for access to, correction or deletion of your personal data, ask us to restrict its use, ask for a copy in a portable format, and object at any time to processing based on our legitimate interest. Email privacy@vivedis.nl. We reply within one month. We usually cannot link a server log entry to a person, so we may ask you for details (for example the time of your visit and your IP address) to find it.

If you think we handle your data incorrectly, please tell us. You also have the right to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or to the data protection authority in the EU country where you live.

Visitors in the United States

We do not sell or share personal information and do not use it for targeted advertising. Wherever you live, you can email privacy@vivedis.nl to review, correct or delete the personal information you sent us.

Do Not Track: we do not track visitors over time or across other websites, so there is nothing for a Do Not Track or Global Privacy Control signal to switch off. We treat every visitor the same way.

Children

This site is meant for a general adult audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has emailed us, let us know and we will delete the message.

Changes to this policy

If we change this policy, we post the new version on this page with a new effective date. If a change is material, we also show a short notice at the top of this page for at least 30 days.