Privacy policy

New Age Media V.O.F., trading as Extended Developments, is the controller for the processing described here. Our registered address is De Vlaschaard 55, 1183 KM Amstelveen, the Netherlands. Our Dutch Chamber of Commerce number is 75653672 and VAT number is NL860353886B01. Contact us at info@extended-developments.com or +31 85 115 0407.

For work we perform on a client's systems or customer data under that client's instructions, the client is normally the controller and we are a processor. That work is governed by a separate data processing agreement where required; this website policy does not replace it.

It covers this website, its contact and project forms, the business case calculator when you choose to send an enquiry, and the careers application form. It also covers related email correspondence. It does not govern third-party websites reached through links from our site; those organisations publish their own notices.

The categories depend on how you interact with us. You may choose not to provide optional information, but we cannot respond to a request without the details needed to contact you.

• Website use: IP address, request time, requested page, browser or device information and technical error information that our hosting infrastructure needs to deliver and protect the site.
• Enquiries and project briefs: name, company, email address, telephone number, website, goals, requirements, existing systems, budget range, timeline and any other information you enter or send by email.
• Calculator and opportunity enquiries: the assumptions, figures and answers you choose to submit, together with your contact details. Calculator inputs that you do not send remain in your browser tab as described below.
• Job applications: name, email address, telephone number, portfolio URL, years of experience, preferred operating system, message, CV and other files you attach. Please avoid sending sensitive information that is unnecessary to assess your application.
• Business relationships: contact details, correspondence, contracts, invoices and payment administration for clients and suppliers.

We process personal data only for a defined purpose and with a legal basis under Article 6 GDPR.

• Responding to enquiries, preparing a proposal and discussing a project: steps requested before a contract (Article 6(1)(b)) or our legitimate interest in handling business enquiries (Article 6(1)(f)).
• Delivering agreed services, managing accounts and communicating with client contacts: performance of a contract where the person is a party (Article 6(1)(b)), or our legitimate interest in performing a business contract (Article 6(1)(f)).
• Assessing applications and communicating with candidates: steps before a potential employment or services contract (Article 6(1)(b)) and our legitimate interest in selecting team members (Article 6(1)(f)). We seek separate consent before keeping an unsuccessful application longer for future opportunities.
• Securing the website, preventing abuse and investigating errors: our legitimate interest in operating a safe, reliable service (Article 6(1)(f)).
• Maintaining tax and financial records and responding to binding legal requests: compliance with a legal obligation (Article 6(1)(c)).

This website does not set analytics, advertising or tracking cookies, and we do not use a cookie consent banner. Some forms and calculators use your browser's session storage to keep an unfinished draft in the current tab. This is functional storage: it is not used to track you across sites or for advertising, and it normally disappears when the tab or browser session ends. You can clear it by resetting the calculator or clearing your browser's site data. Information in a draft is sent to us only if you choose to submit a form.

If our use of cookies or similar storage changes, we will update this policy and obtain consent first wherever the law requires it.

Authorised members of our team access information only where needed for their work. We use service providers for website hosting and security, email delivery and mailboxes, technical infrastructure, accounting and professional advice. They receive only the data necessary for their role and, where they act as processors, are subject to contractual confidentiality and data protection terms. We may disclose data where the law requires it or to establish, exercise or defend legal claims. We do not sell personal data or share it with advertising networks.

Our services are operated from the Netherlands. If a service provider processes personal data outside the European Economic Area, we use a lawful transfer mechanism, such as a European Commission adequacy decision or the EU standard contractual clauses with appropriate additional measures where needed. Ask us at the contact address above for the applicable safeguards or a copy of the relevant terms.

We review retention against the purpose and delete or anonymise data when it is no longer needed, unless a legal duty or a live dispute requires longer retention.

• Technical website and security logs: ordinarily up to 30 days, unless needed to investigate an incident.
• Enquiries and project requests that do not become a contract: up to 12 months after the last meaningful contact.
• Unsuccessful job applications, including attachments: normally within 4 weeks after the recruitment process ends. With your separate consent, we may retain them for future opportunities for up to 1 year; you can withdraw that consent at any time.
• Client project records: for the contract and any reasonable claim period. Invoices and records that Dutch tax law requires us to keep are retained for 7 years.
• Tab-local draft data: until you close the tab or clear the draft, subject to your browser's session-restoration behaviour.

We use proportionate technical and organisational measures, including access restrictions, transport encryption where supported, updates, backups and controls for form abuse. No online service can promise absolute security. If a personal data breach presents a risk that triggers notification duties, we notify the relevant authority and affected people as required by law.

Subject to the conditions in the GDPR, you may request access, correction, erasure, restriction, portability and information about your data. You may object to processing based on legitimate interests. Where we rely on consent, you may withdraw it at any time without affecting earlier lawful processing. We do not use submitted information for solely automated decisions that produce legal or similarly significant effects.

Email info@extended-developments.com to exercise a right. We may ask for reasonable information to verify your identity. We normally respond within one month; where the GDPR allows an extension, we will explain it within that first month. You can also complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl.

Our services and recruitment pages are intended for adults and business contacts. We do not knowingly request children's data. Do not include health, identification documents or other sensitive details in an enquiry or application unless we specifically ask for them through an appropriate process. Contact us if you believe such information was submitted inadvertently.

We update this policy when our services, processing or legal requirements change. The date above identifies the current version. Material changes will be brought to your attention where appropriate; a later version does not retroactively change the legal basis for earlier processing. For questions, email info@extended-developments.com.