This is a translation of the Dutch privacy policy; if the two differ, the Dutch version applies.
Theuws Consulting, located at Berschotten 15, 5531 NW Bladel, the Netherlands, is responsible for the processing of personal data as described in this privacy statement.
Last updated: 8 November 2026.
Contact details: theuws.com, Berschotten 15, 5531 NW Bladel, +31 6 1449 5130.
Richard Theuws is the Data Protection Officer of Theuws Consulting. He can be reached at [email protected].
Personal data I process
I only process what you leave yourself:
– what you email or message me;
– your name and score if you submit a high score yourself in one of the games, and, if a game asks for it, your email address or phone number (these are never shown and are only used to reach you if you win something);
– the data needed for an assignment, quote or invoice.
I measure visits to this site without cookies and without personal data (see the cookie policy). I do not use social media plugins that track you.
Your request through the intake
Through intake.theuws.com you tell me what you need: by typing, with a voice message, with a video or with files. In doing so you leave your name, possibly your company, and your email address or phone number.
– Storage: your request and files are stored on my own server in the Netherlands, and in my own project overview (Kompas), on the same server.
– Voice and video are transcribed on that same server (with whisper.cpp). They are not sent to another company for this.
– AI that thinks along: if you type your story, the intake can produce a short summary and a few follow-up questions. Only that typed text is sent to Claude by Anthropic (United States) for this. Under its commercial terms, Anthropic does not use that data to train models. You can always skip this step.
– Purpose: to assess your request, to reply to you and, if we continue together, to carry out the assignment.
Special and/or sensitive personal data
This site does not intend to collect data about visitors under the age of 16, unless they have permission from a parent or guardian. I cannot check whether a visitor is over 16. If you believe I hold data about a minor without that permission, email [email protected] and I will delete it.
For what purpose and on what legal basis
– Answering your request and preparing a quote (at your request, before entering into an agreement).
– Carrying out an assignment and calling or emailing you when that is necessary for it (performance of the agreement).
– Handling invoices and payments, and keeping data needed for tax returns (legal obligation).
– Showing a submitted high score (your own choice).
I do not send a newsletter and do not email you unsolicited.
Automated decision-making
I do not make decisions with (significant) consequences for people that are taken solely by a computer program. The summary and follow-up questions in the intake are an aid; I decide myself what happens with your request.
How long I keep personal data
I do not keep your data longer than necessary. Data needed to work for you is kept for 2 years after the last contact. Invoice data is kept for 7 years, because the law requires it. A request that does not lead to an assignment is deleted after 2 years at the latest.
Who I engage (processors)
I do not sell your data. I only share it when that is necessary for the assignment or when the law requires it. These services process data on my behalf:
– Own server in the Netherlands: the site, the intake, Kompas and the visitor analytics (Umami, without cookies).
– Cloudflare: security and speed of the site.
– Anthropic (Claude): only the thinking-along step in the intake, as described above.
– Google Workspace: my email.
– Moneybird: quotes and invoices.
–
For Video Suite (video-studio.theuws.com), only if you order a video there: fal.ai (United States) for animating images and for the music bed, Google (Gemini) for creating still images, and GitHub for the restricted storage of the production material. Which party receives what and how long it keeps it is listed at
video-studio.theuws.com/nl/subverwerkers; the Video Suite privacy statement is at
video-studio.theuws.com/nl/privacy.
With processors I conclude a data processing agreement, or I use their standard data processing terms, so that your data is equally well protected. I remain responsible.
Videos I make with AI
Videos from Video Suite contain images that were created or edited with AI, and usually a music bed created with AI. This is visibly stated in the video ("Made with AI", with the European AI label) and in the file metadata, as the European AI Act (Article 50) requires. If people are recognisable in the footage, I conclude a data processing agreement with the client and delete the source material no later than 90 days after delivery. How I work with AI otherwise, you can read on
About AI on this site.
Our videos on YouTube, TikTok, Instagram and Facebook
Theuws Consulting publishes its own videos on YouTube, TikTok, Instagram and its own Facebook page, through the official integrations of those platforms and only on its own channels. Through those integrations I do not process data of visitors or of other users: I only read the data of my own account and post my own videos. The access keys are stored securely on my own systems in the Netherlands and can be revoked at the platform at any time. If you watch or respond to a video on one of those platforms, that platform's privacy terms apply there.
Cookies
theuws.com does not place any cookies itself. I measure visits without cookies using Umami, on my own server in the Netherlands. In the case of suspicious traffic, Cloudflare may place a strictly necessary security cookie. Everything about this is in the cookie policy.
Viewing, correcting or deleting your data
You have the right to view your personal data, to have it corrected or to have it deleted. You can withdraw any consent you have given, object to the processing, and ask for your data to be sent in a computer file to you or to someone else. Send your request to [email protected]. I will respond as quickly as possible, and within four weeks. If it is necessary to verify that the request really comes from you, I will ask you for confirmation via the email address or phone number I already have for you.
You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): autoriteitpersoonsgegevens.nl.
How I secure personal data
I take appropriate measures against misuse, loss, unauthorised access, unwanted disclosure and unlawful alteration. Everything runs over encrypted connections (https), and my servers are in the Netherlands. If you feel your data is not properly secured, or you see signs of misuse, email [email protected].