This website
This site loads Google Tag Manager from googletagmanager.com. That is the only third-party request it makes: the stylesheet, the fonts and the images all come from this domain, and no widget is embedded anywhere. Loading Google Tag Manager sends your IP address and the address of the page you are reading to Google.
The container runs Google Analytics 4, which measures visits and sets cookies on your device. It is used to see which pages get read, nothing more, and it is not connected to advertising.
It stays switched off until you accept it. The banner on your first visit asks, and the answer is kept in your browser rather than on a server. You can change it at any time with the Cookies link at the foot of every page, and refusing costs you nothing on this site.
The hosting provider keeps standard server logs, including IP addresses, for security and troubleshooting. The only link that leaves this site is the booking link (Calendly), which opens in a new tab.
Who is responsible
BLS Digital, an eenmanszaak run by Benjamin Bails in the Netherlands, is the controller for the personal data described here. Contact: benjamin@bls-digital.com.
If you use the contact form
The form sends your name, work email, company website, your monthly Google Ads spend band and, if you write one, your message. It goes from this site (hosted by Cloudflare) straight to my mailbox (Google Workspace), both acting as processors, and nowhere else. It is not added to a mailing list, not loaded into a CRM, and not shared with anyone. It is kept until the conversation is finished, or for twelve months after the last contact, whichever comes first. The legal basis is taking steps at your request before entering into a contract.
If you received an email from BLS Digital
If you got a message from me without having asked for one, this section explains why.
- What is processed. Business contact data only: name, job title, employer, business email address, company website and public professional profile. No private addresses, no special categories of data.
- Where it comes from. Public sources: company websites, the Google Ads Transparency Center, publicly visible shopping listings and product feeds, professional networks and business directories.
- Why. To offer a paid search service to companies where something publicly observable about their advertising suggests the service is relevant. The legal basis is legitimate interest under Article 6(1)(f) GDPR, for direct business-to-business marketing.
- How long. Until you object, or twelve months after the last contact with no engagement, whichever comes first. A removal request is kept as a suppression record so the address is not contacted again.
- Who else sees it. The email and calendar providers used to run the business, acting as processors. Data is never sold, rented or shared for anyone else’s marketing.
Your rights
You can ask for access, correction, deletion, restriction or portability, and you can object to processing based on legitimate interest at any time. Reply to any message, or write to benjamin@bls-digital.com, and it is done without argument. You can also complain to the Autoriteit Persoonsgegevens, the Dutch data protection authority.
Client data
Client names and account data are never published, never used as a named reference without written permission, and never shared with other clients. Results shown publicly are anonymised.