Privacy notice

Last updated: 8 September 2026

This notice explains what personal data pallasadvisory.com collects, why, and what you can do about it. It is short because the site does very little with your data.

Who is responsible

Pallas Advisory is the trading name of Melissa Kolbe, a sole trader (ZZP) registered with the Dutch Chamber of Commerce (KVK) under number 97293024, based in Utrecht, the Netherlands. I am the controller for the processing described here.

Questions or requests: info@pallasadvisory.com.

What this site collects

Visiting the site. The site sets no cookies and uses no tracking pixels. It uses Vercel Web Analytics, a cookieless service that records page views. Your IP address is used briefly to derive an anonymous daily visitor identifier and to determine your country; the IP address itself is not stored. I use this to see which pages are read. Legal basis: my legitimate interest in understanding how the site is used (AVG art. 6(1)(f)). Retention: a limited period set by Vercel; I keep nothing beyond it.

Subscribing to the newsletter. If you enter your email address in the signup form, it is stored by Beehiiv, the newsletter platform, together with the time of signup and, later, whether you open or click emails. Legal basis: your consent (art. 6(1)(a)). You can withdraw it at any time using the unsubscribe link in every email; your address is then removed from the list.

Emailing me. If you email me, I keep the message and your address for as long as needed to reply and to handle whatever follows. Legal basis: legitimate interest in answering you (art. 6(1)(f)), or performance of a contract if we go on to work together (art. 6(1)(b)). Correspondence that becomes part of a client engagement is kept for up to seven years after the engagement ends, because Dutch tax law requires business records to be retained for that period.

That is all. The site has no accounts, no payments, no forms other than the newsletter signup, no comment sections, and no chat widgets.

Who else sees your data

Three companies process data on my behalf:

Each acts under a data processing agreement. Transfers to the United States rely on the EU-US Data Privacy Framework where the company is certified, and otherwise on the European Commission's standard contractual clauses.

I do not sell your data, share it with advertisers, or use it for profiling or automated decision-making.

Your rights

Under the AVG (GDPR) you can ask me to show you the personal data I hold about you, correct it, delete it, restrict its use, hand it over in a portable format, or stop processing it where I rely on legitimate interest. Email info@pallasadvisory.com; I will respond within one month.

If you think I am handling your data unlawfully, you can complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl.

Links to other sites

Articles on this site link to other websites. Their privacy practices are their own.

Changes

If the site starts doing more with your data, this notice changes first, and the date at the top moves.