Kumpl — Privacy Notice
Last updated: 21 October 2026
1. Who is responsible for your information?
Kumpl is being developed and operated by Paul Klausen, based in Amsterdam, the Netherlands.
For questions about your registration, your personal information or this notice, contact contact@kumpl.nl.
Our additional operator and address details are available on our Legal Information page.
This notice covers Kumpl's informational website and its client and professional interest-registration forms. The future private beta will have separate privacy information.
2. What information do we collect?
Future clients: Your email address and, if you choose to provide it, your city.
Interested professionals: Your first and last name, email address, professional family, city or working location, and at least one professional website or Instagram reference.
We also record the registration date and information needed to document your request to receive beta-related communications.
To protect the registration forms against misuse, we temporarily process IP addresses and keep IP-derived rate-limiting records in server memory for up to one hour. We also maintain limited technical records to manage duplicate registrations, withdrawals and retention deadlines. These records do not contain your full registration details, but remain personal data.
Our forms do not ask for medical histories, diagnoses, health information, identity documents or professional certificates.
Render and its infrastructure providers process connection and request information, including IP addresses, to deliver and protect the website. Our application does not include form contents, email addresses or raw visitor IP addresses in its application logs.
3. Why do we use this information?
For future clients, we use your information to manage your interest registration and send the private-beta information and possible participation invitations you requested. We rely on your consent under Article 6(1)(a) GDPR.
For interested professionals, we use the details and professional references you provide to review your registration, assess potential relevance to the planned private beta and respond about appropriate next steps. We rely on our legitimate interest under Article 6(1)(f) GDPR in preparing and recruiting an appropriate professional cohort.
We send promotional-type professional beta invitations only where you have specifically requested these communications. For these emails, we rely on your consent under Article 6(1)(a) GDPR.
For website security and registration integrity, we process limited technical information to prevent misuse, handle duplicates, respect withdrawals and implement retention and deletion. We rely on our legitimate interests under Article 6(1)(f) GDPR in protecting the service and maintaining accurate registration records.
You may object to processing based on our legitimate interests, as explained in Section 7.
We do not use these registrations for general newsletters or unrelated marketing.
4. Who has access to your information?
Access is limited to authorised people operating Kumpl and service providers necessary to run the website and registration process.
We store client and professional registrations as separate lists in a private database hosted on Render. Access to the registration administration page and Excel reports is restricted to the operator. Copies downloaded by the operator are handled privately and remain subject to the same applicable deletion rules.
We use Google Workspace to send registration confirmation emails, receive replies and handle contact and privacy-request correspondence. Website registrations are not automatically sent to Google Sheets.
Render and Google process service content on our instructions under their applicable data-processing agreements and use authorised subprocessors to provide their services. They may also process limited account and service-usage information for their own security and business purposes under their privacy terms.
We do not publish interest-registration information as client or professional profiles.
5. International data transfers
Our website service and registration database are hosted in Frankfurt, Germany. Render, Google Workspace and their subprocessors may also process information outside the European Economic Area, including in the United States. A European hosting location does not mean that all processing remains within Europe.
For these transfers, the providers' contractual arrangements provide for recognised transfer mechanisms, including the EU-U.S. Data Privacy Framework where applicable and the European Commission's Standard Contractual Clauses where required. Contact contact@kumpl.nl to ask for further information or a copy of the applicable safeguards.
6. How long do we keep your information?
Unused client and professional interest registrations are kept in our active registration records for no longer than six months from their original registration date.
We delete them earlier when they are no longer necessary, when you withdraw relevant consent or when a valid deletion request requires this.
If you become a private-beta participant, we'll explain the separate privacy arrangements before processing information for that participation.
When a registration is withdrawn, we remove its active entry and keep a limited technical record to enforce the withdrawal and prevent duplicate processing until the original six-month deadline. This record cannot be used to continue sending beta emails or extend the registration period.
Earlier copies may exist in restricted backups or operator downloads. We do not use backup copies for routine registration decisions or beta communications. Where older information is restored, we check and remove registrations that have expired or been withdrawn before allowing them to be used. We handle deletion requests, including relevant copies, according to applicable data-protection law.
Render makes application-log entries available to us for seven days under our hosting plan. Provider-operated security records and recovery copies follow the providers' applicable deletion processes and legal requirements; this is separate from the active-registration deadline above.
Automatic registration expiry removes records from our registration database and technical journal. It does not automatically delete messages from email mailboxes. We keep our copies of confirmation emails and necessary correspondence only as long as needed to handle your registration or privacy request, and apply relevant deletion instructions to copies we control. Copies in your own mailbox are under your control.
7. Your rights and choices
You can ask to access, correct or delete your personal information. Where applicable, you may also request restriction of processing or data portability, and object to processing based on our legitimate interests.
You can withdraw your consent for beta-related emails at any time. Use Stop beta emails or contact contact@kumpl.nl.
We normally respond to privacy-rights requests within one month, in accordance with the GDPR.
You can lodge a complaint with the Dutch Autoriteit Persoonsgegevens.
8. Is registration required?
Registering interest is voluntary. You need to provide an email address if you want us to contact you about beta opportunities.
The private beta is intended for adults aged 18 and over, initially within the Amsterdam marketplace. Participation depends on eligibility and available capacity.
Professional-interest registration does not mean qualifications have been verified or participation has been approved.
9. Cookies and website technologies
The private operator administration page uses a necessary sign-in cookie. Its session ends after 30 minutes of inactivity or eight hours at the latest, and is invalidated on sign-out or server restart. Visitor registration forms do not require this sign-in cookie.
We have not added advertising trackers or analytics to this website. Fonts and ordinary website assets are served from the website itself.
Our hosting and security providers may use necessary security technologies, including cookies when a security check is triggered, to protect the website against automated abuse. These are separate from the operator sign-in cookie.
10. Changes to this notice
We may update this notice when the website, registration process or legal requirements change. The date above shows when it was last updated. Where required, we will inform affected registrants or request additional permission.