B

H

Trust is not treated here as a communication value. It is treated as an operational obligation.

This website is operated by Bart Heideman. The purpose of this website is to present essays, casework, and advisory services related to organisational identity, strategic narrative, governance, public legitimacy, and decision-making under pressure. 

This is not a platform built around behavioural tracking, advertising optimisation, or large-scale data extraction. It is a professional advisory practice. The handling of information reflects that distinction.


The principle underlying this privacy statement is simple: information shared in confidence should remain protected, proportionally handled, and limited to the purpose for which it was entrusted.

This is not a platform built around behavioural tracking, advertising optimisation, or large-scale data extraction. It is a professional advisory practice. The handling of information reflects that distinction.

The principle underlying this privacy statement is simple: information shared in confidence should remain protected, proportionally handled, and limited to the purpose for which it was entrusted.

01  
What information may be collected

When visiting this website, limited technical information may be processed automatically for operational and security purposes, including:

  • browser type
  • device type
  • IP address
  • pages visited
  • date and duration of visit
  • technical performance data


If you contact me directly through email or a contact form, the information you voluntarily provide may include:

  • name
  • email address
  • organisation
  • professional role
  • message content
  • project-related or contextual information

No unnecessary personal data is intentionally requested or collected.

02
Why information is processed

Information is processed only where relevant to:

  • responding to inquiries
  • professional communication
  • preparing or conducting advisory work
  • contractual or administrative obligations
  • maintaining the security and functionality of the website
  • improving the clarity and usability of the website itself
  • Personal information is not sold, traded, rented, or used for advertising purposes.

No automated profiling or behavioural targeting is intentionally performed.

03  
Confidentiality and professional discretion

The work described on this website often involves sensitive organisational questions, internal tensions, leadership dynamics, strategic vulnerabilities, and personal reflection. Trust and discretion are therefore not secondary conditions of the work, but foundational to it.

Any information shared in conversations, collaborations, workshops, advisory trajectories, or exploratory discussions is treated with strict confidentiality. No personal insights, organisational observations, strategic discussions, internal material, unpublished thinking, or sensitive contextual information will be shared, reused, disclosed, referenced, or repurposed without explicit permission.

This includes both formal and informal exchanges.

The purpose of the work is to create clarity, coherence, and direction — something that is only possible when individuals and organisations can think openly without fear of exposure, instrumentalisation, or strategic reuse.

Trust is not treated here as a communication value.
It is treated as an operational obligation.

04
Legal basis for processing

Where personal data is processed, this is done on one or more of the following legal grounds under the General Data Protection Regulation (GDPR):

  • consent
  • legitimate professional interest
  • contractual necessity
  • legal obligation

05
Data retention

Personal data is not retained longer than necessary for the purpose for which it was provided, unless legal or administrative obligations require otherwise.

Professional correspondence and project-related communication may be retained for continuity, reference, contractual clarity, or legal compliance.

06  
Third-party services

This website may rely on carefully selected third-party providers for services such as:

  • website hosting
  • analytics
  • security
  • embedded media
  • communication functionality
  • These providers may process limited technical information as part of delivering their services.

Where applicable, these providers are expected to comply with relevant GDPR requirements.

07  
Cookies

This website may use functional and analytical cookies necessary for the operation, security, and understanding of the website.

No advertising cookies or cross-platform behavioural tracking systems are intentionally used to construct commercial user profiles.

You may disable cookies through your browser settings.

08
Your rights

Under the GDPR, you have the right to:

  • request access to your personal data
  • request correction or deletion
  • object to processing
  • request restriction of processing
  • request data portability
  • withdraw consent where applicable
  • requests regarding personal data or privacy-related
  • questions may be submitted through the contact information below.

09
Contact

Bart Heideman
Utrecht, The Netherlands
Email: me@bartheideman.com

10
Changes to this statement

This privacy statement may be updated where necessary to reflect legal, operational, or technical changes.

The most recent version will always be published on this website.

BH

An organisation is not defined by what it says it values. It is defined by what its decisions consistently uphold.