Privacy Policy

Last updated: 13 November 2026

This policy covers the website except.eco. Except BV (also trading as Except Integrated Sustainability and Except Systemic Strategy & Design) is responsible for your personal data. We are based at 2e Daalsedijk 6A, 3551 EJ Utrecht, the Netherlands, registered with the Chamber of Commerce in Utrecht under number 68447043 (VAT NL857447555B01). Telephone: +31 (0)30 3075734.

Write to info@except.eco for any privacy question or request. We have not appointed a Data Protection Officer. Our other websites have their own notices.

Our web server records each request: your IP address, the time, the page requested, and your browser type. We use this to keep the site secure and running. Our legitimate interest in a safe and working website is the legal basis (Art. 6(1)(f) GDPR).

We rotate the logs daily and keep them for 14 days.

Every page except the homepage runs Google Analytics 4, provided by Google Ireland Limited. It counts visits and shows us which pages people read. It sets two cookies on except.eco, _ga and _ga_6MMTN5B7PG, which last up to 13 months in current browsers.

The site does not currently ask for cookie consent. Our legal basis is our legitimate interest in understanding how the site is read (Art. 6(1)(f) GDPR). You can refuse the cookies in your browser settings, or install Google's browser add-on to opt out of Google Analytics.

Google may process data outside the European Union. Google LLC is certified under the EU-US Data Privacy Framework.

The contact page (/about-us/contact/) embeds a Google Map and loads Google Fonts, so your browser connects to Google and shares your IP address when that page loads. This lets us show the map and display the page correctly, and our legitimate interest in doing so is the legal basis (Art. 6(1)(f) GDPR). The transfer note under Analytics applies to this connection too.

All pages also load fonts and icon libraries from the content delivery networks of Font Awesome and Bootstrap, which receive your IP address in the same way to display the page correctly, on the same legal basis. We store nothing from any of these connections.

The signup form asks only for your email address. It sends the address to our own newsletter system, Listmonk, which we run ourselves. You receive a confirmation email and join the list only after you click the link in it.

We send newsletters through Amazon Simple Email Service (Amazon Web Services EMEA SARL, region Ireland). The legal basis is your consent (Art. 6(1)(a) GDPR). We keep your address until you unsubscribe. You can withdraw consent at any time with the unsubscribe link in every email, or by writing to info@except.eco.

The site has no contact form. You write to the addresses shown (info@except.eco or vietnam@except.eco) or to a named colleague. We use what you send to answer you. The legal basis is our legitimate interest in handling correspondence and, when you ask about a project, steps taken before a contract (Art. 6(1)(f) and 6(1)(b) GDPR).

We keep your message as long as we need it to handle your request and our business correspondence.

Apart from the two Google Analytics cookies described above, the public site sets no cookies.

Infomaniak Network SA hosts the site in a data centre in Geneva, Switzerland. The European Union recognizes Switzerland as providing adequate protection, so this transfer needs no extra safeguards.

Three companies process personal data for us:

• Infomaniak for hosting.
• Google Ireland Limited for Analytics, Maps, and Fonts.
• Amazon Web Services EMEA SARL for newsletter delivery.

The content delivery networks named under Third-party content, Font Awesome and Bootstrap, also receive your IP address. We do not sell personal data.

You have the right to access your data, correct it, erase it, restrict its use, receive it in a portable format, and object to processing, including processing based on our legitimate interest. Where we rely on your consent, you can withdraw it at any time.

Send your request to info@except.eco. We answer within one month. If you think we handled your data incorrectly, you can complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl.