Privacy
This privacy policy describes how Last Night Group collects, uses and protects personal data when you visit our website or use our services. Last updated on 15 February 2026.
Last Night Group
Petrus Regoutplein 1F02, 6211 XX Maastricht
Email: info@lastnightgroup.com
Phone: +31 6 2727 2582
We only collect data that is necessary for our services:
We process your personal data on the following legal bases (Article 6 GDPR):
| Processing | Legal basis |
|---|---|
| Processing your enquiry/quote | Performance of a contract (Art. 6(1)(b)) |
| Sending confirmation email after enquiry | Legitimate interest (Art. 6(1)(f)) |
| Storing lead data for follow-up | Performance of a contract (Art. 6(1)(b)) |
| Analytical cookies (PostHog) | Consent (Art. 6(1)(a)) |
| Marketing emails / tips | Consent (Art. 6(1)(a)) — opt-in checkbox |
| Server-side event tracking (lead source) | Legitimate interest (Art. 6(1)(f)) |
| Checking availability (Google Calendar) | Legitimate interest (Art. 6(1)(f)) |
| Data | Retention period |
|---|---|
| Leads (enquiries without a contract) | Maximum 2 years after last contact |
| Client data (with a contract) | 7 years after completion (statutory retention obligation) |
| Analytical data | Maximum 26 months (PostHog default) |
| Marketing consent | Until withdrawn by the data subject |
We only share your data with parties that are necessary for our services. We have concluded a data processing agreement (DPA) with all processors. You can request a copy via .
| Party | Purpose | Location |
|---|---|---|
| Resend | Email delivery | US (EU-US DPF) |
| PostHog | Web analytics | EU (Frankfurt) |
| Google (Calendar API) | Availability check | EU/US (SCCs) |
| Vercel | Website hosting | EU/US |
Resend (email service) processes data in the United States. Resend is certified under the EU-US Data Privacy Framework (DPF), which ensures an adequate level of protection. For other services involving data transfers, Standard Contractual Clauses (SCCs) are applied.
Under the GDPR, you have the following rights regarding your personal data:
Submit your request via . We will respond within 30 days.
We take appropriate technical and organisational measures to protect your data, including:
In the unlikely event of a data breach involving your personal data, we will act as follows:
We do not use automated decision-making or profiling that has legal effects on you or similarly significantly affects you.
Our services are not aimed at persons under the age of 16. We do not knowingly collect data from minors. If you suspect that we have collected data from a minor, please contact us at so that we can delete this data.
Do you have a complaint about how we handle your data? Please contact us first so we can try to resolve your complaint. In addition, you always have the right to file a complaint with the Dutch Data Protection Authority: .
We may update this privacy policy from time to time, for example in response to changes in our services or in legislation. The most current version is always available on this page. In the event of significant changes, we will notify you accordingly.
Version: 15 February 2026
Do you have questions about this privacy policy or about the processing of your personal data? Feel free to contact us: