Privacy Policy

1. Who is responsible for your data

The controller responsible for processing your personal data is:

For any questions about this privacy policy or the processing of your data, please contact us using the details above. We have not appointed a Data Protection Officer; for a business of our nature and size this is not legally required.

2. What personal data we process

We process only the data necessary to handle your enquiry and to deliver our services. Specifically, this concerns:

2.1 Data you provide yourself (contact and quote form)

• Name – to address you correctly and link your enquiry;
• Email address – to send you a confirmation and reply;
• Telephone number – to contact you by phone about your project;
• Project type and description – to assess your enquiry properly and prepare a suitable quote.

In addition, we process data you provide when you call or email us, or in the course of an assignment (for example a work address and project details).

2.2 Data collected automatically

When you visit our website, certain technical data is processed that is necessary to display the website securely and correctly, such as your IP address, browser type, device type and the pages you visit. Where this data is processed via analytics cookies, this is done only after you have given consent (see section 9 and our cookie policy).

Through this website we process no special categories of personal data (such as health or religion) and we do not knowingly target children.

3. Purposes and legal basis

We process your personal data only for specified purposes, in each case on a valid legal basis under Article 6 of the GDPR:

We do not use your data for automated decision-making or profiling that produces legal effects.

4. How long we keep your data

We do not keep personal data for longer than is necessary for the purposes for which it was collected:

• Enquiries that do not lead to an assignment: kept for no more than 12 months after the last contact, after which they are deleted.
• Data forming part of an assignment, quote or invoice: this falls under the statutory tax retention obligation and is kept for 7 years, counted from the end of the relevant financial year.
• Email correspondence: for as long as needed to handle the matter and any aftercare.
• Analytics data: in line with the settings of the analytics platform, in principle no longer than 14 months.
• Your cookie preference: stored locally in your browser until you delete or change it (see section 9).

5. Processors and sharing with third parties

We never sell your data. We share data only with parties that help us deliver our service, and only to the extent necessary. We conclude data processing agreements with these parties. Our main processors are:

In addition, we may provide data to third parties where we are legally obliged to do so, for example to the Dutch Tax and Customs Administration (Belastingdienst) or at the demand of a competent authority.

6. Transfers outside the European Union

Some of our processors (such as Vercel and Resend) are established in, or use servers in, the United States. Insofar as personal data is processed outside the European Economic Area, we ensure appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs) and/or certification under the EU–US Data Privacy Framework. Where possible, we opt for processing within the EU.

7. How we secure your data

We take appropriate technical and organisational measures to protect your data against loss or unlawful processing. These include, among other things, encrypted connections (HTTPS/TLS), access to data restricted on a need-to-know basis, and data processing agreements with our suppliers. Should a data breach unexpectedly occur that poses a risk to your rights and freedoms, we will act in accordance with our notification obligations under the GDPR.

8. Your rights

Under the GDPR you have the following rights in respect of your personal data:

• Access – you may request which data we process about you;
• Rectification – you may have inaccurate data corrected or completed;
• Erasure ("right to be forgotten") – you may request that your data be deleted, unless we are legally obliged to keep it;
• Restriction – in certain cases you may have the processing restricted;
• Objection – you may object to processing based on legitimate interest;
• Data portability – you may receive the data you have provided in a commonly used format;
• Withdrawal of consent – where you have given consent (for example for cookies), you may withdraw it at any time, without affecting the lawfulness of processing carried out beforehand.

Lodging a complaint

If you disagree with how we handle your data, you have the right to lodge a complaint with the supervisory authority, the Autoriteit Persoonsgegevens (the Dutch Data Protection Authority) (autoriteitpersoonsgegevens.nl). We would appreciate it if you would contact us first, so that we can look for a solution together.

9. Cookies

Our website uses cookies and similar techniques. We place necessary and functional techniques on the basis of legitimate interest; analytics and marketing cookies only after you have given consent via our cookie banner. You can change your choice at any time via the "Cookie preferences" button at the bottom of every page. A full explanation can be found in our cookie policy.

10. Changes to this privacy policy

We may amend this privacy policy from time to time, for example in the event of changes to our services or to laws and regulations. You will always find the most recent version on this page, with the date of the latest change shown at the top.

This privacy policy has been prepared with care for PJ Kaptein Woonsupport. It does not constitute legal advice; for your specific situation a separate legal assessment may be advisable.