Privacy policy

Van Gelderop is committed to protecting your personal data and processes it in accordance with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and applicable Dutch implementing legislation.

Article 1 — Controller

The data controller within the meaning of the GDPR is:

Article 2 — Personal data we process

We only process personal data that you actively provide to us:

2.1 Contact form and email correspondence

• First and last name
• Company name (optional)
• Email address
• Phone number (optional)
• Subject and content of your message

2.2 Quote requests and business correspondence

• Name and job title of the contact person
• Company name, address and registration number
• Email address and phone number
• Project details and technical specifications

We do not process special categories of personal data as referred to in Article 9 GDPR.

Article 3 — Purposes and legal bases

• Handling your contact request — legitimate interest (Art. 6(1)(f) GDPR): responding to enquiries from (potential) business customers.
• Performance of a contract — Art. 6(1)(b) GDPR: processing necessary to perform or enter into an agreement.
• Compliance with legal obligations — Art. 6(1)(c) GDPR: statutory retention obligation (7 years) under Dutch tax law.

Article 4 — Retention periods

• Contact requests without follow-up: maximum 12 months after last contact.
• Quotes and correspondence (no agreement): maximum 24 months.
• Contracts, invoices and financial records: 7 years pursuant to the statutory retention obligation.

Article 5 — Recipients and processors

We do not share your personal data with third parties for commercial or marketing purposes. We use the following processor with whom a data processing agreement has been concluded:

Article 6 — Security

Van Gelderop takes appropriate technical and organisational measures to protect your personal data against loss, unauthorised access, disclosure or alteration. Our website uses a secure HTTPS connection (TLS). Access to personal data is restricted to employees who necessarily need it for their work.

Article 7 — Your rights

Under the GDPR you have the following rights:

• Right of access (Art. 15): the right to know which personal data we process about you.
• Right to rectification (Art. 16): the right to have inaccurate data corrected or incomplete data completed.
• Right to erasure (Art. 17): the right to have your personal data deleted, unless we have a justified reason to retain it.
• Right to restriction of processing (Art. 18): the right to restrict the processing of your data in the cases specified in the GDPR.
• Right to data portability (Art. 20): the right to receive your data in a structured, commonly used and machine-readable format.
• Right to object (Art. 21): the right to object to processing based on legitimate interest.

To exercise your rights, please contact us at info@gelderop.nl. We will respond within 30 days. We may ask you to verify your identity before processing your request.

Article 8 — Right to lodge a complaint

If you believe we are not processing your personal data correctly, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

Article 9 — Changes to this privacy policy

Van Gelderop reserves the right to amend this privacy policy. Changes will be published on this page with the effective date. We recommend you consult this policy periodically.

Article 10 — Contact