Privacy statement

The controller is ZuidHek Schuttingen & Hekwerk, a sole proprietorship (eenmanszaak) owned by Rejus Petronis.

• Address: Breitnerstraat 34, 6165 VR Geleen, the Netherlands
• Chamber of Commerce (KvK) number: 97671258
• Phone and WhatsApp: +31 6 13 87 10 16
• E-mail: [email protected]

Do you have a question about privacy, or do you want to exercise one of your rights? Please contact us at [email protected] or by post at the address above. We do not have a data protection officer; a business like ours is not required to appoint one.

We only use the data we need. We usually receive it from you, for example when you request a quote or send us a message.

• Contact details: name, phone number, e-mail address and (if you contact us via WhatsApp) your WhatsApp name and number.
• Address details: the address where the work is carried out and, if different, your billing address.
• Details about the work: your wishes, dimensions, the situation in your garden or on your property, and photos you send us or that we take with your permission.
• Content of messages: what you write to us via WhatsApp, e-mail or phone, and the arrangements we make with you.
• Financial data: quotes, invoices, payments and your account number if you pay by bank transfer.
• For business customers also: company name, Chamber of Commerce number, VAT number and contact person.
• Technical data from website visits: IP address, browser and device type, and the time and page of the visit (see section 4).

We do not ask for special categories of personal data, such as data about your health or religion. Please do not send us such data. If you want a quote or an assignment, we need at least your name, the work address and a way to reach you. Without these details we cannot prepare a quote or carry out the work.

Article 6 of the GDPR lists the legal bases on which personal data may be used. For each purpose you can see which legal basis we rely on.

• Answering your question or quote request, making an appointment to take measurements and preparing a quote. Legal basis: steps taken before entering into a contract, at your request (Art. 6(1)(b) GDPR). If your question is not about an assignment, the legal basis is our legitimate interest in answering questions (Art. 6(1)(f) GDPR).
• Preparing, scheduling and carrying out the work, ordering materials and keeping in touch with you about the work. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
• Making a KLIC notification to the Kadaster (the Dutch Land Registry) before we dig with machinery. In doing so, we pass on the location of the work. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
• Invoicing, processing payments and keeping our accounts. Legal basis: performance of the contract and the statutory obligation to keep and retain records (Art. 6(1)(b) and (c) GDPR).
• Handling complaints, warranty questions and disputes. Legal basis: performance of the contract and our legitimate interest in being able to defend ourselves (Art. 6(1)(b) and (f) GDPR).
• Showing photos of completed work on our website or in other publications. Legal basis: your consent (Art. 6(1)(a) GDPR). See section 6.
• Keeping the website secure and working properly. Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).

We do not use your data for other companies' advertising and we do not sell your data. We do not take decisions about you made solely by a computer (automated decision-making or profiling).

Our website is a simple information site. You cannot create an account and there is no login. The quote and contact form does not store anything on the website: it prepares your message in your browser and then opens WhatsApp (via wa.me) or your own e-mail program. We only receive your data once you send the message yourself from there. From that moment, section 5 applies.

Hosting. The website is hosted by Vercel Inc. With every visit, the hosting provider processes technical data, such as your IP address, the time and the page requested. This is necessary to show you the website and to detect misuse and faults. This data is kept for a short time in the hosting provider's log files. Vercel may process data on servers outside the European Economic Area (EEA), including in the United States (see section 8).

Map of our service area. The website shows a map. The map images come from OpenFreeMap (tiles.openfreemap.org), using map data from OpenStreetMap. To show the map, your browser retrieves the map images from the OpenFreeMap server, which therefore sees your IP address. OpenFreeMap does not set cookies and, according to its own privacy policy, does not record IP addresses in its regular access logs. OpenFreeMap may use a content delivery network (such as Cloudflare), which may also briefly process your IP address. We use the map on the basis of our legitimate interest in clearly showing where we work.

Fonts. The fonts are hosted on our own website. No connection is made for this purpose with services such as Google Fonts.

Links to other services. If you click a link to WhatsApp, Google Maps or another website, you go to a service provided by another company. That company's privacy policy applies to that service.

Cookies. Our website does not set cookies. You can read more about this in our cookie statement.

You can reach us via WhatsApp, e-mail and phone. You choose which one you use.

WhatsApp. If you send us a message via WhatsApp, WhatsApp (in Europe: WhatsApp Ireland Limited, part of Meta) processes data for that purpose. WhatsApp messages are end-to-end encrypted, but WhatsApp does process data such as your phone number and the time of messages. WhatsApp is itself responsible for this and applies its own terms and privacy policy. WhatsApp may transfer data to Meta in the United States. Would you rather not use WhatsApp? Then send an e-mail or call us.

E-mail. E-mails to [email protected] are received and stored by our e-mail provider, which processes the data on our behalf.

We only use the messages, photos and data we receive from you in this way for the purposes in section 3.

We like to show what we have built. That is why we sometimes ask whether we may take photos of the completed work and use them on our website or in other publications about our business.

• We only take and use such photos if you give your permission.
• The photos we publish show no people, no house numbers, no licence plates and nothing else from which your address can be recognised. We do not state exactly where the work was done; at most we mention the town or region.
• You can withdraw your permission at any time via [email protected] or WhatsApp. We will then remove the photo from our website as soon as possible. Withdrawal does not affect use before the withdrawal.

Photos you send us yourself of your garden or the current situation are only used to prepare the quote and carry out the work. We do not publish them.

We only share your data where necessary for the purposes in section 3, or where the law requires us to.

• Service providers that process data on our behalf (processors): our hosting provider (Vercel Inc.), our e-mail provider and the accounting software we use to prepare quotes and invoices. We make the arrangements with processors that the GDPR requires.
• A bookkeeper or accountant, if we engage one for our accounts or tax returns.
• The Kadaster, for the KLIC notification of the location of the work.
• Suppliers and carriers, only if materials are delivered directly to the work address. They then receive the delivery address and, if needed, a phone number.
• Our bank and your bank, to process payments.
• The Dutch Tax Administration (Belastingdienst) and other public authorities, if the law requires us to provide data.
• In the event of a dispute or an unpaid invoice: a lawyer, debt collection agency or bailiff, insofar as necessary.

WhatsApp and OpenFreeMap are not our processors. They process data for their own purposes, under their own terms (see sections 4 and 5).

Some service providers may process data outside the EEA, for example in the United States. This applies, among others, to our hosting provider Vercel Inc. In that case we ensure that there is appropriate protection, as required by the GDPR. This may be a decision by the European Commission that the country or company provides an adequate level of protection (such as the EU-U.S. Data Privacy Framework, in which Vercel participates), or the European Commission's standard contractual clauses. Would you like to know more about these safeguards? Please contact us.

We do not keep data longer than necessary. We use the following periods.

• Questions and quote requests that do not lead to an assignment: up to 12 months after the last contact.
• The file for an assignment (arrangements, messages, drawings and photos of the situation): up to 5 years after completion and handover, so that we can properly handle questions and complaints about the work. If a complaint or dispute is still ongoing at that time, we keep the file until it has been resolved.
• Quotes, invoices, payments and other data that form part of our accounts: 7 years. This is the statutory retention period for tax purposes (Article 52 of the Dutch General State Taxes Act, Algemene wet inzake rijksbelastingen).
• Photos we publish with your permission: until you withdraw your permission or until we no longer use the photo.
• Technical website log files: for a short time, in line with the hosting provider's retention periods.

When the period ends, we delete the data or make it anonymous.

We protect your data with appropriate technical and organisational measures. For example, the website uses a secure connection (https), we protect our devices and accounts with passwords or codes, and only the person who needs the data for the work has access to it. If you notice that something is wrong with the security, or you believe your data is being misused, please let us know immediately at [email protected].

You have the following rights regarding your personal data:

• Right of access: you may know which data we hold about you and what we do with it.
• Right to rectification: if your data is incorrect, you may ask us to correct or complete it.
• Right to erasure: you may ask us to delete your data. Data we are required by law to keep, such as invoices, can only be deleted once the retention obligation has ended.
• Right to restriction: you may ask us to temporarily limit what we do with your data, for example while we assess a request from you.
• Right to data portability: you may receive data that you provided to us yourself for a contract or with your consent in a commonly used digital format, or have it sent to someone else.
• Right to object: if we use your data on the basis of our legitimate interest, you may object to this on grounds relating to your particular situation.
• Withdrawing consent: if you have given consent, for example for photos, you may withdraw it at any time.

Send your request to [email protected] or by post to our address. We will respond within one month. If your request is complex, or we receive many requests, this period may be extended by up to two months; we will let you know within the first month. A request is free of charge. Sometimes we first need to check that the request really comes from you. We will not ask you for a copy of your identity document unless this is genuinely necessary.

Are you unhappy with how we handle your data? Please let us know first, so that we can look for a solution together. You also have the right to lodge a complaint with the supervisory authority: the Dutch Data Protection Authority, Autoriteit Persoonsgegevens (www.autoriteitpersoonsgegevens.nl). If you live or work in another EU country, you may also contact the supervisory authority in that country.

We may update this privacy statement, for example if our website or the way we work changes. The date at the top shows when the text was last changed. If there are important changes that affect you, we will inform customers with an ongoing assignment separately.