Who is responsible?
Dadelsteen (KvK [KvK number], VAT [VAT number]), located at Johan de Wittlaan 7, 2517 JT Den Haag, The Netherlands, is the data controller under the General Data Protection Regulation (GDPR).
You can reach us at info@dadelsteen.nl.
What data do we process?
Depending on how you use our website and services, we process:
- Contact details: name, email address, phone number, company name.
- Order and payment details: delivery and billing address, order history and payment status (payment details themselves are handled by our payment provider).
- Demo and contact requests: the information you enter in our forms.
- Technical data: IP address, device and browser data and browsing behaviour, only where you consent via the cookie banner.
Purposes and legal bases
We process personal data on the following legal bases:
- Performance of a contract: processing, delivering, installing and invoicing orders and handling warranty claims.
- Legal obligation: for example the seven-year tax retention requirement.
- Consent: analytics and marketing cookies, and sending newsletters. You can withdraw consent at any time.
- Legitimate interest: security, fraud prevention and improving our service.
Sharing with third parties
We only share data with parties needed to deliver our service, such as the payment provider, carriers and installers, hosting, email delivery and accounting. We have data processing agreements with these processors. We never sell your data.
Where data is processed outside the European Economic Area, we ensure appropriate safeguards such as standard contractual clauses.
Retention periods
We do not keep data longer than necessary. Order and invoice data is kept for seven years; contact requests for up to two years after being handled; account data for as long as your account exists.
Your rights
You have the right to access, rectification, erasure, restriction of processing, objection and data portability. Send a request to info@dadelsteen.nl; we respond within one month.
Security
We take appropriate technical and organisational measures, such as encrypted connections (HTTPS), access control and regular updates.
Making a complaint
Have a complaint about how we process your data? Please contact us first. You also always have the right to lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).
