Privacy statement

This statement describes how MVBouw B.V. uses personal data in connection with enquiries, renovation projects, administration and communication.

1. Controller and contact

MVBouw B.V. · Roosmarijnhof 5, 1115 DV Duivendrecht
info@mvbouw.nl · 020 261 7124 · mvbouw.nl

For questions about personal data or requests concerning your privacy rights, you can contact us at this e-mail address.

You may lodge a complaint directly with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): autoriteitpersoonsgegevens.nl. You do not have to go through our complaints procedure first. We update this statement when changes occur; the version shows the date.

2. What data we process

We process the data needed for your enquiry or contract: name, contact details, project address, quote details, correspondence, drawings, floor plans, photos, payment details and invoices. For business contracts, we also process the contact details of representatives. For website security, technical data such as IP address, time and error messages may be needed.

For a review, we process the submitted review and the details you provide for publication. Please do not send identity documents, medical data or other sensitive information if they are not needed. Where possible, make people and private belongings unrecognisable in project photos.

3. Purposes and legal bases

Enquiry and contract. We use data to prepare a quote, schedule appointments, carry out the work and provide aftercare. The legal basis is taking steps at your request prior to entering into a contract, or performing that contract. For contact persons of business clients, our legitimate interest is a workable business relationship.

Administration. We process data for tax records and other legal obligations on the basis of the law. For necessary record-keeping, handling disputes and security, we rely on legitimate interest. In doing so, we take your privacy into account and limit the processing to what is necessary.

Reviews and publicity photos. We publish reviews you submit yourself and project photos for our website or social media on the basis of your separate consent. Consent to publication is not a condition for a quote or contract. You can withdraw this consent via info@mvbouw.nl; this does not affect the lawfulness of processing carried out before the withdrawal.

Data for the performance of a contract is sometimes necessary to prepare or carry out the work. If you do not provide it, we will explain which part of your enquiry we are therefore unable to handle. We do not use your data for solely automated decisions with legal effects or similarly significant effects.

4. Source of data

We receive data primarily from you. If you submit an enquiry via the QR code on our company van, we store the campaign tag with the enquiry so that we can recognise its source. This tag does not contain a unique visitor code. The same retention period applies as for the enquiry. If an enquiry comes in via an intermediary platform, your authorised representative or a project partner, we only use the data necessary for that enquiry and inform you where it came from. Existing public Google reviews may also be shown on the site, with the source stated. The legal basis for this is our legitimate interest in informing customers about experiences with our work; we limit ourselves to the review data and handle objections to republication via info@mvbouw.nl.

5. Retention periods

• Enquiries without a contract: a maximum of 12 months after the last substantive contact, unless a specific legal obligation or an ongoing dispute makes longer retention necessary.
• Project file: for the duration of the project and thereafter for as long as the relevant data is needed for aftercare, guarantee or legal claims. The period is determined by the applicable guarantee and limitation periods and any proceedings. We periodically assess which data is still needed; the entire file is not kept for the same length of time without necessity.
• Tax records: usually 7 years; 10 years for data for which tax law prescribes that longer retention obligation, calculated from the legally relevant starting point.
• Publications: we keep and publish identifiable reviews and promotional photos for as long as the consent and the purpose of publication continue. If consent is withdrawn, we remove them from our own publication channels. Limited proof of consent or withdrawal may need to be retained for accountability or in case of a dispute.
• Technical data: only for as long as necessary to investigate errors, incidents and misuse. Data that is no longer needed is deleted or anonymised.

6. Recipients and processing outside the EEA

We only share necessary data with the subcontractors and suppliers involved, administrative service providers, e-mail, CRM, storage and hosting services and, where necessary, advisers, insurers or competent authorities. We do not sell personal data. We conclude data processing agreements with parties that act as processors on our behalf. A service provider that is an independent controller also has its own privacy obligations.

When international services are used, processing may take place outside the European Economic Area. This is only permitted with a valid transfer mechanism, for example an applicable adequacy decision or European standard contractual clauses with additional safeguards where necessary. You can request information about the recipients, countries and safeguards involved via info@mvbouw.nl. If you contact us via WhatsApp or social media, the provider also processes data in accordance with its own privacy statement.

7. Security and cookies

We limit access to enquiries and attachments to authorised persons and use secure connections. Google Analytics is only loaded if you give your consent in the cookie notice. We then measure page visits, successful quote requests and clicks on contact links. Names, phone numbers, e-mail addresses, project descriptions and files from forms are not sent to Google Analytics. Advertising features are disabled. You can change or withdraw your choice via Cookie settings. Your choice is stored locally in your browser for a maximum of 180 days; Analytics cookies are valid for a maximum of 180 days. Without consent, we do not load Google Analytics. Google processes technical visit data in this context; more information: policies.google.com/privacy.

Fonts are loaded from our own server; no data is sent to Google or other parties for this. WhatsApp and social media only open after you click a link. Enquiries and attachments are processed and stored via our website, hosting and e-mail services.

8. Your rights and complaints

Within the legal conditions, you can request access to, rectification, erasure, restriction or portability of your data, object to processing and withdraw consent. E-mail info@mvbouw.nl. We will in principle respond within one month. If a permitted extension applies, we will inform you of the reason within that month. We verify your identity in an appropriate manner and do not routinely ask for a full copy of an identity document.