Privacy statement

Article 1. Who processes your data

1. 1.1. The controller is Soleca B.V., trading as Soleca Renovaties, registered with the Dutch Chamber of Commerce under number 90417844.
2. 1.2. Our address is Tinnegieterstraat 7, 3194 AL Hoogvliet, the Netherlands. You can reach us at info@soleca.nl and on 085 080 5117, Monday to Friday from 08:30 to 17:00.
3. 1.3. We have not appointed a data protection officer. Privacy questions arrive at the email address above and are handled internally.

Article 2. What data we receive from you

1. 2.1. Through the quote form we receive: your name, postcode, house number, email address and telephone number, the item or items your enquiry is about, the quantity, the property type, the year the property was built and any notes you add.
2. 2.2. Alongside the form we also record that and when you ticked the box confirming we may contact you, which language you were using the website in, and which page you made the enquiry from. If you arrived through an advert or a newsletter, the associated campaign parameters come with it.
3. 2.3. From your postcode and house number we look up the matching street, town, municipality and province, so we can route your enquiry to the right adviser and service area. We do not ask you for these separately and we store them with your enquiry.
4. 2.4. If you call us, email us or send us a message on WhatsApp, we process the data you share with us in that conversation.
5. 2.5. On every visit our server briefly processes your IP address, solely to limit abuse of the form. It lets us count how many enquiries arrive in quick succession from the same IP address. This happens in the server's memory, is not written to a file or database, and disappears within a minute.
6. 2.6. We do not ask you for data we do not need, and we do not ask for special category data. Please do not put medical or other sensitive information in the notes field.

Article 3. What we use your data for, and on what basis

1. 3.1. To answer your enquiry, arrange an appointment, take measurements and issue a quotation. Basis: your request and the preparation and performance of the contract between you and us (article 6(1)(b) GDPR).
2. 3.2. To reach you during and after the work about scheduling, installation, handover and any warranty. Basis: performance of the contract.
3. 3.3. To keep our records and invoicing. Basis: compliance with a legal obligation (article 6(1)(c) GDPR), including the Dutch statutory retention period for financial records.
4. 3.4. To limit abuse of the quote form and to recognise duplicate enquiries. Basis: our legitimate interest in a working website that is not being misused (article 6(1)(f) GDPR).
5. 3.5. To measure how the website is used and which adverts lead to an enquiry. Basis: your consent only (article 6(1)(a) GDPR). If you do not give it, we measure nothing and the website continues to work normally.
6. 3.6. We do not use your data to make automated decisions about you and we do not build profiles of you. We do not sell your data and we do not send a marketing newsletter on the strength of an enquiry.

Article 4. Cookies and measurement

1. 4.1. We place necessary storage without consent: one cookie that records your own cookie choice, so that we can respect it and you are not asked again on every page.
2. 4.2. For statistics and advertising we use Google Tag Manager. We only load it after you have consented. If you refuse, or make no choice, Google Tag Manager is not loaded and your browser does not contact Google for that purpose.
3. 4.3. You can change or withdraw your choice at any time via Cookie preferences at the foot of every page. If you withdraw consent, we delete the associated Google cookies from your browser and stop measuring.
4. 4.4. Our cookie policy lists the name, purpose and lifetime of each cookie.

Article 5. Google Maps on the contact page

1. 5.1. Our contact page carries a Google Maps map showing where our business is located. Google loads that map as soon as you open the page.
2. 5.2. In doing so Google receives your IP address, information about your browser and device, and any Google cookies you already hold. We do not receive that data and we do not use the map to determine your location.
3. 5.3. We have chosen to show this map directly rather than place it behind the cookie notice, so that visitors can always find our premises. If you would rather avoid this contact with Google, use the contact details without visiting that page, or block Google scripts in your browser. Our address also appears as text in the footer of every page.
4. 5.4. Google's privacy policy applies to the use of Google Maps.

• Google's privacy policy

Article 6. Who we share your data with

1. 6.1. We share your data only with parties we need in order to handle your enquiry, carry out our work or comply with the law. With parties that process data on our behalf we make written agreements on confidentiality and security.
2. 6.2. To carry out the work we may share your name, address and the details of the job with the supplier or manufacturer of the products to be delivered and with the fitters doing the work. We share no more than is necessary.
3. 6.3. Beyond that we only provide your data to third parties where we are legally obliged to, or where it is necessary to exercise or defend a right in a dispute.
4. 6.4. The table below lists which parties are involved in this website and for what. You can ask us for an up-to-date list of the parties that process data on our behalf.

Article 7. Transfers outside the European Economic Area

1. 7.1. We keep your data inside the European Economic Area wherever we can.
2. 7.2. If you consent to statistics and advertising, data is processed by Google. The map on the contact page also runs through Google. Google may process data in the United States. Google participates in the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision.
3. 7.3. The email that forwards your enquiry to our own inbox runs through a provider in the United States. That transfer relies on the European Commission's standard contractual clauses.
4. 7.4. If you would like to know which safeguards apply to a specific party, ask us for a copy of the relevant agreements.

Article 8. How long we keep your data

1. 8.1. We do not keep your data longer than is necessary for the purpose we received it for.
2. 8.2. An enquiry that does not lead to a job is kept for a maximum of 24 months after the last contact, so that if you come back to us we know what we advised and calculated before.
3. 8.3. If your enquiry does lead to a job, we keep the file for the duration of the contract and afterwards for as long as we need it for warranty, service and handling any complaints or claims.
4. 8.4. Data that forms part of our financial records is kept for seven years. That is a statutory retention period and we cannot shorten it.
5. 8.5. We keep your cookie choice for six months. After that we ask again.
6. 8.6. We do not store your IP address: it is only used briefly in memory to limit abuse of the form.

Article 9. How we protect your data

1. 9.1. The whole website runs over an encrypted connection (https), including the quote form.
2. 9.2. Access to enquiries is limited to the staff who need to handle them.
3. 9.3. The keys the website uses to talk to our CRM and email services exist only on the server and cannot be read or reached from your browser.
4. 9.4. If you notice anything that looks insecure to you, please tell us at the email address in article 1. We take reports like that seriously and act on them straight away.

Article 10. Your rights

1. 10.1. You may ask us what data we hold about you and receive a copy of it (right of access).
2. 10.2. You may have inaccurate or incomplete data corrected or completed (right to rectification).
3. 10.3. You may ask us to delete your data, unless we still need it to perform a contract or to meet a statutory retention obligation (right to erasure).
4. 10.4. You may ask us to restrict processing, and you may object to processing based on our legitimate interest.
5. 10.5. You may receive the data you provided to us in a common file format, or have it transferred (right to data portability).
6. 10.6. If you have given us consent, you may withdraw it at any time. Doing so is as easy as giving it and costs you nothing. For cookies, use Cookie preferences at the foot of every page.
7. 10.7. To exercise any of these rights, send a message to info@soleca.nl. We respond within one month. To avoid giving data to the wrong person, we may ask you to describe your enquiry so that we can find it. We will never ask you to email a copy of your identity document.

Article 11. Complaints to the Dutch Data Protection Authority

1. 11.1. If you are unhappy with how we handle your data, please tell us first. We would much rather resolve it with you.
2. 11.2. You also always have the right to lodge a complaint with the Autoriteit Persoonsgegevens, the Dutch data protection authority.

• Lodge a complaint with the Autoriteit Persoonsgegevens

Article 12. Changes to this statement

1. 12.1. If the website changes, or the parties we work with change, we update this statement. The version you are reading is shown at the top of this page.
2. 12.2. If we change the cookie categories we ask consent for, we ask for your choice again.