Privacy Policy

Last updated: 31 October 2025

This privacy statement explains how Dutch Rivièra (Dragonder 11 C, 5554 GM Valkenswaard, Chamber of Commerce no. 17168340, info@dutch-riviera.nl)

processes personal data when the website lounge-bank.nl (including any subpages/subdomains) is visited or when contact is made.

Scope
Who is responsible?
What data do we process?
For what purposes and on what legal basis do we process your data (GDPR)?
How do we obtain your data?
With whom do we share data (categories of recipients)?
Transfers outside the EEA
Retention periods
Cookies & similar technologies
Security
No special categories of personal data / no automated decision-making
Your rights
Questions or complaints
Changes

1. Scope

This privacy statement applies to all processing of personal data in the context of our online services and communication channels (website, email, telephone).

Personal data means any information relating to an identified or identifiable natural person (such as name, address, email, IP address, order details).

2. Who is responsible?

Controller within the meaning of the GDPR:
Dutch Rivièra
Dragonder 11 C, 5554 GM Valkenswaard
Chamber of Commerce: 17168340
Email: info@dutch-riviera.nl

3. What data do we process?

Depending on usage and context, we process, among others:

Master and contact data: name (and salutation), (delivery) address, email address, telephone number
Transaction and contract data: quotations, orders, invoice and payment data
Communication data: content of contact forms, emails, telephone notes
Technical usage data: IP address, timestamps, URL/referrer, device/browser data, server log files
Media data: photos/references (only with consent)

4. For what purposes and on what legal basis do we process your data (GDPR)?

We only process personal data if a legal basis under Article 6 GDPR applies:

Performance of a contract / pre-contractual phase (Art. 6(1)(b) GDPR): customer contact, quotations, order processing, delivery, after-sales
Legal obligation (Art. 6(1)(c) GDPR): tax and commercial record-keeping obligations
Consent (Art. 6(1)(a) GDPR): e.g. publication of customer photos, use of non-essential cookies/analytics. Consent can be withdrawn at any time with future effect
Legitimate interest (Art. 6(1)(f) GDPR): business operations, system security, fraud prevention, website optimization. A balancing test is carried out and we process no more data than necessary

5. How do we obtain your data?

Data is generally obtained directly from you when you visit the website, fill out forms, or contact us via email or telephone. Technical data is generated automatically when pages are loaded (server log files).

6. With whom do we share data (categories of recipients)?

Personal data is only shared if necessary or if there is a legal basis. Categories include hosting/IT service providers, communication and email services, payment and accounting services, logistics/transport partners, and analytics/marketing services.

We conclude data processing agreements (Art. 28 GDPR) with parties processing data on our behalf.

7. Transfers outside the EEA

Processing generally takes place within the European Economic Area (EEA). If (parts of) services process data in third countries (e.g. the United States), we ensure an adequate level of protection via the EU-US Data Privacy Framework (where applicable) and/or standard contractual clauses (SCCs) of the European Commission, supplemented with appropriate safeguards.

8. Retention periods

We do not retain personal data longer than necessary or legally required:

Invoice/accounting data: generally 7 years (tax retention obligation)
Customer and contact inquiries: up to 2 years after the last contact
Server log files: generally up to 30 days (security/error analysis)
Photos/references: until consent is withdrawn

If longer or different legal retention periods apply, we follow those.

9. Cookies & similar technologies

Our website uses cookies and similar technologies. You can set and change your preferences via the cookie settings.

Functional/necessary cookies: required for website functionality (e.g. forms and security). Placed without prior consent; legal basis: legitimate interest and/or necessity for the service
Analytical cookies (e.g. Google Analytics 4): only placed after consent. IP addresses are anonymized/shortened where possible
Marketing/advertising cookies (if used): only after consent

Details per cookie (purpose, type, retention) are explained in the cookie settings or separate cookie policy.

10. Security

We take appropriate technical and organizational measures to protect personal data against loss or unlawful processing, including access controls, encryption (TLS/SSL), backups, and role-based access policies. Processors are contractually bound to similar security requirements.

11. No special categories of personal data / no automated decision-making

We do not process special categories of personal data (such as health or religion). No automated decision-making or profiling takes place within the meaning of the GDPR.

12. Your rights

Under the GDPR, you have the following rights:

Right to information and access
Right to rectification (correction/supplementation)
Right to erasure (“right to be forgotten”)
Right to restriction of processing
Right to data portability
Right to object to processing based on legitimate interest, especially for direct marketing
Right to withdraw consent (with future effect)

Exercising your rights: send your request to info@dutch-riviera.nl.

Requests are usually handled within 30 days. In complex cases, this may be extended to 60 days. We may request additional information to verify your identity.

13. Questions or complaints

Questions about this privacy statement or data processing can be sent to info@dutch-riviera.nl.

You also have the right to file a complaint with the Dutch Data Protection Authority:
https://www.autoriteitpersoonsgegevens.nl

14. Changes

This privacy statement may be updated to reflect changes in laws or processing activities. The most recent version is always available on our website.