1. What data do we collect?
- Contact details: name, e-mail, phone, (project) address
- Project information and uploads (e.g., photos/PDFs)
- Technical: IP address and basic web statistics (anonymised where possible)
We do not process special categories of personal data unless strictly necessary and explicitly provided by you.
2. Purposes & legal bases
- Contact & quotes — performance of (pre-)contractual measures (Art. 6(1)(b) GDPR)
- Preparation & execution — legitimate interests / contract (Art. 6(1)(f)/(b) GDPR)
- Administration & tax — legal obligation (Art. 6(1)(c) GDPR)
- News/marketing — consent only (Art. 6(1)(a) GDPR), always opt-out
- Analytics/marketing cookies — consent only (Art. 6(1)(a) GDPR)
3. Security
- HTTPS/HSTS, strict security headers and access control (least privilege)
- Encryption in transit; limited storage locations with logging
- Backups and procedures for incident response and breach notification
4. Retention periods
| Type | Period |
|---|---|
| Quotes & correspondence | up to 2 years after last contact |
| Project files | up to 5 years post handover (or longer for warranty) |
| Financial records | 7 years (statutory tax duty) |
| Log files | max. 90 days |
5. Sharing with processors/third parties
- Hosting/infrastructure (own server/CyberPanel); data processing agreement
- E-mail (smaling.net); data processing agreement
- Analytics (optional GA4 with IP masking; consent only)
- Bank (ABN AMRO) for payments/invoicing
No sale of personal data. Transfers outside EU/EEA only with appropriate safeguards (e.g., EU SCCs/adequacy). List of (sub)processors available on request.
6. Cookies
We use functional cookies and — with your consent — analytics/marketing cookies. Manage your preferences here: open cookie settings.
| Category | Purpose | Example |
|---|---|---|
| Functional (required) | Core features and security | session/CSRF |
| Analytics (opt-in) | Usage insights | GA4 with IP masking |
| Marketing (opt-in) | Personalisation/ads | pixels/remarketing (if used) |
7. Your GDPR rights
- Right of access, rectification and erasure
- Right to restriction, objection and data portability
- Withdraw consent at any time (no retroactive effect)
- Requests: e-mail raymond@smaling.net or use the contact page
- We respond within 30 days (extendable by up to 2 months for complexity). We may ask for additional identification.
- Complain to the Dutch DPA: Autoriteit Persoonsgegevens
8. Minors
Our services are not primarily aimed at children under 16. If you believe data was collected without parental consent, please contact us; we will delete such data where appropriate.
9. Changes
The most recent version is available on this page. 21-08-2025.
10. Contact
Smaling Service Monteur
Oranjeweg 120, 6991 WV Rheden
Tel: +31 (0)6 134 79960 • +31 (0)26 234 0830
E-mail: raymond@smaling.net