1. Who we are (Controller)
SBA92, Laan van Meerdervoort 503, Den Haag, Netherlands (SIREN 95516646). Contact: SBA92@outlook.com, +31 6 4219 9357.
2. Personal data we process
- Contact & business data: name, email, phone, company, role.
- Project data: site address, drawings, photos you share, technical specs.
- Communications: messages via forms/email and related metadata.
- Device/usage data: IP, browser type, pages visited (via logs/analytics).
- Cookies: necessary, preferences and (if consented) analytics/marketing cookies.
3. Purposes & legal bases (GDPR)
- Provide quotations and perform contracts — Art. 6(1)(b).
- Respond to enquiries and manage accounts — Art. 6(1)(b)/(f) legitimate interests.
- Compliance (tax, records, HSE) — Art. 6(1)(c).
- Marketing (B2B updates) — Art. 6(1)(f); where required, consent — Art. 6(1)(a).
- Analytics & improvements — Art. 6(1)(f), with consent where required.
4. Retention
- Enquiries (no contract): up to 24 months.
- Contract/project records: up to 7 years to meet statutory obligations.
- Logs/analytics: typically 14–26 months (or as configured).
5. Sharing & processors
We share data with trusted providers strictly as needed: hosting, email, IT support, analytics, file storage, HSE/compliance advisors, subcontractors involved in a project. We sign data processing agreements and require appropriate safeguards.
6. International transfers
Where data is transferred outside the EEA, we use lawful safeguards such as the European Commission’s Standard Contractual Clauses and apply additional measures where appropriate.
7. Your rights
You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent at any time (without affecting prior processing). To exercise, contact SBA92@outlook.com.
You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
8. Cookies
- Strictly necessary — site security and core features (no consent).
- Preferences — remember choices (consent where required).
- Analytics/marketing — measure usage and campaigns (consent before setting).
9. Security
We implement technical and organisational measures appropriate to risk (access controls, encryption in transit, least-privilege, backups). No method is 100% secure; we aim to minimise risk and respond to incidents promptly.
10. Children
Our Services are not directed to children under 16 and we do not knowingly collect their data.
11. Changes
We may update this policy from time to time. Material changes will be highlighted on this page. Continued use of our Services after an update constitutes acceptance.
12. Contact
Questions or requests: SBA92@outlook.com · +31 6 4219 9357 · Laan van Meerdervoort 503, Den Haag, NL.