Your data, plainly explained.

01Who is responsible?

The controller is Damian Wanowicz, owner of the sole proprietorship Wanowicz Bouw, which also trades as Vakkern Bouw. It is one and the same business with one KVK number: 74299174. Business address: Kamplaan 13A, 8315 AN Luttelgeest, the Netherlands.

Questions about privacy can be sent to wanowiczdamian@gmail.com or asked by phone on 06 57 16 95 31.

02Which data do I process?

• Via the contact form: name, email address, phone number (optional), company name (business enquiries), place of work, type of work, your message and the language of the website. With private enquiries you can also attach photos or a PDF.
• When the form is sent: technical data such as your IP address and browser details. Netlify uses these among other things to detect spam. The website itself keeps your IP address only briefly in working memory, to prevent misuse of the form, and does not store it.
• Via email, phone or WhatsApp: your phone number or email address and whatever you share with me yourself.
• On every visit to the website: technical data such as IP address, browser type, requested page and time, in the server logs of the hosting provider Netlify, for security and proper operation of the website.

03For what purpose and on what legal basis?

You are not obliged to provide any data, but without contact details I cannot answer your enquiry. I do not use your data for newsletters or advertising, I do not sell it, and I do not make automated decisions.

• Answering your enquiry and preparing a quote — at your request, prior to a contract (Art. 6(1)(b) GDPR).
• Carrying out an assignment — performance of the contract (Art. 6(1)(b) GDPR).
• Maintaining business contacts and protecting the website and form against spam and misuse — legitimate interest (Art. 6(1)(f) GDPR).
• Records after an assignment — legal obligation, such as the tax retention obligation (Art. 6(1)(c) GDPR).

04Who is data shared with?

Other parties receive your data only where the law requires it. I do not sell or rent out personal data.

• Netlify, Inc. (United States) — hosting of the website and the contact form (Netlify Forms). Netlify stores the form submissions and attachments and notifies me by email. Netlify processes this data on my behalf, under the Data Processing Agreement that forms part of Netlify’s terms. Netlify uses its own sub-processors, among others for storage, spam filtering (Akismet) and sending email notifications; the current list is in Netlify’s Trust Center.
• Google (Gmail) — form notifications and emails arrive in my Gmail account and I reply through Gmail. This is a regular Gmail account, not a Google Workspace business account. There is therefore no separate data processing agreement with Google; Google processes this data under its own terms and privacy policy.
• WhatsApp — if you contact me via WhatsApp. Messages are end-to-end encrypted, but WhatsApp (Meta) processes phone numbers and usage data, among other things, under its own terms and privacy policy.
• My accountant — only once there is an assignment and I have issued an invoice for it: the details on the invoice and in the related business records, for bookkeeping and tax returns. Enquiries that do not lead to an assignment are not shared with the accountant.

05Transfers outside the EEA

Netlify stores form submissions in the United States. Netlify is certified under the EU-U.S. Data Privacy Framework; Netlify’s Data Processing Agreement also contains the European Commission’s standard contractual clauses in case that framework does not (or no longer) apply.

Google and WhatsApp may also process data outside the EEA. They describe the legal basis for this in their own privacy policies.

06Attachments: please be careful

Photos and PDFs you send through the form are stored at Netlify. My overview at Netlify and the email notification contain a direct link to each attachment. Anyone who has such a link can open the file without logging in. Attachments are therefore not shielded the way files in a secure, personal environment are.

Even after I have deleted a submission at Netlify, an attachment may remain reachable through its direct link for some time. Netlify does not guarantee that such a link stops working immediately after deletion.

Please do not send ID documents, citizen service (BSN) numbers, bank details, medical information or other confidential or sensitive documents. Photos taken with a phone can contain the location where they were taken. If you want to share something confidential, contact me first so we can agree on another way.

07How long do I keep your data?

• Form submissions and attachments at Netlify: I review submissions every month. After moving the information I need into my regular correspondence (Gmail), I delete the submission and its attachments, no later than 2 months after receipt. See above about direct links to attachments.
• Enquiries by form, email (Gmail) or WhatsApp that do not lead to an assignment: no longer than 12 months after the last contact, unless there is a legitimate reason to keep them longer, for example an ongoing dispute.
• Invoices and other documents that are part of the business records, such as contracts and quotes that lead to an assignment: as a rule 7 years, under the Dutch tax retention obligation. Where the law requires a longer period in a particular case, I keep them for that period.
• Other documents about assignments carried out, for example for warranty or liability: a different period may apply where there is a legal basis for it. I keep them no longer than needed for that purpose.
• Technical data in Netlify’s server logs and data that Google and WhatsApp themselves keep about the use of their services: according to those parties’ retention policies, which I have no control over. Copies may also remain with these parties for some time after I delete something, for example in backups.

08Cookies

This website does not place cookies and does not use analytics or advertising services or social media plugins, which is why there is no cookie banner. Fonts are served by this website itself, without requests to third parties.

09Security

The website uses a secure connection (HTTPS). Attachments are checked for type and size in your browser when sending, and the form has measures against spam. For the limits that apply to attachments, see above.

10Your rights

You have the right to access, rectify and erase your data, and to restrict or object to its processing. You may also ask for your data to be transferred. Send your request to wanowiczdamian@gmail.com; you will receive an answer within one month.

Do you have a complaint about how your data is handled? Please let me know. You can also lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

11Changes

This privacy policy may be updated, for example when the website or the services it uses change. The date at the top shows the latest version. In case of differences between language versions, the Dutch version prevails.