Privacyverklaring

Privacy statement

Placeholder. Replace before go-live. This statement is a GDPR-compliant template. Review and adjust with your privacy advisor before publication. {{TODO_DPO_REVIEW}}

Controller

Consulereit, KVK 00000000, acts as data controller for the personal data processed via this website and in the course of providing consulting services. For privacy enquiries contact contact@consulereit.nl. {{TODO_DPO_CONTACT_IF_APPLICABLE}}

What we collect and why

Contact form data, name, email address, organisation (optional), and the message you send. Processed on the basis of your explicit request (Article 6(1)(b) GDPR: steps at the request of the data subject prior to entering into a contract). Retained for up to 24 months from last contact, then deleted.
Email correspondence, any data you send by email. Retained in line with the above, or longer if required for a legal obligation (Dutch tax law: 7 years for invoicing data).
Engagement data, during a paid engagement, the types of personal data processed are set out in a separate data processing agreement (verwerkersovereenkomst) per client.

Analytics and cookies

This website does not set tracking cookies. No analytics product is enabled by default. If privacy-friendly analytics are added in the future (Plausible, which does not use cookies and does not collect personal data), this statement will be updated accordingly.

Sub-processors

Hosting is provided by Cloudflare, Inc. Email is processed via Google Workspace. Both parties act as sub-processors for communications data sent to Consulereit. {{TODO_SUBPROCESSOR_LIST}}

Your rights

Under the GDPR you have the right to access, rectify, erase, and port your personal data, as well as the right to object to processing and to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). Requests can be made via contact@consulereit.nl and will be handled within 30 days.

Security

Personal data held by Consulereit is protected with appropriate technical and organisational measures, including encryption in transit and at rest, access controls, and documented retention schedules.

Laatst bijgewerkt: {{TODO_DATE}}