Privacy policy

1. Who are we?

The data controller is:

2. What data do we process?

Depending on how you interact with our website, we collect the following data:

• Contact and inquiries: name, email address, phone number, attachments (CV, photos), the content of your message.
• Orders: name, billing and delivery address, email, phone, order history, payment data (processed via MultiSafepay; we never receive card details).
• Account: email address, user role, linked vehicle data (license plate, VIN, mileage, service history).
• Service & maintenance requests: vehicle data, description of the issue or requested service, photos.
• Job applications: name, contact details, motivation, CV, optional motivation video.
• Newsletter: email address, language preference, subscription and unsubscribe date, and for each newsletter whether you open it and which links you click (see "Newsletter: opens and clicks" below).
• Telephone calls: the recording, your phone number, date, time and duration, and an automatically created transcript with a short summary (see "Telephone calls" below).
• Technical data: IP address, browser type, OS and referrer (security and error diagnostics only).

3. Why do we process this data?

We process your data exclusively for the following purposes:

Newsletter: opens and clicks

Our newsletter contains a small invisible image, and its links run through our email provider Resend. This lets us see, per newsletter, whether you open it and which links you click.

Why: to learn which topics interest you and adjust the newsletter accordingly, and to recognise addresses that no longer work. We do not use this for advertising elsewhere and do not share it with anyone.

Legal basis: the consent you give when subscribing to the newsletter (Article 6(1)(a) GDPR).

Prefer not to be measured? Turn off automatic image loading in your email program; we then cannot measure opens. If you do not want any measurement, unsubscribe via the link at the bottom of every newsletter.

Telephone calls

When you call our number in Groningen (050), we record the call. You hear an announcement about this beforehand. We do not record calls in which we call you, or calls with our number in Menaam (0518).

Why: to record agreements about, for example, repairs, quotes and deliveries, to help you quickly with a follow-up question without you having to explain everything again, and to listen back to what was agreed if anything is unclear. We also keep track of which questions customers often ask, without your name, number or other details that identify you, so that we can answer those questions better, including through the online assistant on our website. We do not use recordings to assess our staff.

How: the transcript and a short summary are created automatically using speech recognition, by our telephony provider on its own servers in the Netherlands. To determine what the call was about, the transcript is then analysed with the help of AI (Anthropic), which processes the text solely on our behalf and does not use it to train its own models. What we keep from that analysis (the topic and the question in general terms) contains no name or number. Only management can listen back to recordings.

Legal basis: our legitimate interest in reliably recording agreements and serving you well (Article 6(1)(f) GDPR).

4. How long do we retain your data?

• Order data: 7 years (Dutch tax retention requirement).
• Account data: until you delete your account, then up to 30 days in backups.
• Job applications: up to 4 weeks after the procedure, unless you give consent for longer retention (max 1 year).
• Contact forms: up to 12 months.
• Newsletter: until you unsubscribe.
• Vehicle service history: as long as you own the vehicle or a service agreement is active.
• Call recordings, transcripts and summaries: 6 months, then deleted automatically. If a dispute or complaint about the call arises within that period, we keep the recording until it is resolved. The overview of questions asked contains no personal data and is kept longer.

5. With whom do we share your data?

We only share data with parties that need it to provide our services. We have data-processing agreements with all of them.

• Powerall — our back-office for customer and order administration (NL/EU).
• Supabase — web hosting, database and authentication (EU region).
• MultiSafepay — payment processing (NL).
• Resend — sending transactional and marketing emails (EU).
• DHL — delivery of your order.
• PDOK Locatieserver — postcode address lookup via the Dutch government (BZK). When you fill in a postcode/house number we send these to PDOK to autofill your address. No account linking, no tracking.
• RDW — vehicle lookup via license plate (Dutch Vehicle Authority). When using the plate-lookup feature we send the plate to the RDW to retrieve make, model and year. The plate itself is not stored unless you link it to your account.
• Google Maps — map view of our location via the Google Maps Embed API (US / Google LLC). When the map loads, Google may set a limited number of cookies for functional use. Only the pages that embed the map (homepage and contact) send data to Google.
• Google Analytics 4 — visitor statistics to improve the website (US / Google LLC). IP addresses are anonymised and the script is only loaded after you give consent via the cookie banner.
• Freez.it — our telephony provider; creates the call recording, the automatic transcript and the summary (through Voys, on its own servers in the Netherlands), and keeps the recording for at most 1 month.
• Anthropic — analyses call transcripts (topic and question); text only, no audio (US, based on the European Commission's standard contractual clauses).
• 404 Collective — development and technical management of our website and systems, including transcribing telephone calls (NL).
• Tax authority and accountant — for tax compliance.

We never sell your data and do not share it with third parties for marketing purposes without your explicit consent.

6. Cookies

We use functional cookies to make the website work (cart, language preference, login session). For analytics or marketing cookies we ask your consent in advance via the cookie banner. Read more in our cookie policy.

7. Your rights

Under the GDPR you have the following rights:

• Access — request which data we hold about you.
• Rectification — have inaccurate data corrected.
• Erasure — request deletion of your data.
• Restriction — restrict processing of your data.
• Data portability — receive your data in a common format.
• Objection — object to processing on the basis of legitimate interest.
• Withdraw consent — for newsletter or non-essential cookies, at any time.

8. Filing a complaint

Have a complaint about how we handle your data? Please contact us first. You also have the right to file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

9. Changes

We may update this policy from time to time. The most recent version is always on this page. We will inform you of substantial changes by email or a notice on the website.