Privacy policy

1. Who are we?

The data controller is:

2. What data do we process?

Depending on how you interact with our website, we collect the following data:

• Contact and inquiries: name, email address, phone number, attachments (CV, photos), the content of your message.
• Orders: name, billing and delivery address, email, phone, order history, payment data (processed via MultiSafepay; we never receive card details).
• Account: email address, user role, linked vehicle data (license plate, VIN, mileage, service history).
• Service & maintenance requests: vehicle data, description of the issue or requested service, photos.
• Job applications: name, contact details, motivation, CV, optional motivation video.
• Newsletter: email address, language preference, subscription and unsubscribe date.
• Technical data: IP address, browser type, OS and referrer (security and error diagnostics only).

3. Why do we process this data?

We process your data exclusively for the following purposes:

4. How long do we retain your data?

• Order data: 7 years (Dutch tax retention requirement).
• Account data: until you delete your account, then up to 30 days in backups.
• Job applications: up to 4 weeks after the procedure, unless you give consent for longer retention (max 1 year).
• Contact forms: up to 12 months.
• Newsletter: until you unsubscribe.
• Vehicle service history: as long as you own the vehicle or a service agreement is active.

5. With whom do we share your data?

We only share data with parties that need it to provide our services. We have data-processing agreements with all of them.

• Powerall — our back-office for customer and order administration (NL/EU).
• Supabase — web hosting, database and authentication (EU region).
• MultiSafepay — payment processing (NL).
• Resend — sending transactional and marketing emails (EU).
• DHL — delivery of your order.
• PDOK Locatieserver — postcode address lookup via the Dutch government (BZK). When you fill in a postcode/house number we send these to PDOK to autofill your address. No account linking, no tracking.
• RDW — vehicle lookup via license plate (Dutch Vehicle Authority). When using the plate-lookup feature we send the plate to the RDW to retrieve make, model and year. The plate itself is not stored unless you link it to your account.
• Google Maps — map view of our location via the Google Maps Embed API (US / Google LLC). When the map loads, Google may set a limited number of cookies for functional use. Only the pages that embed the map (homepage and contact) send data to Google.
• Google Analytics 4 — visitor statistics to improve the website (US / Google LLC). IP addresses are anonymised and the script is only loaded after you give consent via the cookie banner.
• Tax authority and accountant — for tax compliance.

We never sell your data and do not share it with third parties for marketing purposes without your explicit consent.

6. Cookies

We use functional cookies to make the website work (cart, language preference, login session). For analytics or marketing cookies we ask your consent in advance via the cookie banner. Read more in our cookie policy.

7. Your rights

Under the GDPR you have the following rights:

• Access — request which data we hold about you.
• Rectification — have inaccurate data corrected.
• Erasure — request deletion of your data.
• Restriction — restrict processing of your data.
• Data portability — receive your data in a common format.
• Objection — object to processing on the basis of legitimate interest.
• Withdraw consent — for newsletter or non-essential cookies, at any time.

8. Filing a complaint

Have a complaint about how we handle your data? Please contact us first. You also have the right to file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

9. Changes

We may update this policy from time to time. The most recent version is always on this page. We will inform you of substantial changes by email or a notice on the website.