Contents
1. Controller
Smaling Service Monteur acts as the controller. No Data Protection Officer (DPO) has been appointed.
Smaling Service Monteur
Oranjeweg 120, 6991 WV Rheden
Tel: +31 (0)6 134 79960 • +31 (0)26 234 0830
E-mail: raymond@smaling.net
2. What data do we collect?
- Identification & contact: name, e-mail, phone, (project) address.
- Project information and attachments (e.g., photos/PDFs you provide).
- Device/technical: IP address, user-agent, basic web statistics (anonymised where possible).
- Administrative/financial: invoicing and payment data (only for performance and legal duties).
We do not process special categories of personal data unless strictly necessary and explicitly provided by you (e.g., a photo revealing personal data).
3. Purposes & legal bases
- Contact & quotes — Performance of (pre-)contractual measures (Art. 6(1)(b) GDPR)
- Preparation & execution — Contract/legitimate interests (Art. 6(1)(b)/(f) GDPR)
- Administration & tax — Legal obligation (Art. 6(1)(c) GDPR)
- News/marketing (optional) — Consent (Art. 6(1)(a) GDPR), always opt-out
- Analytics/marketing cookies (optional) — Consent (Art. 6(1)(a) GDPR) via the cookie banner
4. Recipients/processors
We only share data where necessary. We conclude data processing agreements with processors. A current list of (sub)processors is available on request.
- Hosting/infrastructure (own server/CyberPanel).
- E-mail (smaling.net).
- Analytics (optional GA4 with IP masking; consent only).
- Bank (ABN AMRO) for payments/invoicing.
5. Transfers outside the EU/EEA
Only where necessary and with appropriate safeguards, such as EU SCCs or an adequacy decision. Where possible we pseudonymise/anonymise data.
6. Security
- HTTPS/HSTS, strict security headers, access control (least privilege).
- Encryption in transit; limited storage locations with logging.
- Backups and procedures for incident response and breach notification.
7. Data breaches & notification
Where a breach poses (likely) risk to individuals we notify the Dutch DPA without undue delay and, where required, the affected individuals.
8. Retention periods
| Type | Period |
|---|
| Quotes & correspondence | up to 2 years after last contact |
| Project files | up to 5 years post hand-over (or longer for warranty) |
| Financial records | 7 years (statutory tax duty) |
| Log files | max. 90 days |
9. Your GDPR rights
- Right of access, rectification and erasure.
- Right to restriction, objection and data portability.
- Withdraw consent at any time (no retroactive effect).
- Requests: e-mail raymond@smaling.net or use the contact page.
- We respond within 30 days (extendable by up to 2 months for complexity) and may request additional identification.
- Complain to the Dutch DPA: Autoriteit Persoonsgegevens.
10. Minors
Our services are not primarily aimed at children < 16. If you believe data was collected without parental consent, please contact us; we will delete such data where appropriate.
11. Cookies
We use functional cookies and — with your consent — analytics/marketing cookies. Manage your preferences here: open cookie settings.
| Category | Purpose | Example |
|---|
| Functional (required) | Core features and security | session/CSRF |
| Analytics (opt-in) | Usage insights | GA4 with IP masking |
| Marketing (opt-in) | Personalisation/ads | pixels/remarketing (if used) |
12. Profiling & automated decision-making
We do not take decisions solely based on automated processing with legal effects. Any profiling is limited to aggregated analytics with consent.
13. Accessibility
We aim for an accessible website (WCAG guidelines where feasible). If you encounter barriers, tell us and we will seek a solution.
14. Changes
The most recent version is available on this page. 19-10-2025.
15. Contact
Smaling Service Monteur
Oranjeweg 120, 6991 WV Rheden
Tel: +31 (0)6 134 79960 +31 (0)26 234 0830
E-mail: raymond@smaling.net