Privacy notice
This privacy notice explains how Noordvaro processes personal data for website visits, contact, quotations and assignments.
1. Who is responsible?
NOORDVARO V.O.F is the controller for personal data processed by Noordvaro for enquiries, quotations and assignments.
NOORDVARO V.O.F Kanaalstraat 10 9401 ER Assen The Netherlands Chamber of Commerce (KVK) 99139189 VAT ID NL868820921B01 Email: info@noordvaro.nl Telephone and optional WhatsApp contact: +31 6 12039137
This is the legal correspondence address. It is not a public shop, showroom or walk-in location; visits take place only after an appointment has been confirmed in writing. Ordinary marketing pages state only Assen, Drenthe.
2. What information may we process?
When you contact us by email, telephone or WhatsApp, we may receive your name, email address, company name, role, telephone number if you choose to provide it, project address, project description, preferences, correspondence and photographs or documents you send. An assignment may also require quotation, contract, planning, execution, handover, complaint, invoice and payment information.
Do not send an identity document, Dutch citizen service number (BSN), medical information or other sensitive or unnecessary information. Limit photographs to what is needed for the enquiry and avoid identifiable residents, children, documents and private possessions that are not needed for assessment.
3. How do the website forms work?
The current forms only assemble a summary temporarily in the open browser page. The website does not submit that information automatically, has no forms backend, database, CRM or upload facility, and does not deliberately store the entered enquiry in cookies, localStorage or sessionStorage.
You decide whether to open WhatsApp or an email draft or copy the summary. “Open by email” passes the text to your own email application. Your email provider or device may save or synchronise a draft. Noordvaro receives the content only after you send the email and it is delivered. “Copy” places the text on your device clipboard; security and any synchronisation of that clipboard are controlled by your device and services.
Telephone and WhatsApp are optional contact methods at +31 6 12039137. Clicking the WhatsApp link opens the external service and may pass the prepared text to it before you press Send. Noordvaro receives a message when you send it and it is delivered. You can review and edit the draft first. For a long enquiry the complete summary remains copyable and the link opens a conversation without the full text; the threshold is a compatibility heuristic, not a WhatsApp limit. Email and manual copying remain available.
4. Why do we use information and on what legal basis?
We process information where necessary to:
- answer your question and prepare a quotation or project proposal at your request; - agree arrangements, perform a contract and hand over work; - manage project communications, records, invoicing and payment; - handle complaints, rectification requests or disputes; - comply with statutory accounting and tax obligations; - necessarily secure our website and systems and investigate technical faults.
Steps requested before a contract and performance of a contract rely on the contractual legal basis. Statutory records rely on a legal obligation. Necessary security, business-client contact persons and handling possible claims may rely on legitimate interests after balancing your interests. For optional publication of identifiable project photographs, we request separate consent where required.
A normal enquiry is not consent to marketing.
5. Website hosting and technical information
The website is hosted by Vercel. To deliver and secure a website request, Vercel may process technical information such as IP address, date and time, requested URL, browser and device information, request and error data and derived location data. This is separate from content you may later choose to send by email or WhatsApp.
Noordvaro has not activated an analytics provider, advertising tag, Google tag or marketing pixel in the current application. Limited campaign parameters from a URL may be included temporarily in the summary you assemble; the application uses no tracking cookie or long-term browser storage for this. Do not put personal information in URL parameters.
6. Email, WhatsApp and other recipients
Business email for info@noordvaro.nl is processed separately from website hosting through Cyber_Folks. Noordvaro uses no additional Gmail, Outlook/Microsoft 365 or iCloud mailbox, cloud storage, CRM or external project-storage system for the current website-enquiry flow. Your own email provider and email application process the message on your side under their own terms. Noordvaro receives only what you actually send.
WhatsApp is a separate external service and processes data under its applicable terms and privacy notice. Cyber_Folks is the email provider, not the WhatsApp provider. The website has no WhatsApp widget, SDK or iframe and makes no WhatsApp/Meta request before an explicit click.
For a specific purpose, information may also be accessible to persons working on the enquiry or assignment for Noordvaro, an engaged specialist, an insurer dealing with an actual claim or a competent public authority where the law requires it. Access and disclosure are limited to what is necessary and lawful. Noordvaro does not sell personal data.
Where a provider acts as a processor, appropriate processor terms must apply. Any bookkeeping system used later does not automatically form part of the website-enquiry flow described here and will be assessed separately before use.
7. Transfers outside the EEA
The website is not configured or described as exclusively Dutch or exclusively European processing. Vercel’s Data Processing Addendum describes applicable international-transfer mechanisms, including Standard Contractual Clauses where relevant. Actual locations and subprocessors may vary by service and configuration. Account-specific locations or transfer mechanisms for email are not stated as settled without a verifiable basis. Noordvaro will not state that information never leaves the European Economic Area without a verifiable basis.
8. Retention
The website itself does not retain an entered enquiry in a Noordvaro database. A sent email and later project correspondence may be retained in the business mailbox and records. Sent and delivered WhatsApp messages may be present in business chats.
Email and WhatsApp enquiries that do not result in an assignment are retained for twelve months after the last substantive contact. Noordvaro conducts a deletion review every quarter. Where applicable, this review includes business chats, media, linked devices, local copies and other copies controlled by Noordvaro. Access to business chats is limited to what is necessary for the enquiry or assignment.
Non-essential or raw project photographs are retained for up to 24 months after project completion unless another continuing need has been documented. Portfolio photographs may be retained for longer while a valid publication or documentation purpose and lawful basis continue; Noordvaro reviews this periodically.
Project, accounting, tax and contract records that remain necessary for another legitimate or statutory purpose follow the retention requirement applicable to that purpose and the specific record. This does not automatically make every separate email, chat or project photograph part of records subject to a fixed tax-retention period. Noordvaro retains other information no longer than necessary for its purpose, a legal obligation or a specific need relating to a current or possible claim.
Operational deletion includes the active Cyber_Folks mailbox, sent and deleted items and, where applicable, chats, media, linked devices, local copies and other copies controlled by Noordvaro. Noordvaro cannot guarantee direct deletion from WhatsApp systems or provider backups outside its control. Such copies may remain under that provider's processing and backup lifecycle.
9. Your privacy rights
You may, to the extent provided by law in your circumstances, request access, correction, erasure, restriction or portability of your personal data. You may object to processing based on legitimate interests and withdraw consent where consent is the basis. Withdrawal does not change the lawfulness of processing before withdrawal.
Send a request to info@noordvaro.nl. We normally respond within one month. If a legally permitted extension is needed, we explain this in time. We may verify your identity proportionately; do not send a complete copy of an identity document unless specifically and lawfully required. Rights are not absolute, for example where a statutory retention duty applies.
You may complain to the Dutch supervisory authority, Autoriteit Persoonsgegevens, through autoriteitpersoonsgegevens.nl.
10. Security and changes
Noordvaro takes technical and organisational measures appropriate to the nature of the information and risks, including limited access and careful handling. No internet or email service can guarantee absolute security.
Future automated submissions, uploads, WhatsApp widgets or API integrations, analytics, marketing tags or other data flows are not automatically covered by this notice. Before activation, the technical review, this notice and any required consent implementation must be updated.
We update this privacy notice as needed when our working practices change.