Legal
Privacy statement
Kraft Afbouw handles your data with care. Here you can read which data we use, what for, how long we keep it and what your rights are.
Machine-translated. The Dutch version is legally binding. Read the Dutch version
Privacy in brief
Version 1.0 · 1 October 2026
- Kept in-house
- Your request arrives in our own mailbox and stays with us. We never sell or rent out your data.
- Your choice
- We only use statistics and advertising cookies if you choose them in the cookie banner.
- 2 years
- If no order follows, we delete your request and photos no later than two years after the last contact.
- View or delete
- Want to view, change or delete your data? Email us and we will sort it out as soon as possible.
The full statement
Version 1.0 · 1 October 2026. Kraft Afbouw, Westerweg 6, 7685 PK Beerzerveld · Chamber of Commerce no. 80835368
Who we are
Kraft Afbouw is the controller (the party responsible) for the data you share with us via this website, by email, phone or WhatsApp. Kraft Afbouw is a sole trader business (eenmanszaak) based at Westerweg 6, 7685 PK Beerzerveld, Chamber of Commerce no. 80835368.
Questions about your data? Email info@kraftafbouw.nl or call +31 6 16 20 77 59. We do not have a data protection officer. As a small business we are not required to have one, so your question comes straight to us.
What we use, what for and for how long
For each situation you can see what data we use, what for, and how long we keep it. The legal basis is the ground in law that allows us to do this: because it is needed for a quote or order (contract), because the law requires it (legal obligation), because we have a good reason that does not harm your interests (legitimate interest), or because you choose it yourself (consent).
Quote request
- Data
- Name, phone, email, postcode and house number, your choices in the form (type of work, type of property, scope, timing), your description and any photos.
- Purpose and legal basis
- Contacting you, giving a price indication and scheduling the site survey. You also receive a confirmation by email. Legal basis: contract.
- How long
- No order: up to 2 years after the last contact. With an order: see project file.
Callback request
- Data
- Name, phone and the time you would like to be called.
- Purpose and legal basis
- Calling you back. Legal basis: contract.
- How long
- Up to 2 years after the last contact.
Business contact
- Data
- Company name, name, phone, email and your message.
- Purpose and legal basis
- Answering your question and preparing to work together. Legal basis: contract or legitimate interest (contact with business contacts).
- How long
- Up to 2 years after the last contact, or for as long as we work together.
Phone, WhatsApp or email
- Data
- Your name, number or email address, your message and any photos you send.
- Purpose and legal basis
- Answering your question. Legal basis: contract or legitimate interest.
- How long
- Up to 2 years after the last contact, unless it relates to an order.
Project file: survey, quote and execution
- Data
- Name, address of the job, contact details, measurements, photos and notes from the survey, the quote, arrangements and messages about the work.
- Purpose and legal basis
- Making a quote and scheduling, carrying out and handing over the work. Legal basis: contract.
- How long
- Until the guarantee on your work has expired, plus 2 years. Anything that is also part of our accounts we keep for 7 years.
Online acceptance of a quote
- Data
- Your name, the time, the email address the link was sent to, your IP address, your browser and a digital fingerprint of the quote you saw.
- Purpose and legal basis
- Recording that you accepted exactly this quote. Legal basis: contract and legitimate interest (evidence if anything is unclear later).
- How long
- 7 years, as part of our accounts. Without acceptance: up to 2 years after the last contact.
Invoices and accounts
- Data
- Name, address, quotes, invoices and payments.
- Purpose and legal basis
- Meeting the tax retention obligation. Legal basis: legal obligation.
- How long
- 7 years.
Guarantee and reports
- Data
- Your report, photos of the defect and how we resolved it.
- Purpose and legal basis
- Investigating your report and repairing the defect. Legal basis: contract.
- How long
- With the project file.
Securing forms
- Data
- IP address and browser data.
- Purpose and legal basis
- Stopping spam and abuse with Cloudflare Turnstile. Legal basis: legitimate interest (a secure website).
- How long
- We do not store this ourselves, only briefly in our hosting provider's technical log files.
Where your visit came from
- Data
- The first page you visited, the site you came from and campaign codes in the link (such as utm, gclid or fbclid).
- Purpose and legal basis
- Knowing which channel requests come in through, so we spend our budget well. If you send a request, this goes with it. Legal basis: legitimate interest.
- How long
- In a cookie: 90 days. With a request: as long as the request.
Website statistics
- Data
- Pages visited, clicks, device, browser and approximate location. With Clarity also mouse movements, scrolling behaviour and recordings of your visit.
- Purpose and legal basis
- Understanding how the site is used and improving it. Legal basis: consent.
- How long
- Google Analytics and Clarity: up to 14 months.
Measuring ads
- Data
- Whether you made a request or clicked call or WhatsApp after an ad, ad codes and a hashed version of your email and phone number.
- Purpose and legal basis
- Measuring which ads work. Legal basis: consent.
- How long
- According to Google's and Meta's retention periods.
Reviews on our site
- Data
- First name, place of residence, your review and the type of work.
- Purpose and legal basis
- Showing what customers think of our work. Legal basis: consent.
- How long
- Until you ask us to remove your review.
Job application
- Data
- Your CV, cover letter and contact details.
- Purpose and legal basis
- Assessing your application. Legal basis: contract.
- How long
- Up to 4 weeks after the application. With your consent up to 1 year.
Photos of your home
Photos help us assess your job properly. Would you rather not have people, house numbers or personal belongings in the photo? Just leave them out. The wall, ceiling or facade is enough for a good assessment.
We only use photos you send for your request and your order. A photo of your home or job only appears on our website or social media if you give separate consent, and never with your address.
Looking up your address
When you enter your postcode and house number in the quote form, we look up the street and town via the PDOK Locatieserver, a service of the Dutch Land Registry (Kadaster). We only send your postcode and house number for this. That way you type less and we can see straight away whether your job is in our service area.
Do you have to give us your data?
No. But without your name and a way to reach you, we cannot call you back or send a price indication. For a quote we also need the address of the job. Photos and a description are optional. They do help us assess your job better.
Who we share data with
We never sell your data. We only share it with parties we need to do our work. Parties that process data on our behalf may only use your data for us and must keep it secure. This is set out in a data processing agreement.
Vercel
- What for
- Hosting the website and storing online quotes.
- Where
- Quotes in Frankfurt. Vercel is an American company.
Theory7
- What for
- Our email: requests, confirmations and quotes.
- Where
- Netherlands
Cloudflare
- What for
- Spam checks on forms (Turnstile).
- Where
- United States and EU
Google
- What for
- Tag Manager, Analytics and Ads. Statistics and advertising only with consent.
- Where
- United States and EU
Microsoft
- What for
- Clarity, only with consent.
- Where
- United States and EU
Meta
- What for
- Meta Pixel, only with consent. And WhatsApp, if you message us there.
- Where
- United States and EU
Kadaster (PDOK)
- What for
- Looking up the street and town for your postcode and house number.
- Where
- Netherlands
Google and Meta also use some data from ad measurement for their own purposes. For that use they are the controller themselves. How they handle it is set out in their own privacy statements.
We also share data with regular partners who carry out part of the work for us, if that is necessary for your job. And with the Dutch Tax Administration (Belastingdienst) or another authority if the law requires us to.
Data outside the EU
Google, Microsoft, Meta, Cloudflare and Vercel are American companies. Your data may therefore end up in the United States. These companies participate in the EU-US Data Privacy Framework. According to the European Commission, your data is then just as well protected there as within the EU. Where that does not apply, they use the European Commission's standard contractual clauses.
Security
The website only works over an encrypted connection (HTTPS). Forms are protected against spam and abuse. Requests arrive in our own mailbox and only the person handling your request can access it. An online quote can only be opened via a long, random link, is not indexed by search engines and contains no tracking.
Think something has gone wrong with your data? Let us know straight away.
No automated decisions
We do not make decisions about you that are made solely by a computer. Every request is looked at by a person.
Your rights
It is your data. That is why you may:
- access your data
- have it corrected if it is wrong
- have it deleted, except what we must keep by law, such as invoices
- ask us to temporarily stop using it
- receive it in a common file format, to pass it on to someone else
- object if we use it on the basis of legitimate interest
- withdraw your consent. This applies from that moment, not to what has already happened.
Send your request to info@kraftafbouw.nl. We respond as soon as possible. The law gives us a maximum of one month to do so. We do not need a copy of your ID. If we doubt whether the request really comes from you, we ask a verification question, for example via the phone number we have for you.
A complaint
Not happy with how we handle your data? Let us know first and we will look for a solution together. If we cannot resolve it, you can lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
Changes
If anything changes in how we handle data, we update this statement. The date of the latest version is always shown at the top.