Privacy statement

Who is responsible for your data?

Shinesta Schoonmaak is the controller of the data described in this statement. You can reach us here:

Address

Shinesta Schoonmaak
Bosch 84
3331 GC Zwijndrecht

CoC

92038557

Email

info@shinesta.nl

Phone

+31 (0)6 86 23 28 24

Which data do we use, and what for?

Forms on the website

On the website you can request a quote, send a message or ask us to call you back. We only use what you fill in to handle your request or question.

• Requesting a quote: company name, contact person, email address, phone number, the services you want, location and any additional details.
• Contact form: name, email address and your message, plus your phone number and company name if you fill them in.
• Callback request: name and phone number.

The website sends your details to Shinesta by email, together with the address of the page you sent the form from. They are not stored on the website itself.

You are not obliged to fill in a form: you can also call or email us. Without the required fields we cannot process the form.

Legal basis: preparing a contract, and our legitimate interest in being able to respond to requests and questions.

When you email or call us

We use the details you give us to help you, usually your name, contact details and your question.

Legal basis: our legitimate interest in being able to respond to questions.

When your organisation works with us

We use the business contact details of contact persons to prepare and carry out an assignment, make arrangements and send invoices. Sometimes we receive those details from your employer or client.

Legal basis: performing the contract, our legitimate interest in keeping in touch about the work, and our legal obligation for the administration.

When you visit the website

To show the website and keep it secure, the website and our suppliers process technical data such as your IP address, type of browser, the page requested and the time.

To limit abuse of the forms, the server counts how often a form has been sent from an IP address. This count is only kept in the server's working memory, and attempts older than ten minutes no longer count. The IP address is not included in the email and is not stored in a database.

Legal basis: our legitimate interest in keeping the website working properly and securely.

Cookies and statistics

If you give your consent, we use Google Analytics to measure how the website is used, for example which pages are visited and whether a form has been sent. What you fill in on a form does not go to Google Analytics. You can read more in our cookie policy.

Legal basis: your consent, which you can withdraw at any time.

How long do we keep your data?

We do not keep data for longer than necessary for the purpose for which we received it.

• Requests and messages: for as long as necessary to handle and follow up your question. If it does not lead to an assignment, we delete them after that.
• Data of clients and contact persons: for as long as we work together, and after that for as long as necessary to complete the assignment.
• Invoices and other administration: seven years, because tax law requires this.
• Technical data: briefly, only for security and to solve errors.
• Cookies: see the list in our cookie policy.

Who do we share your data with?

We do not sell your data. We only share it with parties we need to run the website and our work, or if the law requires us to.

• Google (Google Workspace): our email, which is also where the forms arrive.
• Google (Google Tag Manager and Google Analytics): measuring how the website is used. Google Analytics only with your consent.
• Usercentrics in Denmark (Cookiebot): the cookie notice and recording your cookie choice.
• Cloudflare: the network and security of the website.
• Our hosting provider: the servers the website runs on.
• Our administration or accounting provider: invoices and administration.

Parties that process data on our behalf may only use it for the service they provide to us. We record this in a data processing agreement.

Does your data leave Europe?

Google and Cloudflare are American companies and may also process data outside the European Economic Area. The safeguards required by the GDPR apply to this: the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

How do we protect your data?

The website uses an encrypted connection, also for sending forms. Because the website does not store forms, there is no collection of requests there that could leak. Within Shinesta, only people who need your data for their work have access to it.

What are your rights?

You may always ask us to:

• let you see your data;
• correct inaccurate data or delete data;
• limit the use of your data, and you can object to it;
• transfer your data to you or to someone else.

If you have given consent, you can withdraw it at any time. This only applies to use after that moment.

Send your request to info@shinesta.nl. We respond within one month, the period set by law. Sometimes we ask you to show who you are, so that we do not give data to the wrong person.

Not satisfied with how we handle your data? Please let us know. You can also file a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Do we make automated decisions?

No. We do not make decisions about you that are based solely on automated processing.

Links to other websites

The website has links to LinkedIn, Instagram, Facebook and Google Maps, among others. These services are not embedded in our pages, so they only receive data from you once you click through. Their own privacy rules apply on their websites.

Changes

We may change this statement, for example when the website changes. The date of the last change is at the top of the text.