This document is a draft that is still being reviewed by a lawyer under Dutch and European law. It is not yet in force and may change. You can already send questions about your data or an objection; we handle them in accordance with the GDPR. The Dutch version is the reference text; this translation is for information.
Martin Adamec (trading as firmdat.nl) is the controller within the meaning of the General Data Protection Regulation (GDPR). You can contact us at the address and email address below.
This policy applies to website visitors, requesters, customers and business contacts. For people named in company records, the separate information about the database applies.
The website runs on a Hostinger virtual server in Frankfurt (Germany). To deliver and secure the website we process IP address, time of access, requested URL and method, status, amount of data transferred, referring page (if sent) and the browser’s user agent. The legal basis is Article 6(1)(f) GDPR: our interest in a secure, well-functioning website. We keep technical log files for a maximum of 30 days. The connection is encrypted with TLS. Hostinger also makes infrastructure backups according to its own backup cycle.
We process the name, company, registration number, email address, phone number, requested market or industry and the message you send, plus the time of sending, the IP address, the browser’s user agent and the language of the form. Spam checks use a hidden control field and the time taken to fill in the form. The legal basis is Article 6(1)(b) GDPR for pre-contractual steps at your request, or Article 6(1)(f) for communication with business representatives and preventing misuse. The checkbox confirms that you know this policy; it is not consent to a newsletter. No automatic confirmation email is sent. Only if the hand-over to the email software fails is a backup copy created outside the public web folder. Requests that do not lead to an order are deleted 12 months after the last contact.
To handle data subject requests we process identifying company data, the data concerned, the email address for the reply and the message, plus the form metadata described above, on the basis of Article 6(1)(c) GDPR. Minimal blocking markers may be kept on the basis of Article 6(1)(f) to prevent the data being added again. We keep correspondence only as long as necessary to handle and document the request or legal claims.
We process customer identity, business contact details, orders, invoices and payment data to perform contracts (Article 6(1)(b)), comply with legal obligations (Article 6(1)(c)) and communicate with representatives or handle legal claims (Article 6(1)(f)). Contract and accounting data are kept for the applicable statutory periods.
This website uses no analytics or advertising cookies and does not load tags from Google or other measurement services. No data is stored on or read from your device that is not strictly necessary for the website to work. If we introduce measurement later, we will ask for your consent in advance (Article 11.7a of the Dutch Telecommunications Act and the GDPR) and update this policy.
Where necessary, hosting, email and IT service providers under appropriate safeguards, banks, accountants or other professional advisers and, where required by law, public authorities may have access to data. Data from requests is not supplied to customers as a database product.
Access or transfer outside the European Economic Area requires a legal basis and an applicable transfer mechanism under the GDPR, such as an adequacy decision or appropriate safeguards. Where relevant you can request information about the destination and the mechanism.
Submitting a request is voluntary. Marked fields are needed to process the form; you can also contact us by email or post. We do not make decisions with legal or similarly significant effects based solely on automated processing.
Under the statutory conditions you can request access, rectification, erasure, restriction and portability. You can object to processing based on legitimate interest on grounds relating to your particular situation; an objection to direct marketing does not need to be justified and ends that use. We normally reply within one month. We explain a legally permitted extension of up to two months within the first month. Requests are generally free of charge.
You can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or with another competent supervisory authority, including in the country where you habitually reside or work or where the alleged infringement took place. Because the controller is established in Czechia, the Czech Office for Personal Data Protection (uoou.gov.cz) is the lead supervisory authority.
This policy describes the current service and is updated when relevant processing changes. The version date is shown at the top.
Martin Adamec
Mírová 1541, 516 01 Rychnov nad Kněžnou, Czech Republic
IČO: 19552319
info@firmdat.nl
Legal notice · Terms · Website privacy · Information about the database · Request form · Sources and methodology
