Last updated: 2026
Data controller
Boter & Bloei
Brunchplein 12
3511 ZZ Utrecht
Nederland
Phone: +31 00 000 0000
Email: hallo@boterenbloei.example
Introduction
We respect the privacy of our website visitors and are committed to protecting your personal data. This privacy statement explains how we collect, use, and safeguard your information when you visit our website.
What data we collect
We may collect the following types of personal data:
- Contact information: Name, email address, phone number — when you voluntarily submit a contact form or make a reservation.
- Technical data: IP address, browser type, operating system, referring URL — collected automatically when you visit our website.
- Cookie data: Information collected through cookies and similar technologies. See our Cookie Policy for more details.
Why we collect your data
We process your personal data for the following purposes:
- To respond to your enquiries and contact form submissions.
- To process and manage reservations.
- To improve our website and user experience.
- To comply with legal obligations.
Legal basis for processing
We process your personal data based on the following legal grounds under the GDPR:
- Consent: You have given explicit consent for one or more specific purposes (e.g., contact forms, newsletters).
- Legitimate interest: Processing is necessary for our legitimate business interests (e.g., website analytics, security).
- Legal obligation: Processing is necessary for compliance with a legal obligation.
Data retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including to satisfy any legal, accounting, or reporting requirements. Contact form submissions are retained for a maximum of 12 months unless required otherwise by law.
Your rights
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Right of access: You can request a copy of your personal data.
- Right to rectification: You can request that we correct inaccurate data.
- Right to erasure: You can request that we delete your personal data.
- Right to restriction: You can request that we restrict the processing of your data.
- Right to data portability: You can request your data in a structured, machine-readable format.
- Right to object: You can object to the processing of your personal data.
To exercise any of these rights, please contact us through the contact page on our website. We will respond to your request within 30 days.
Third-party services
We do not sell your personal data to third parties. We may share data with trusted service providers who assist us in operating our website, conducting our business, or serving our users, so long as those parties agree to keep this information confidential.
Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage.
Changes to this statement
We may update this privacy statement from time to time. Any changes will be posted on this page with an updated revision date.
Contact
If you have any questions about this privacy statement or our data practices, please contact us through the contact page on our website.