Privacy policy

Introduction

AZ Grand Solutions, trading as AZGS, places value on careful handling of personal data. We process personal data only to the extent needed for our services to homeowners, answering questions, preparing quotes, and maintaining contact via our website and other communication channels.

This privacy policy applies to all processing of personal data via the website https://azgs.nl, by phone, by email, and through messages you send us in connection with an inquiry, quote, or execution of work. With this privacy policy, we inform you transparently about what data we process, why we do so, and what rights you have under the GDPR.

Data controller

The controller for the processing of personal data is AZ Grand Solutions, trading as AZGS.

AZ Grand Solutions serves exclusively homeowners and provides services in finishing — including drywall, painting, parquet, and tiling — and installations — including plumbing, heating, underfloor heating, and electrical — in the Utrecht region within a 60-kilometer radius of Woerden.

What personal data we process and why

We only process personal data that you provide to us yourself or that are necessary for contact, quote requests, or the use of parts of the website. We apply the principle of processing no more personal data than is necessary for the purpose.

Via contact form (Formspree)

When you fill in the contact or quote form on the website, the data entered is processed by Formspree and forwarded to [email protected]. This includes your name, email address, phone number, and the content of your question or message.

We use this data to answer your question, contact you, prepare a quote, or further process your request. Without this data we often cannot properly process or answer your message.

Via phone and email

When you call us or email us, we process the data you provide during that contact. This may include your name, phone number, email address, address details, information about your home, your request, and other data needed to answer your question or prepare a quote.

We process this data to communicate with you, assess your request, prepare a quote, schedule appointments, and, where applicable, perform the agreement. Emails and contact details may also be kept for administrative processing and to refer back to earlier communication.

Via WhatsApp

The website may include a link to WhatsApp — for example via wa.me. If you click this link, you leave the AZGS website and enter the WhatsApp environment, a service of Meta.

We only receive personal data via WhatsApp when you decide to contact us through that channel. What data is then processed depends on what you share with us via WhatsApp — such as your name, phone number, and the content of your message.

Via use of the website

The website does not use Google Analytics, Facebook Pixel, or tracking cookies. It does use a few external services that may process personal data when loaded or used, such as your IP address or cookie data.

When Google Fonts is loaded, Google receives technical data such as the IP address, the requested URL, and certain HTTP headers including user agent and referer. According to Google, Google Fonts does not place cookies via the Fonts API, but data is transferred to Google when the fonts are loaded externally.

On the "About us" and "Contact" pages, a Google Maps iframe is embedded. Once this map loads, Google may process personal data and place cookies.

Legal bases for processing

We process personal data only where a valid legal basis exists under the GDPR. Depending on the situation, we base processing on consent, on the need to enter into or perform an agreement, or on a legitimate interest.

When you fill in a contact form, email us, call us, or contact us via WhatsApp, we generally process your data because this is needed to take steps at your request prior to a possible agreement or to perform an agreement. Examples include answering questions, scheduling work, or preparing a quote.

For certain processing, we may rely on a legitimate interest — for example, to keep correspondence, manage our communication, prevent form abuse, or retrieve earlier contacts. Where processing is based on consent — for example, where this is needed in practice for the use of certain external services — you may generally withdraw your consent again.

How long we keep your data

We do not keep personal data longer than necessary for the purpose for which we received or processed it. This follows from the storage-limitation principle under the GDPR.

We keep data from contact requests, quote requests, emails, and phone conversations for as long as reasonably necessary to answer your question, prepare a quote, maintain contact, perform any agreements, and keep our records in order. Where statutory retention obligations apply — for parts of our administration, for example — we keep data for as long as the law requires.

Sharing with third parties

We do not sell your personal data and only share it with third parties when this is necessary for our services, communication, or the functioning of the website. We limit data sharing as much as possible.

We use Formspree to process form submissions via the website. Formspree is based in the United States, hosts its services on Amazon Web Services in the United States, and processes the data you enter through the form as a processor on behalf of the website owner.

The website also uses services from Google — namely Google Fonts and Google Maps. When Google Fonts is loaded, Google receives technical data such as the IP address; when Google Maps is loaded, personal data may be processed and cookies may be placed.

The website may also link to WhatsApp via a clickable wa.me link. If you click it and then contact us via WhatsApp, personal data may be processed by Meta and WhatsApp under their own privacy terms.

Where needed, we put appropriate agreements in place with parties acting as our processor regarding the processing of personal data. For international transfers, providers use mechanisms such as Standard Contractual Clauses where required.

Transfers outside the EU

Use of certain services may involve the transfer of personal data outside the European Economic Area, including to the United States. This applies to Formspree and may also apply to Google and Meta when their services are used via the website or contact channels.

Formspree states that it uses Standard Contractual Clauses as a processor for international data transfers. This is intended to provide appropriate safeguards for the transfer of personal data outside the EU.

Google and Meta may also process data on servers outside the EU. Where personal data is transferred outside the EU, the transfer must be based on an appropriate transfer mechanism, such as Standard Contractual Clauses adopted by the European Commission.

Security of your data

We take appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, or unlawful processing. What measures are appropriate depends on the nature of the processing and the associated risks.

Where we use external service providers, we expect them to take appropriate security measures too. Formspree states that it uses encryption of data at rest, TLS for data traffic, and organizational security measures around access and incident response.

Your rights under the GDPR

Under the GDPR, you have several rights regarding your personal data. These include the right to access the personal data we process about you, the right to have inaccurate data corrected, and the right to have data erased when there is a valid reason.

Depending on the situation, you may also request restriction of processing, object to certain processing, exercise your right to data portability, and withdraw previously given consent. Withdrawing consent does not affect the lawfulness of processing before the moment of withdrawal.

You can send a request about your privacy rights to [email protected]. To prevent abuse, we may ask you for additional information so we can verify that the request actually comes from you.

Cookies

The website does not use tracking cookies for analytics or marketing purposes, such as Google Analytics or Facebook Pixel. External services, such as Google Maps, may place cookies once their functionality is loaded.

For more detail on the use of cookies and similar techniques, please see our separate cookie policy.

Filing a complaint with the Dutch Data Protection Authority

If you feel we are not handling your personal data carefully, we would like to hear from you so we can work out a solution together. You also have the right to file a complaint with the Autoriteit Persoonsgegevens, the Dutch data protection authority.

More information on filing a complaint is available at www.autoriteitpersoonsgegevens.nl.

Changes to this privacy policy

We may update this privacy policy from time to time — for example, when the website changes, when we start using other services, or when law and regulation give reason to do so. It is therefore a good idea to review this privacy policy regularly.

If a change affects the way we process personal data, we will publish the updated version on the website.

Contact for questions

If you have questions about this privacy policy or about how AZ Grand Solutions processes personal data, please contact us at [email protected].