Privacy policy
1. Controller
Vhaelum Aerial is a trade name of DueRelay. The controller for the data processed via this website is:
DueRelay (trade name: Vhaelum Aerial)
KvK 99922800 · VAT NL005417585B22
Waalwijk, Netherlands
contact@vhaelum.com
2. What data we process
We process only data that you provide to us yourself or that is recorded automatically through your visit:
- Email contact: name, email address, optionally phone number, and the content of your message.
- Project data: location, nature of the assignment and other information you provide for a quote or assignment.
- Analytical data: anonymous visit statistics via Google Analytics 4, only with your explicit consent.
3. Purposes of the processing
- Responding to your enquiries and correspondence.
- Preparing, performing and invoicing agreements.
- Complying with statutory obligations regarding administration and tax.
- Improving this website (only with your consent for analytics cookies).
4. Legal bases
- Performance of a contract (Art. 6(1)(b) GDPR) for project-related correspondence and execution.
- Legal obligation (Art. 6(1)(c) GDPR) for administrative retention periods.
- Consent (Art. 6(1)(a) GDPR) for analytics cookies.
- Legitimate interest (Art. 6(1)(f) GDPR) for securing our infrastructure and managing inbound email.
5. Retention periods
- Tax- and administration-relevant data: 7 years pursuant to Art. 52 of the Dutch General State Taxes Act (AWR).
- Email correspondence outside administrative relevance: as long as reasonably necessary, then deleted.
- Analytics data via Google Analytics 4: at most 14 months.
- Cookie choice stored in
localStorage(vh_consent): kept until you clear it manually.
6. Recipients and sub-processors
We do not share your data with third parties for commercial purposes. For our infrastructure we use:
- OVH (hosting of this website, datacenter within the EU).
- Porkbun (handling of inbound email via forwarding).
- Google Ireland Limited (Google Analytics 4, only with your consent).
Appropriate processor agreements have been concluded with these parties or the standard terms apply in line with the GDPR.
7. Transfers outside the EEA
Google Analytics 4 may process data in the United States. Such transfers take place on the basis of the European Commission’s Standard Contractual Clauses (SCCs) and, where applicable, the EU–US Data Privacy Framework.
8. Your rights
Under the GDPR you have the right to:
- Access to your data.
- Rectification.
- Erasure.
- Restriction of processing.
- Object to the processing.
- Data portability.
- Withdrawal of previously given consent.
You can exercise these rights by sending a request to contact@vhaelum.com. We respond within four weeks.
9. Complaints
If you are unhappy with the way we handle your data, you may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl.
10. Security
We take appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), restricted system access and periodic review of our infrastructure.
11. Changes
We may update this privacy policy from time to time. The most recent version is always on this page.