Privacy Policy

1. Data Controller

Marfesto
Chamber of Commerce: 42084466
Email: privacy@marfesto.com

2. Data We Collect

• Name and business name
• Email address
• Phone number
• Chamber of Commerce number
• Business address
• Website data (publicly available via Google Places / Chamber of Commerce)

3. Purposes

• Service delivery: building and hosting websites
• Billing and administration
• Communication about the service
• B2B outreach (prospecting via publicly available Chamber of Commerce data)

4. Legal Basis

Performance of a contract: for all processing necessary for service delivery and billing.

Legitimate interest (B2B outreach): we contact businesses based on publicly available Chamber of Commerce data. This is permitted under GDPR Recital 47 for direct B2B marketing. You can unsubscribe at any time via the unsubscribe link in our emails or via privacy@marfesto.com.

5. Retention Periods

• Customer data and invoices: 7 years (VAT retention obligation)
• Opt-outs: 5 years
• Prospect data without contract: maximum 2 years after last contact

6. Your Rights

• Access: you can request which data we process about you
• Correction: you can have incorrect data corrected
• Deletion: you can request deletion of your data (unless legal retention obligation)
• Objection: you can object to processing based on legitimate interest
• Portability: you can request your data in a machine-readable format

Send your request to privacy@marfesto.com. We respond within 30 days.

7. Analytics

We use Google Analytics 4 only after explicit analytics consent through the banner. Until consent is granted, analytics storage is denied and no GA4 events are sent. You can revoke consent at any time with the Privacy button; after revocation we send a denied consent update, stop app tracking and delete known Google Analytics cookies.

8. Complaints

If you have a complaint about the processing of your personal data, you can file a complaint with the Dutch Data Protection Authority at autoriteitpersoonsgegevens.nl.