Privacy Policy

1. Data Controller

Marfesto
Chamber of Commerce: 90XXXXXX (placeholder)
Email: privacy@marfesto.com

2. Data We Collect

• Name and business name
• Email address
• Phone number
• Chamber of Commerce number
• Business address
• Website data (publicly available via Google Places / Chamber of Commerce)

3. Purposes

• Service delivery: building and hosting websites
• Billing and administration
• Communication about the service
• B2B outreach (prospecting via publicly available Chamber of Commerce data)

4. Legal Basis

Performance of a contract: for all processing necessary for service delivery and billing.

Legitimate interest (B2B outreach): we contact businesses based on publicly available Chamber of Commerce data. This is permitted under GDPR Recital 47 for direct B2B marketing. You can unsubscribe at any time via the unsubscribe link in our emails or via privacy@marfesto.com.

5. Retention Periods

• Customer data and invoices: 7 years (VAT retention obligation)
• Opt-outs: 5 years
• Prospect data without contract: maximum 2 years after last contact

6. Your Rights

• Access: you can request which data we process about you
• Correction: you can have incorrect data corrected
• Deletion: you can request deletion of your data (unless legal retention obligation)
• Objection: you can object to processing based on legitimate interest
• Portability: you can request your data in a machine-readable format

Send your request to privacy@marfesto.com. We respond within 30 days.

7. Analytics

We use Cloudflare Web Analytics. This system is cookieless and collects no personal data. IP addresses are not stored. No consent is required.

8. Complaints

If you have a complaint about the processing of your personal data, you can file a complaint with the Dutch Data Protection Authority at autoriteitpersoonsgegevens.nl.