[DOCUMENT TITEL]

---

---

1. Who are we?

Visualprint is a trade name of [FILL IN: official company name], a textile printer based in Leidschendam-Voorburg.

• Visiting / head office address: Oostvlietweg 19 C, 2266 GM Leidschendam, Netherlands
• Chamber of Commerce: 27098296
• VAT number: [FILL IN]
• Email privacy queries: [FILL IN, e.g. privacy@visualprint.nl]
• Phone: +31 70 327 22 53

For questions about this privacy policy or how we handle your data, contact us via the details above.

---

2. What data do we collect?

2.1 Data you actively share

When filling in a quote, contact or intake form we process: - Name, company, role - Email, phone - Address (only for delivery and invoicing) - Content of your message or request - Any attachments (designs, specifications) - For intake on own-supplied garments: technical product info (composition, treatments, etc.)

2.2 Data we collect automatically

When visiting our website we collect via Google Analytics 4 and possibly other tools: - IP address (anonymised) - Browser type and device - Pages visited and time on page - Referral source (where you came from) - General location information (country/region, not exact)

See also our cookie policy for details.

2.3 Data from business transactions

When executing a project we process: - Invoice details (mandatory for Dutch tax law) - Payment information (for processing only; we don't store credit card details ourselves) - Order history and correspondence - File uploads (designs, specs)

---

3. For what purpose do we use your data?

Purpose	Legal basis (GDPR)
Responding to your inquiries	Consent + contract performance
Producing and sending quotes	Contract performance
Production and delivery of orders	Contract performance
Invoicing and accounts receivable	Legal obligation + legitimate interest
Improving our website (analytics)	Consent (cookies)
Customer feedback and quality improvement	Legitimate interest
Newsletter (only after opt-in)	Consent

We do not use your data for: - Profiling or automated decision-making - Advertising outside direct communication about your projects - Sale or sharing with third parties for commercial use

---

4. How long do we keep your data?

Data	Retention	Reason
Quote requests that don't proceed	12 months	Possible follow-up
Customer order history	7 years after last contact	Legal tax obligation
Invoice data	7 years	Tax authority
Customer design files	6 months after last reorder	Possible reorder
Intake forms (own supply)	12 months	For possible follow-up
Analytics data (Google Analytics)	14 months	Standard GA4 setting
Cookies	1 day to 2 years	Per cookie, see cookie policy
Email correspondence	5 years	Operational necessity

After the retention period, data is deleted or anonymised.

---

5. With whom do we share data?

5.1 Processors (subcontractors)

For specific processing we engage external parties:

• Hosting: [FILL IN — e.g. Plesk host or TransIP] — for hosting our website and email
• Email / form processing: [FILL IN — e.g. WPForms, Elementor Pro Forms]
• Accounting: [FILL IN — e.g. Exact, Moneybird]
• Logistics partners: PostNL, GLS, and internationally possibly others — only address details needed for delivery
• Analytics: Google (GA4) — anonymised traffic
• Payment provider: [FILL IN — e.g. iDEAL via Mollie/Adyen]

We have data processing agreements with all these parties in line with GDPR.

5.2 Legal obligations

In specific situations we may be required to share data with: - Tax authority (for tax returns and audits) - Police or justice (on lawful request) - Supervisors (such as Dutch Data Protection Authority)

5.3 No selling of data

We never sell your data to third parties for commercial purposes.

---

6. Transfer outside EU/EEA

Some of our processors (such as Google) process data outside the EU. This happens under: - Adequacy decisions of the European Commission, or - Standard Contractual Clauses (SCCs) as approved by the Commission

For specific questions about transfers, contact us.

---

7. How do we protect your data?

We take appropriate technical and organisational measures: - Encrypted connections (HTTPS) on the website - Password protection and two-factor authentication on internal systems - Limited access to data — only staff who need it - Regular backups and software updates - Data processing agreements with all our external parties

In the event of a data breach we follow the GDPR notification obligation.

---

8. Your rights

Under GDPR you have the following rights:

• Right of access — you can request which data we process about you
• Right to rectification — correct inaccurate data
• Right to erasure — have data deleted ("right to be forgotten")
• Right to restriction — temporarily pause processing
• Right to object — object to processing on the basis of legitimate interest
• Right to data portability — receive your data in machine-readable form
• Right to withdraw consent — for processing based on consent

To submit a request: email [FILL IN privacy email] with your request and a copy of an ID (redacted where possible). We respond within 4 weeks.

---

9. Filing a complaint

Not satisfied with how we handle your data? You can file a complaint with the Dutch Data Protection Authority via autoriteitpersoonsgegevens.nl.

---

10. Changes to this privacy policy

We can update this privacy policy. The most recent version is always on this page, with the date of last update at the bottom.

Last update: [FILL IN date] Version: 1.0