Privacy Policy
Last updated: 21 July 2026
This privacy policy explains how Riemersma handles your personal data when you use our website or contact us. We process personal data carefully and in accordance with the General Data Protection Regulation (GDPR).
1. Who is responsible for your data
Responsible for the processing of your data is:
- Company: Riemersma
- Address: Breuningslaan 26, 8471 ZT Wolvega
- Chamber of Commerce (KvK) number: 96579153
- VAT number: NL005217547B44
- Email: rowan@rowanriemersma.nl
2. Data we collect
Depending on how you use our services, we process the following categories of personal data:
- Contact data: name, email address, phone number and the content of your message when you contact us.
- Session and device data: technical data required to operate the website (see our cookie policy).
- Audit logs: security and compliance logs of important actions (such as logging in and data export).
- Usage and analytics data: anonymised data about your visit (such as pages viewed and click behaviour) to improve our website; only when you give consent.
- Order and address data: products, amounts, order date, payment status and your billing and delivery address.
- Account data: if you create an account, your login details and order history.
3. Purposes and legal bases
We only process your data for clearly defined purposes, each with a legal basis under the GDPR:
| Category | Purpose | Legal basis |
|---|---|---|
| Contact data | Answering your question or message | Our legitimate interest (good and secure service) |
| Session and security data | Securing and operating the website | Our legitimate interest (good and secure service) |
| Usage and analytics data | Measuring and improving the use of our website | Your consent |
| Order and address data | Fulfilling your order and delivery | Needed to carry out your order or request |
| Invoice and payment data | Meeting tax and accounting obligations | Legal obligation (such as the tax retention requirement) |
| Account data | Managing your customer account | Needed to carry out your order or request |
4. Retention periods
We do not keep your data longer than necessary:
- Contact data: up to 24 months after the last correspondence, then deleted.
- Session data: up to 30 days.
- Audit logs: stored immutably for the legally required period for security and accountability.
- Usage and analytics data: combined and no longer identifiable; identifiable visit data for a maximum of 14 months.
- Order and invoice data: 7 years, based on the statutory tax retention obligation.
- Account data: for as long as your account is active, then deleted or anonymised.
5. Processors and recipients
To deliver our services we engage service providers who handle data on our behalf. We have made agreements with these parties about protecting your data:
- Hosting and infrastructure providers - storage and management of the website and data in a data centre within the EU.
- Error monitoring services - detection of technical errors (only if enabled; personal data is filtered).
- Email service providers - delivery of email, such as contact confirmations and transactional messages.
- Payment service providers - processing of payments.
- Shipping and delivery partners - delivery of orders.
In addition, depending on how we run our business, we may share data with service providers for our administration and accounting, and we may disclose data to government authorities when we are legally required to do so.
We never sell your data to third parties.
6. Transfers outside the EU
Some of our service providers process data outside the European Economic Area (EEA): our email service provider (United States). That transfer is covered by legally approved safeguards that protect your data to the same standard outside the EU.
7. Your rights
Under the GDPR you have the right to:
- access your data;
- have your data corrected;
- have your data erased;
- restrict processing;
- object to processing;
- take your data with you to another provider;
- withdraw consent you previously gave.
You can exercise these rights by contacting us at rowan@rowanriemersma.nl. If you have an account, you can also use your privacy portal.
8. Complaints
Do you have a complaint about how we handle your data? Please contact us first at rowan@rowanriemersma.nl. You also always have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl.