Privacy Policy
Last updated: 10 August 2026
This privacy policy explains how Riemersma handles your personal data when you use our website or contact us. We process personal data carefully and in accordance with the General Data Protection Regulation (GDPR).
1. Who is responsible for your data
Responsible for the processing of your data is:
- Company: Riemersma
- Address: Breuningslaan 26, 8471 ZT Wolvega
- Chamber of Commerce (KvK) number: 96579153
- VAT number: NL005217547B44
- Email: rowan@rowanriemersma.nl
- Phone: +31 6 47 38 33 97
- Website: https://www.rowanriemersma.nl
2. Data we collect
Depending on how you use our services, we process the following categories of personal data:
- Contact data: name, email address, phone number and the content of your message when you contact us.
- Session and device data: technical data required to operate the website (see our cookie policy).
- Audit logs: security and compliance logs of important actions (such as logging in and data export).
- Usage and analytics data: anonymised data about your visit (such as pages viewed and click behaviour) to improve our website. This measurement is cookieless, stores nothing on your device and cannot be traced back to you (shortened IP address, daily rotating encryption).
- Account data: if you create an account, your login details and order history.
3. Purposes and legal bases
We only process your data for clearly defined purposes, each with a legal basis under the GDPR:
| Category | Purpose | Legal basis |
|---|---|---|
| Contact data | Answering your question or message | Our legitimate interest (good and secure service) |
| Session and security data | Securing and operating the website | Our legitimate interest (good and secure service) |
| Usage and analytics data | Measuring and improving the use of our website | Our legitimate interest (good and secure service) |
| Account data | Managing your customer account | Needed to carry out your order or request |
4. Retention periods
We do not keep your data longer than necessary:
- Contact data: up to 24 months after the last correspondence, then deleted.
- Session data: up to 30 days.
- Audit logs: stored immutably for the legally required period for security and accountability.
- Usage and analytics data: combined and no longer identifiable; identifiable visit data for a maximum of 14 months.
- Account data: for as long as your account is active, then deleted or anonymised.
5. Processors and recipients
To deliver our services we engage service providers who handle data on our behalf. We have made agreements with these parties about protecting your data:
- Hosting and infrastructure providers - storage and management of the website and data in a data centre within the EU.
In addition, depending on how we run our business, we may share data with service providers for our administration and accounting, and we may disclose data to government authorities when we are legally required to do so.
We never sell your data to third parties.
6. Transfers outside the EU
We process your personal data in principle within the European Economic Area (EEA).
7. Your rights
Under the GDPR you have the right to:
- access your data;
- have your data corrected;
- have your data erased;
- restrict processing;
- object to processing;
- take your data with you to another provider;
- withdraw consent you previously gave.
You can exercise these rights by contacting us at rowan@rowanriemersma.nl. If you have an account, you can also use your privacy portal.
8. Complaints
Do you have a complaint about how we handle your data? Please contact us first at rowan@rowanriemersma.nl. You also always have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl.