Privacy Policy

Effective Date: January 1, 2026

1. Controller Information

This Privacy Policy applies to the processing of personal data conducted by storycrateteamtons.homes Fleet Detailing B.V., registered under Dutch company registration KVK 78491028 and BTW NL864920412B01, having its statutory registered seat at Keizersgracht 482, 1016 GD Amsterdam, Netherlands (referred to as "we", "our", or "us"). We are dedicated to ensuring that your privacy is respected and protected in strict conformity with Regulation (EU) 2016/679 (General Data Protection Regulation or GDPR) and applicable national data protection legislation.

2. Personal Data We Collect

We collect personal data only to the extent necessary to deliver informative fleet management guidance, process commercial inquiries, and maintain technical operational security:

• Inquiry and Communication Data: When you complete our contact form or email our corporate address, we gather your full name, business email address, organization name, telephone contact, and message text.
• Technical Telemetry Data: When navigating our website, server logs automatically record your Internet Protocol (IP) address, operating system, browser variant, referral URL, and the timestamp of page requests.
• Cookie and Interaction Data: Pseudonymous usage data collected through functional and analytics cookies, subject to your prior consent via our cookie banner.

3. Legal Bases and Processing Purposes

Under Article 6(1) of the GDPR, our legal grounds for processing personal data include:

• Performance of Pre-Contractual Steps (Art. 6(1)(b)): Responding to inbound requests regarding fleet detailing consulting, depot assessments, or operational proposals.
• Legitimate Interests (Art. 6(1)(f)): Maintaining server stability, detecting fraudulent activities, optimizing website response latency, and safeguarding intellectual property.
• Consent (Art. 6(1)(a)): Utilizing non-essential telemetry and analytics cookies to evaluate user interest in specific fleet detailing topics.
• Legal Obligations (Art. 6(1)(c)): Retaining financial transaction records and tax-related business communications in line with European statutory periods.

4. Third-Party Service Providers and Data Transfers

We do not sell, rent, or lease your personal data. We disclose information solely to vetted service processors bound by strict Data Processing Agreements (DPAs) in compliance with Article 28 GDPR:

• Hosting Infrastructure: Certified data center providers located within the European Economic Area (EEA) adhering to ISO 27001 data security benchmarks.
• Communication Tools: Encrypted email relay providers facilitating corporate correspondence.

In the event any secondary technical processor operates outside the EEA, transfers are governed by European Commission Standard Contractual Clauses (SCCs) to guarantee an equivalent degree of protection.

5. Data Retention Periods

We store personal data only as long as necessary for the purpose for which it was gathered. Communication inquiries are retained for up to twenty-four (24) months from the resolution of your query, unless ongoing contractual relations require extended retention. Web server technical logs are truncated and purged on a rolling thirty-day cycle.

6. Your Data Subject Rights Under GDPR

As a data subject within the European Union, you possess extensive enforceable rights:

• Right of Access (Art. 15 GDPR): The right to request copies of all personal data held concerning your person.
• Right to Rectification (Art. 16 GDPR): The right to correct inaccurate or incomplete operational records.
• Right to Erasure / "To Be Forgotten" (Art. 17 GDPR): The right to demand deletion of your personal data where statutory retention exemptions do not apply.
• Right to Restriction of Processing (Art. 18 GDPR): The right to pause processing activities under disputed accuracy conditions.
• Right to Data Portability (Art. 20 GDPR): The right to receive your personal data in a structured, machine-readable format.
• Right to Object (Art. 21 GDPR): The right to object at any time to processing based on legitimate interests.

To exercise any of these statutory rights, please submit a written request to our Data Protection Officer at [email protected]. We respond to all verified requests within thirty (30) calendar days without charge.

7. Supervisory Authority

You retain the right to lodge a formal complaint with a competent supervisory authority if you consider that our processing violates privacy regulations. In the Netherlands, the competent body is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority), located at Hoge Nieuwstraat 8, 2514 EL The Hague.

8. Security Measures

We implement comprehensive technical and organizational safeguards, including TLS 1.3 cryptographic transport protocols, restricted physical and digital access permissions, regular firewall audits, and routine security patches to shield your records against unauthorized access, loss, or alteration.