Last updated 18 September 2026
Who we are
Avi Nederland is responsible for the personal data described here. Avi Nederland is registered with the Netherlands Chamber of Commerce (KvK) under number 98732951, Prins Willem-Alexanderlaan 707, 7311 ST Apeldoorn, the Netherlands. Questions and requests: info@avinederland.nl or +31 6 87113463.
What we collect and why
- Enquiries and projects. Name, company, e-mail address, profession, project area, your message and the files you send, such as drawings, renders and lists. We use them to answer you and prepare a quote. Legal basis: steps before a contract, at your request (Article 6(1)(b) GDPR).
- Portal account. E-mail address, name, company, phone number, sign-in data and, if you choose one, a password that we store only as a one-way hash. We use them to give you access to your projects. Legal basis: contract (Article 6(1)(b)).
- Messages. E-mails and portal messages between you and us, with attachments. Legal basis: contract (Article 6(1)(b)).
- Invoice details. Name as registered, address, VAT and Chamber of Commerce numbers, Peppol ID, invoice e-mail address and reference. We use them to invoice you and keep our accounts. Legal basis: contract and legal obligation (Article 6(1)(b) and (c)).
- Newsletter. Your e-mail address and the time you agreed, only if you tick the box. Legal basis: consent (Article 6(1)(a)). You can withdraw it at any time with the link in each newsletter or by e-mail.
- Technical data. IP address, browser and time of each request, in the logs of our hosting provider. We use them to keep the site secure and working. Legal basis: legitimate interest (Article 6(1)(f)).
We do not sell your data and do not use it for advertising or profiling. We make no automated decisions about you.
Who receives your data
- Cloudflare hosts the site and the portal and stores the database, files and e-mail. The database and files are stored in the EU. Cloudflare, Inc. is a US company; transfers are covered by the EU-US Data Privacy Framework and standard contractual clauses.
- Avi Mobilya & Dekorasyon, our production workshop in Istanbul, Türkiye, receives the project files and details needed for your quote and your order. Türkiye has no EU adequacy decision. We send only what the quote or order needs, because this is necessary for the contract you ask us for (Article 49(1)(b) GDPR).
- Anthropic reads our workshop's price for your project with AI, so we can prepare your quote faster. It receives the project details and files needed for that; we check every quote before it goes out. Anthropic, PBC is a US company; transfers are covered by standard contractual clauses, and Anthropic does not use this data to train its models.
- Google receives your IP address when our pages load their typeface from Google Fonts, and the page text when you choose a language in the Change language box (Google Translate). Google LLC is certified under the EU-US Data Privacy Framework.
- Our accountant and the Dutch Tax Administration receive invoice data, as the law requires.
How long we keep it
- Enquiries and projects without an order: 2 years after the last contact.
- Orders, their invoices and invoice details: 7 years after the order, the Dutch tax retention period, and at least 2 years after the last contact.
- Portal account: until you ask us to close it, or 2 years after your last activity if there is no order.
- Sign-in codes and links: 15 minutes. The link in our confirmation e-mail: 7 days. Sign-in sessions: 30 days.
- Newsletter: until you unsubscribe.
- Hosting logs: up to 7 days.
- Records of the e-mails we send and receive: as long as the project they belong to; others 30 days.
Cookies
We use no tracking or advertising cookies, so there is no cookie banner.
| Cookie | Purpose | Kept for |
|---|---|---|
| avi_session | Keeps you signed in to the portal | 30 days |
| avi_lang | Remembers the portal language you chose (EN · NL) | 1 year |
| googtrans | Remembers the language you chose in the Change language box | Until you close the browser |
| __cf_bm | Cloudflare security cookie, set only when needed to filter bots | 30 minutes |
When you use Google Translate, Google may set its own cookies. Google's privacy policy applies to those.
Your rights
You can ask to see, correct or delete your data, to limit its use and to receive it in a portable format. You can object to use based on legitimate interest, and withdraw consent at any time. Send your request to info@avinederland.nl; we answer within one month. You can also complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
Security
All connections are encrypted (HTTPS). Files are kept in private storage and open only for signed-in users or through time-limited links. Only our staff can see your projects.
Changes
We update this notice when our use of personal data changes. The date at the top shows the current version. Our company details are in the imprint.