Privacy Policy

Data Controller

chicorbuqi B.V. is the data controller for the personal information we collect about you. We are registered in the Netherlands with registration number 96382745 and VAT number NL451963827B176. Our registered address is Molenweg 116, 1051 VV Amsterdam, North Holland, Netherlands.

Data Collection and Information We Collect

The data we collect includes personal information such as your name, email address, phone number, postal address, and project details when you contact us for renovation services. We also collect technical information about your use of our website, including IP address, browser type, device information, and pages visited through cookies and similar technologies.

We collect this information when you:

• Fill out contact forms on our website
• Request quotes or consultations
• Communicate with us via email or phone
• Visit our website and interact with our content
• Subscribe to our newsletters or updates

How We Use Your Information

We explain how we use your information to provide and improve our renovation services. The use of your data is based on the following legal grounds under GDPR:

• Contract performance: To provide renovation services, process quotes, and manage project communications
• Legitimate interests: To improve our services, website functionality, and customer experience
• Consent: For marketing communications and non-essential cookies
• Legal obligation: To comply with tax, accounting, and regulatory requirements

Specifically, we use your information to respond to inquiries, provide quotes and consultations, manage renovation projects, send service updates, improve our website and services, and comply with legal obligations.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contractual necessity: When processing is necessary for the performance of a contract with you or to take steps prior to entering into a contract
• Legitimate interests: When processing is necessary for our legitimate business interests, provided these interests are not overridden by your fundamental rights
• Consent: When you have given clear consent for processing for specific purposes
• Legal compliance: When processing is necessary to comply with legal obligations

Data Sharing and Disclosure

chicorbuqi does not sell or rent your personal information to third parties. We may share your information with:

• Trusted service providers who assist with our business operations (subject to confidentiality agreements)
• Professional advisors such as lawyers and accountants
• Regulatory authorities when required by law
• Emergency services if necessary to protect health and safety

All third parties are required to maintain the confidentiality and security of your personal information.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations. Specifically:

• Contact inquiries: 3 years after last contact
• Project information: 7 years after project completion (for warranty and legal purposes)
• Financial records: 7 years as required by Dutch tax law
• Website analytics: 26 months maximum
• Marketing communications: Until you unsubscribe or withdraw consent

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

• Right of access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data under certain circumstances
• Right to restrict processing: Request limitation of processing under certain circumstances
• Right to data portability: Request transfer of your data to another service provider
• Right to object: Object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: Withdraw consent for processing based on consent

To exercise these rights, please contact us using the information provided below. We will respond to your request within one month.

Data Security

chicorbuqi implements appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training
• Secure backup and recovery procedures

International Data Transfers

chicorbuqi primarily processes data within the European Economic Area (EEA). If we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses approved by the European Commission.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and analyze website traffic. For detailed information about our use of cookies, please refer to our Cookie Policy.

Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

chicorbuqi may update this privacy policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Information and Data Protection Officer

If you have any questions about this privacy policy, wish to exercise your rights, or need to contact us regarding data protection matters, please contact us at:

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we have not handled your personal data in accordance with applicable law.

Governing Law

This privacy policy is governed by Dutch law and GDPR. Any disputes arising from this policy will be subject to the jurisdiction of Dutch courts.