1. Data Controller Identification
The legal controller responsible for the processing of personal data across the digital properties located at pickpantrystorypuls.motorcycles is:
Pickpantrystorypuls Ruimtelijk Ontwerp B.V.
Company Registration (KvK): 84920148
VAT / BTW Number: NL864192830B01
Keizersgracht 482-D, 1016 GD Amsterdam, The Netherlands
Designated Data Protection Contact: [email protected]
2. Categories of Personal Data Collected
We adhere to strict data minimization principles. Depending on your interactions with our architectural studio, we may collect the following data categories:
- Direct Inquiry Data: Full name, organizational affiliation, telephone number, corporate email address, project site parameters, and budgetary projections voluntarily provided via our tender submission form.
- Technical Transmission Logs: IP address (anonymized at network ingestion), browser agent header, operating system, referencing URL, and timestamp records collected automatically to guarantee web security and prevent DDoS incidents.
- Telemetry & Behavioral Data: Aggregate, anonymized interaction indicators such as page dwell time, blueprint view sequences, and card interaction events gathered only when explicit consent is granted through our cookie consent mechanism.
3. Legal Bases for Processing Under EU GDPR
Under Article 6 of the General Data Protection Regulation, Pickpantrystorypuls processes your personal information exclusively under the following lawful foundations:
- Article 6(1)(b) Contractual Performance: Processing required to prepare architectural tenders, conduct structural site feasibility surveys, or execute spatial design contracts.
- Article 6(1)(f) Legitimate Interests: Processing necessary for maintaining server infrastructure security, preventing fraud, and defending legal claims.
- Article 6(1)(a) Freely Given Consent: Applicable to non-essential analytics and persistent cookie storage, which may be withdrawn at any time through our cookie preference interface.
- Article 6(1)(c) Legal Obligation: Retention of financial invoices, transaction records, and construction permits mandated by the Dutch Tax and Customs Administration (Belastingdienst).
4. Third-Party Sub-Processors and Data Transfers
We do not sell, license, or trade client or visitor personal records. We partner exclusively with certified infrastructure providers that offer signed Data Processing Agreements (DPAs) with Standard Contractual Clauses (SCCs) compliant with CJEU precedents:
- Hosting Infrastructure: Bare-metal and static CDN delivery hosted in ISO 27001-certified data centers located in Frankfurt (Germany) and Amsterdam (Netherlands).
- Email & Communication Relay: Encrypted enterprise email infrastructure operating under strict TLS 1.3 encryption protocols.
- Legal & Engineering Auditing: Independent structural engineers and certified Dutch notaries engaged solely during formal commission execution.
5. Data Retention Schedules
We retain personal information only for the duration required to accomplish the stated collection purpose:
- Tender Inquiries (Unexecuted): Retained for a maximum of eighteen (18) months following submission, after which records are permanently purged.
- Contractual Architectural Archives: Engineering blueprints, structural calculations, and building permit filings are retained for twenty-five (25) years to honor structural liability obligations under Dutch construction law.
- Tax and Billing Records: Retained for ten (10) years in strict adherence to the Dutch State Archives and Tax Code requirements.
6. Your Rights Under GDPR and CCPA/CPRA
As an EU resident or qualified international visitor, you possess enforceable rights concerning your personal information:
- Right of Access (Art. 15 GDPR): Request a structured copy of all personal records held in studio systems.
- Right to Rectification (Art. 16 GDPR): Correct inaccurate or incomplete contact or organizational details.
- Right to Erasure / Right to be Forgotten (Art. 17 GDPR): Request permanent deletion where statutory preservation mandates do not apply.
- Right to Restrict or Object (Art. 18 & 21 GDPR): Limit processing or object to processing founded on legitimate interest.
- Right to Data Portability (Art. 20 GDPR): Receive data in a structured, commonly used, machine-readable JSON format.
- CCPA Non-Discrimination: We do not discriminate in service level or pricing against clients who exercise California privacy rights.
To exercise any statutory right, contact our Data Protection Officer at [email protected]. We respond to all formal requests within thirty (30) calendar days.
7. Supervisory Authority Jurisdiction
Should you believe our data processing fails to comply with European privacy legislation, you have the right to lodge a complaint with the lead Dutch supervisory authority:
Autoriteit Persoonsgegevens (Dutch DPA)
Postbus 93374, 2509 AJ Den Haag
Telephone: (+31) - (0)70 - 888 85 00
Official Portal: autoriteitpersoonsgegevens.nl