Privacy Policy
Last updated
This policy explains how Ariafar Holding B.V. handles personal data collected
through the website at ariafar.nl. We are the controller of that data for the
purposes of the General Data Protection Regulation (GDPR).
Our office is at Hereplein 4, 9711 GA Groningen, the Netherlands. You can reach us about anything in this policy at privacy@ariafar.nl.
What we collect
When you use the contact form. Your name, your company (if you give one), your email address and the content of your message. We collect these because you send them to us.
When you load a page. Our hosting provider processes your IP address, the page you requested, your user agent and the time of the request, as part of delivering the site and protecting it from abuse. These records are short-lived and are not used to build a profile of you.
We do not use analytics or advertising cookies. The Site sets no tracking cookies and embeds no third-party trackers, so there is no consent banner.
Why we may use it, and on what basis
| Purpose | Lawful basis |
|---|---|
| Reading and replying to your enquiry | Legitimate interests — responding to someone who contacted us |
| Taking an enquiry forward into a business discussion | Steps prior to entering a contract, at your request |
| Keeping the Site available and defending it against abuse | Legitimate interests — network and information security |
| Meeting a legal or regulatory obligation | Legal obligation |
Who sees it
Contact-form submissions are delivered by email to our own inbox. The following processors are involved in operating the Site and may handle personal data on our instructions:
- Cloudflare, Inc. — hosting, content delivery, email delivery for the contact form, and bot protection on that form.
We do not sell personal data, and we do not share it with third parties for their own marketing.
Where a processor handles data outside the European Economic Area, that transfer is covered by the European Commission’s Standard Contractual Clauses.
How long we keep it
Contact enquiries are kept for 24 months from our last exchange with you, then deleted, unless the enquiry becomes part of a contractual or legal record that we are required to retain for longer. Server request logs are kept for 30 days.
Your rights
Under the GDPR you may ask us to give you a copy of the personal data we hold about you, correct it if it is wrong, delete it, restrict what we do with it, or provide it in a portable form. You may object to processing we carry out on the basis of legitimate interests.
To exercise any of these, email privacy@ariafar.nl. We will respond within one month.
If you are not satisfied with our response, you may complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or to the supervisory authority where you live.
Children
The Site is not directed at children and we do not knowingly collect personal data from anyone under 16.
Changes
We will update this policy when our practices change. The “last updated” date above tells you when that last happened.