1. Introduction & Data Controller
Rankdsh Pure Pixl Atelier B.V. (operating under the domain rankdshpurepixl.hair, company registration number KVK 74921048, registered at Keizersgracht 482, 1016 GD Amsterdam, Netherlands) is committed to safeguarding your personal privacy. This Privacy Policy details how we handle information collected through our website, communications, and interactive services under the European Union General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and applicable international privacy frameworks.
2. Information We Collect
We adhere strictly to the principle of data minimization. We only collect personal information that is necessary to fulfill legitimate inquiries or maintain secure website operations:
- Contact Form Information: When you voluntarily submit an inquiry through our contact form, we collect your full name, email address, selected inquiry category (such as Conversion Planning or Electrical Systems), and the content of your message.
- Technical and Server Log Data: When you navigate our static website, our hosting server logs standard technical parameters. This includes your truncated Internet Protocol (IP) address, user agent string (browser type and version), referring Uniform Resource Locator (URL), timestamp of request, and requested pages. These logs are maintained exclusively for system security, denial-of-service mitigation, and network integrity.
- Local Storage Preferences: We use client-side local storage (
localStorage) strictly to preserve your consent status regarding our cookie notification banner. This ensures the banner does not repeatedly disrupt your browsing experience.
3. Lawful Basis for Processing (GDPR Article 6)
We process your personal information under the following legal bases:
- Consent (Art. 6(1)(a) GDPR): By explicitly ticking the consent checkbox before submitting our contact form, you provide clear consent for us to process your contact details for the sole purpose of replying to your technical enquiry.
- Legitimate Interests (Art. 6(1)(f) GDPR): We maintain temporary technical server logs to fulfill our legitimate interest in securing our digital infrastructure, detecting malicious traffic, and ensuring reliable server performance.
4. Cookies and Local Storage
Our website utilizes only essential technical mechanisms to operate reliably. We do not deploy third-party advertising trackers, cross-site behavioural profiling cookies, or invasive marketing pixels. Detailed information regarding our storage categories can be found in our dedicated Cookie Policy.
5. Third-Party Data Processors
We do not sell, rent, lease, or monetize your personal data. Where external hosting infrastructure is employed to deliver our static website files and route email correspondence, such providers operate under rigorous Data Processing Agreements (DPAs) that mandate strict compliance with EU data protection standards.
6. Data Retention Schedule
We retain personal information only for as long as necessary to satisfy the specific purpose for which it was gathered:
- Inquiry correspondence submitted via our contact form is retained for up to twelve (12) months following the resolution of your inquiry, after which it is permanently purged, unless a continuing consulting or contractual relationship is established.
- Server security access logs are rotated automatically and permanently deleted within thirty (30) days.
- Your cookie preference stored in your browser’s local storage remains on your device until you clear your browser cache or reset your preferences.
7. International Data Transfers
Our primary hosting infrastructure and administrative offices are located within the European Economic Area (EEA). If technical infrastructure routing momentarily traverses non-EEA jurisdictions, such transfers are governed by standard contractual clauses (SCCs) approved by the European Commission, ensuring an equivalent standard of protection.
8. Your Rights Under GDPR & International Law
Under Chapter III of the GDPR, as well as comparable provisions under the California Consumer Privacy Act (CCPA/CPRA) where applicable, you possess the following actionable rights regarding your personal data:
- Right of Access (Art. 15): Request confirmation and a copy of the personal data we hold concerning you.
- Right to Rectification (Art. 16): Request correction of inaccurate or incomplete information.
- Right to Erasure ("Right to be Forgotten", Art. 17): Request the permanent deletion of your personal information where no overriding legal basis compels retention.
- Right to Restrict Processing (Art. 18): Request temporary suspension of processing under specific legal conditions.
- Right to Data Portability (Art. 20): Receive your submitted contact information in a structured, machine-readable format.
- Right to Withdraw Consent (Art. 7(3)): Withdraw previously granted consent at any time with effect for the future.
To exercise any of these rights, please email our Privacy Officer directly at [email protected]. You also have the legal right to lodge a formal complaint with your competent national supervisory authority (in the Netherlands, the Autoriteit Persoonsgegevens).
9. Children’s Privacy Protection
Our website and conversion advisory services are directed exclusively to adult vehicle owners, automotive hobbyists, and professional builders aged 18 and older. We do not knowingly solicit or collect information from minors under the age of 16.
10. Data Security Measures
We implement robust technical and organizational security protocols to safeguard your information against accidental loss, unauthorized access, alteration, or disclosure. All web traffic to and from rankdshpurepixl.hair is encrypted in transit using modern Transport Layer Security (TLS 1.3).
11. Updates to This Policy
We may update this Privacy Policy periodically to reflect changes in workshop operations, administrative processes, or evolving European data protection legislation. The latest revision date will always be visible at the top of this document.
12. Data Protection Contact
For privacy inquiries, data subject access requests, or regulatory clarifications:
Data Protection Officer
Rankdsh Pure Pixl Atelier B.V.
Keizersgracht 482, 1016 GD Amsterdam, Netherlands
Email: [email protected]