Privacy statement

Data controller

• ZIG Engineering
• Werkgebied: Nederland en België, op locatie vanuit Utrecht
• KvK-nummer: 93178980
• Btw-identificatienummer: NL005008478B59
• Telefoon: +31 6 85866129
• E-mail: zig.performance@gmail.com

What data we process

Only what's needed to handle your request and give you a price:

• First name and surname
• Phone number and email address
• Postcode and town, so we can plan the appointment at your location
• Vehicle details: registration, make, model, year, engine, fuel and any earlier software modifications
• The service you're asking about and any notes you add

We don't place tracking cookies and don't use analytics or advertising services. No profile is built of you and no automated decision-making takes place.

Looking up a registration

When you enter a registration in the lookup, that registration is used to request technical vehicle details from the RDW's open vehicle register. No owner details are retrieved: the RDW doesn't provide those through open data. A registration you only enter in the lookup isn't stored. We only store it once you contact us yourself.

Legal basis and purpose

Processing is based on Article 6(1)(b) GDPR: performance of a contract, or taking steps at your request before entering into one. In practice: you ask for a price, and we need this data to give you one. If we later want to email you about something unrelated to your request, we'll ask for separate consent.

Retention period

Requests that don't lead to a job are kept for twelve months and then deleted. Data relating to completed work is kept for seven years, because tax law requires us to. The original software file from your vehicle is kept for two years, so that restoring it remains possible.

Who processes your data

We use service providers who process data on our behalf. A data processing agreement is or will be in place with each of them:

• Supabase — storage of requests, appointments and documents in a database within the EU
• Netlify — hosting of the website

We don't sell your data and don't share it with third parties for commercial purposes. Where a processor handles data outside the European Economic Area, this is done on the basis of the European Commission's standard contractual clauses.

Contact via WhatsApp

If you contact us through WhatsApp, that conversation runs via WhatsApp Ireland Limited and their own terms and privacy policy apply as well. We have no influence over how WhatsApp processes data. If you'd rather avoid that, use the form or give us a call.

Your rights

Under the GDPR you have the right to:

• access your data and request a copy
• have inaccurate data corrected
• have your data erased
• have processing restricted
• object to processing
• have your data transferred in a common format

Send a request to our email address. We respond within one month. If you're unhappy with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Security

The website uses encrypted connections (HTTPS). Requests and documents are stored in a database with restricted access; they aren't publicly retrievable. If you suspect misuse of your data, contact us straight away.