Legal

Privacy Policy

1. Who We Are

GRC Factory B.V. (KvK 12345678), Wilhelminakade 123, 3072 AP Rotterdam. Contact: privacy@grcfactory.nl. We are the data controller for personal data processed through this website and our client relationships.

2. What Data We Collect

  • Enquiry data: Name, email, organisation, and message submitted via contact forms.
  • Client data: Contact details, engagement information, and documentation shared during service delivery.
  • Website analytics: Anonymised usage data via Google Analytics (with your consent).

3. Legal Basis for Processing

  • Contract performance: To deliver our audit services to clients.
  • Legitimate interests: To respond to enquiries and manage business relationships.
  • Consent: For newsletters and marketing — withdrawable at any time.
  • Legal obligation: Where required by Dutch or EU law.

4. Data Retention

Enquiry data: 2 years. Client engagement data: 7 years. Newsletter data: until unsubscribe. Website analytics: 13 months rolling.

5. Your Rights Under GDPR (AVG)

You have the right to access, correct, delete, or transfer your personal data. Contact privacy@grcfactory.nl. You may also lodge a complaint with the Autoriteit Persoonsgegevens.

6. Cookies

We use functional, analytical (with consent), and optional marketing cookies. Manage preferences via the cookie consent banner.

7. Contact

privacy@grcfactory.nl · Wilhelminakade 123, 3072 AP Rotterdam

Last updated: 1 January 2025

Scroll to Top