Privacy policy

DE THERMOMEESTER

Privacy Statement

This is an English translation for your convenience. The Dutch version of this privacy statement is legally binding.

Version 3 September 2026 | www.dethermomeester.com

1. About this privacy statement

De Thermomeester processes personal data of website visitors, enquirers, customers, suppliers and contact persons. In this privacy statement we explain what data we use, why we do so, with whom we may share data, how long we retain it and what rights you have.

2. What personal data do we process?

• Name, address, place of residence and contact details.

• E-mail address and telephone number.

• Address and characteristics of the home or business location where work is requested.

• Data about the boiler, heat pump and other installation components, including brand, type, serial number, age, fault information, photos and maintenance history.

• Quotations, orders, appointments, subscriptions, correspondence and complaints.

• Invoice, payment and administrative data.

• Company name, KvK number and VAT details for business customers or suppliers.

• Technical website data, such as IP address, browser type, device, pages visited and security logs, insofar as the website or hosting necessarily processes this.

• Other data you provide yourself via e-mail, telephone, contact or quotation form.

We do not ask for special categories of personal data, national ID (BSN) numbers or copies of identity documents, unless a specific legal obligation makes this necessary.

3. Purposes and legal bases

4. Contact and quotation forms

Data from forms is used to handle the request, get in touch, prepare a quotation and, if necessary, schedule an appointment. Form data may be sent by e-mail and is stored in the secure website environment and/or the customer or CRM system used by De Thermomeester. Through forms we only ask for data that is reasonably necessary.

5. Cookies, Google Analytics and OpenAI Ads

The website uses a cookie banner. This allows you to view necessary, analytical and marketing cookies. Necessary cookies are always active, as they are required for the website to function properly and securely. Analytical and marketing cookies are switched off by default. You can accept, refuse or later adjust these via 'Cookie settings' in the footer.

De Thermomeester uses Google Analytics 4 to gain insight into the use of the website and to improve the website and marketing. Google Analytics is only activated after you have given consent for analytical cookies. Google may be involved in this as a processor or recipient. Free-text form content and other directly identifying form data is not deliberately sent to Google Analytics.

De Thermomeester uses the OpenAI Ads Measurement Pixel for conversion measurement and ad optimisation. This measurement is only activated after you have consented to marketing cookies. We do not send names, addresses, telephone numbers, email addresses, form messages or fault descriptions to OpenAI Ads, only the technically necessary event data. OpenAI may act as a recipient in this context.

Consent can be withdrawn via 'Cookie settings'. After withdrawal, further measurement for the withdrawn category stops and Google Analytics cookies recognisable by this website are removed where technically possible.

Cookie overview

These analytics and marketing cookies are only placed after consent for their respective category. The OpenAI cookies are secured third-party cookies and cannot be read or removed by this website; after withdrawal, the website does immediately stop further OpenAI Ads measurement.

6. With whom do we share personal data?

We do not sell personal data. For our services we may share data with:

• Subcontractors and technicians who carry out work.

• Suppliers and manufacturers where necessary for delivery, technical support or warranty.

• Website, hosting, e-mail, cloud, CRM, accounting and IT service providers.

• Payment and debt collection service providers.

• Accountant, insurer, legal adviser and competent government authorities where this is necessary or legally required.

With parties who process personal data on our behalf, we enter into a data processing agreement where necessary. Independently responsible parties only receive data that they need for their own legal or contractual task.

7. Transfers outside the European Economic Area

Some technical service providers may process data outside the European Economic Area. In such cases we use a valid transfer mechanism, such as an adequacy decision or standard contractual clauses approved by the European Commission, and we assess, where necessary, additional security measures.

8. Retention periods

• Contact requests without an order: in principle a maximum of 12 months after the contact has ended.

• Quotations not accepted: in principle a maximum of 2 years after the quotation expires or is declined.

• Customer, order, maintenance, warranty and complaint data: for as long as necessary for performance, service, warranty, evidence and possible legal claims; generally a maximum of 7 years after the end of the customer relationship, unless a longer period is necessary.

• Invoices and tax administration: at least 7 years pursuant to the tax retention obligation.

• Subscription data: for the duration of the subscription and generally a maximum of 7 years thereafter for administration and evidence.

• Technical security logs: as briefly as possible and generally a maximum of 6 months, unless an incident requires longer investigation.

• Data based solely on consent: until the consent is withdrawn or the purpose no longer applies.

Data may be retained for longer where a legal obligation, dispute, investigation or legitimate need for evidence makes this necessary. After that, it is deleted or anonymised.

9. Security

De Thermomeester takes appropriate technical and organisational measures against loss, unauthorised access, alteration and misuse. Access is limited to persons and service providers who need the data. However, no digital processing is ever completely without risk.

10. Your privacy rights

Depending on the situation, you may request access, rectification, erasure, restriction, data portability or object to processing. You may also withdraw consent. Withdrawal has no retroactive effect.

Send your request to info@dethermomeester.com. We may ask for additional information to verify your identity, but we will not ask for more than necessary. We will in principle respond within one month. In the case of complex or multiple requests, this period may be extended in accordance with the GDPR; you will be informed of this in good time.

11. Complaints to the supervisory authority

Do you have a complaint about the use of your personal data? If so, please contact us first. In addition, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via www.autoriteitpersoonsgegevens.nl.

12. Children's data

The website and services are not specifically aimed at children under 16 years of age. If you believe that we are processing data of a child without appropriate consent, please contact us so that we can investigate this and delete the data if necessary.

13. Third-party links and services

The website may refer to websites or services of third parties. Their own privacy statements apply. We are not responsible for processing carried out by these third parties.

14. Changes

We may amend this privacy statement when our website, services, suppliers or legal obligations change. The current version is available at www.dethermomeester.com. In the event of significant changes, we will inform data subjects where reasonably necessary.

15. Contact

For questions about this privacy statement or to exercise a privacy right, you can contact:

Practical information regarding a request

Please state as clearly as possible which right and which data your request concerns. Do not enclose a copy of your identity document unless we expressly ask for it after assessment. If identity verification is necessary, we will use the least intrusive method available.

We handle privacy requests free of charge, except where a request is manifestly unfounded or excessive and the GDPR allows us to charge a reasonable fee or refuse the request.