Privacy statement

What data we process

Data you enter yourself: company name, company registration or VAT number, name, email address, phone number, postcode and collection address, and what you tell us about your equipment.

When you do business with us: data needed to collect, test, pay and invoice, such as bank details for the payout.

Technical data needed to make the site work, such as your IP address in server logs. We do not use advertising or tracking cookies.

Purposes

To handle your request: making an offer, scheduling collection, paying you and approving your trade account (lawful basis: performance of a contract or steps prior to entering into one).

To comply with legal obligations, such as the statutory retention of tax records and the registration of collected equipment (lawful basis: legal obligation).

To let you know about new lots, only if you have signed up for this (lawful basis: consent, which you can withdraw at any time).

Data on equipment we collect

We process data on the equipment we collect from you as a processor, on your instructions. For this we sign a data processing agreement in advance. We erase every storage device according to NIST 800-88 or destroy it physically, and you receive a certificate per serial number. We do not view, copy or keep that data.

Who we share data with

Only with parties we need to provide the service: our hosting (Vercel), our database (Supabase, servers in Frankfurt), our web shop and payment processing (Shopify and the payment provider) and carriers for collection and shipping. We have agreements with them on security and confidentiality. We never sell data.

How long we keep data

Requests that do not lead to a transaction: up to 12 months. Transaction and invoice data: 7 years, because of the statutory tax retention period. Erasure certificates: 7 years, so that you can still produce them later. Sign-ups for messages: until you unsubscribe.

Your rights

You can access your data, have it corrected or erased, object, have processing restricted and have your data transferred. Send an email to info@relayit.nl; we respond within one month.

If you disagree with how we handle your data, you can lodge a complaint with the Dutch Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl) or with the supervisory authority in your country.

Security

The site uses a secure connection (https). Forms are stored in a database that only Relay IT can access. Access is limited to the people who need the data for their work.