Privacy Policy

Last Updated: December 2024

Effective Date: December 2024

Introduction

drylannzca B.V. (registration number 52749831) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our property brokerage services or visit our website at drylannzca.live.

As a company operating in the Netherlands, we comply with the General Data Protection Regulation (GDPR) and Dutch data protection laws. drylannzca acts as the Data Controller for all personal data processed through our services.

Data Collection

The data we collect includes personal information that you voluntarily provide when using our property brokerage services, contacting us, or visiting our website. This information is necessary for us to provide professional real estate services and maintain our business relationship with you.

We collect the following types of personal data:

  • Contact information (name, email address, phone number, postal address)
  • Property-related information (property details, preferences, transaction history)
  • Financial information (income details, mortgage information, when relevant to transactions)
  • Communication records (emails, phone calls, meeting notes)
  • Website usage data (IP address, browser type, pages visited, cookies)
  • Marketing preferences and communication history

How We Use Your Data

We explain how we use your information to provide professional property brokerage services and maintain our business operations. The use of your data is always based on a valid legal basis under GDPR.

We use your personal data for the following purposes:

  • Service Provision: To provide property brokerage services, including property searches, valuations, and transaction management
  • Communication: To respond to your enquiries, provide updates on property matters, and maintain professional correspondence
  • Legal Compliance: To comply with legal obligations in property transactions and regulatory requirements
  • Business Operations: To manage our client relationships, improve our services, and maintain business records
  • Marketing: To send relevant property updates and service information (with your consent)
  • Website Functionality: To ensure our website functions properly and provide a good user experience

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal bases:

  • Contract Performance: Processing necessary for performing our property brokerage services
  • Legitimate Interests: For business operations, service improvement, and maintaining client relationships
  • Legal Obligation: To comply with property law requirements and regulatory obligations
  • Consent: For marketing communications and non-essential cookies (where required)

Data Sharing and Third Parties

We may share your personal data with trusted third parties who assist us in providing our services:

  • Legal professionals (solicitors, notaries) involved in property transactions
  • Property valuation and survey companies
  • Mortgage brokers and financial institutions (with your consent)
  • Government agencies and regulatory bodies (when legally required)
  • Professional service providers (IT support, accounting services)
  • Property marketing platforms and websites

We ensure all third parties have appropriate data protection measures in place and only share data necessary for the specific purpose.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal requirements.

Our retention periods are:

  • Active Client Data: Throughout our business relationship and for 7 years after completion of services
  • Transaction Records: 7 years after transaction completion (legal requirement)
  • Marketing Data: Until consent is withdrawn or 3 years of inactivity
  • Website Analytics: 26 months maximum
  • Communication Records: 7 years for business correspondence

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data (subject to legal obligations)
  • Right to Restrict Processing: Request limitation of how we process your data
  • Right to Data Portability: Request transfer of your data to another service provider
  • Right to Object: Object to processing based on legitimate interests or for marketing purposes
  • Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

Cookies and Website Analytics

Our website uses cookies and similar technologies to enhance your browsing experience and analyse website usage. For detailed information about our cookie usage, please refer to our Cookie Policy.

You can manage your cookie preferences through our cookie consent banner or your browser settings.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Access controls and staff training
  • Secure data storage and backup procedures
  • Regular monitoring for security breaches

International Data Transfers

We primarily process data within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

  • European Commission adequacy decisions
  • Standard Contractual Clauses (SCCs)
  • Binding Corporate Rules
  • Certification schemes approved by supervisory authorities

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. We will notify you of any material changes by:

  • Posting the updated policy on our website
  • Sending email notifications to active clients
  • Updating the "Last Updated" date at the top of this policy

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or need to contact us regarding your personal data, please contact us using the following information:

Data Controller

Company: drylannzca B.V.

Address: Kastanjelaan 100, 2510 GV The Hague, Netherlands

Phone: +31 20 381 2871

Privacy Email: privacy@drylannzca.live

General Email: contact@drylannzca.live

Registration Number: 52749831

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe your data protection rights have been violated.

Supervisory Authority

If you have concerns about how we handle your personal data, you can contact the Dutch supervisory authority:

Autoriteit Persoonsgegevens

Postbus 93374

2509 AJ Den Haag

Website: autoriteitpersoonsgegevens.nl

Phone: +31 70 888 8500