Privacy Policy

1. Data Controller

This Privacy Policy explains how personal data is collected and processed by A.L. ten Wolde Consultancy, a sole proprietorship registered in The Netherlands under Chamber of Commerce (KvK) number 94687196 ("we", "us", or "our"), operating the platform ParcelSlovenia.

For any data protection inquiries or to exercise your GDPR rights, please contact us at: privacy@parcelslovenia.com.

2. Data We Collect

We collect and process the following minimal categories of personal data:

• Order & Contact Data: Email address and billing details required to process purchases and deliver digital reports.
• Payment Information: Handled entirely by our payment provider, Stripe. We do not process or store raw credit card or banking details on our servers.
• Search & Property Queries: Cadastral parcel numbers, address inputs, and search preferences submitted to generate reports.
• Technical Data: IP address, browser user-agent, device metadata, and access timestamps for logging, abuse prevention, and operational integrity.

3. Legal Basis for Processing

In accordance with Article 6 of the General Data Protection Regulation (GDPR), we process your data under the following legal bases:

• Performance of a Contract (Art. 6(1)(b)): To process payments, generate reports, and deliver them to your email address.
• Legal Obligation (Art. 6(1)(c)): To comply with Dutch tax laws, EU VAT (One Stop Shop) administrative regulations, and accounting rules.
• Legitimate Interests (Art. 6(1)(f)): To protect our platform from cyber threats, prevent fraudulent transactions, and maintain platform stability.

4. Data Retention

We store your data only for as long as necessary to fulfill the purposes outlined in this policy:

• Financial & Invoicing Records: Retained for 7 to 10 years as required by Dutch statutory tax compliance (Rijksbelastingdienst) and EU VAT regulations.
• Generated Reports: Retained on our secure infrastructure for up to 12 months to allow re-downloads, after which they are purged.
• Server Logs: Automatically rotated and deleted within 90 days.

5. Third-Party Service Providers (Data Processors)

We rely on trusted GDPR-compliant third-party service providers to power our platform. Data processing agreements (DPAs) are in place where applicable:

• Stripe Payments Europe, Ltd.: Payment gateway processing and tax calculation ( Stripe Privacy Policy).
• Cloud Hosting & Infrastructure: Database and server hosting (e.g., Microsoft Azure / Vercel) operating within EU data centers.

We do not sell, lease, or trade personal information to data brokers or third-party advertisers.

6. Your Rights Under GDPR

As a data subject located in the EU/EEA, you possess the following statutory rights:

• Access: Right to obtain a copy of the personal data we hold about you.
• Rectification: Right to correct incomplete or inaccurate data.
• Erasure ("Right to be Forgotten"): Right to request deletion of personal data, subject to statutory tax retention obligations.
• Restriction & Objection: Right to object to processing based on legitimate interests.
• Data Portability: Right to receive your personal data in a structured, machine-readable format.

To exercise your rights, email privacy@parcelslovenia.com. You also have the right to lodge a complaint with the lead supervisory authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens - autoriteitpersoonsgegevens.nl), or your local supervisory authority in Slovenia (Information Commissioner - IP RS).

7. Cookies & Local Storage

ParcelSlovenia uses only strictly necessary technical cookies and local browser storage (such as session tokens and CSRF protection tokens) essential for core functionality and secure checkout. We do not use third-party tracking, profiling, or advertising cookies.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published directly on this page with an updated "Last updated" date.