Practical information · Privacy
Your data, with care.
We hold your data solely for our own service: your purchase, your service visits, your warranty. We do not sell your data and share it only with the processors listed below. You can ask at any time what we hold about you.
SUNSPA ’T GOOI Wellness at home.Important
Privacy statement
The text below is a working first version and will be reviewed by a legal professional after go-live. Minor textual refinements may follow.
Version 1.0 · 2026
One · Controller
Who we are
Sunspa ’t Gooi is the controller for the processing of personal data as set out in this privacy statement.
Sunspa ’t Gooi · Loodijk 24A · 1243 JB ’s-Graveland
CoC 99080478 · VAT NL868785696B01
085 070 41 71 · info@sunspahetgooi.nl
Two · What we collect
Personal data we process
When you request a quote, schedule an appointment or contact us, we collect:
- First and last name
- Address details (for delivery and service)
- Phone number
- E-mail address
- Company name, CoC, VAT (business customers only)
- Information about your spa/sauna for service purposes
- Payment details (only for processing, not stored)
Three · Why
Purpose and legal basis
We process your data for:
- Drafting quotes (performance of contract)
- Delivering, installing and maintaining products (performance of contract)
- Answering questions (legitimate interest)
- Meeting statutory retention obligations (legal obligation)
We do not use your data for marketing purposes unless you give explicit consent.
Four · Retention
How long we retain data
We retain your data no longer than strictly necessary:
- Quote requests without follow-up: 6 months
- Purchase and service data: 7 years (statutory retention)
- Warranty-related data: throughout warranty period + 1 year
- Contact queries: 1 year
Five · With whom we share
Transfer to third parties
We share your data only with parties necessary for our service:
- Our suppliers (only what is needed for your order)
- Installers engaged by us
- Our bookkeeper (financial processing)
- e-Boekhouden.nl (financial administration, processor with DPA)
- Resend (delivery of confirmation e-mails and lead notifications, processor with DPA, EU hosting)
- Cloudflare (hosting of our website, no transfer of personal data outside the EU)
- Microsoft 365 (e-mail and calendar, processor with DPA)
- Anthropic (AI chat assistant on the site; what you type in the chat is sent to their API in the United States to generate a reply; processor arrangements via the API terms)
- Google (Tag Manager, Analytics statistics and Google Ads measurement, only after your cookie consent. If you submit an enquiry or booking, an encrypted (hashed) version of your e-mail address or phone number may be shared with Google to measure conversions reliably, so-called enhanced conversions; Google cannot reverse this data into a readable e-mail address)
- Microsoft Clarity (usage analytics: heatmaps and session recordings that show how visitors use the site, only after your cookie consent; what you type into fields is masked by default)
- Meta (ad measurement, only after your cookie consent. If you fill in one of our lead forms on Facebook or Instagram, we receive the details you entered there from Meta in our customer system so we can contact you)
We do not sell your data to third parties. We only set measurement and advertising cookies (Google Analytics, Google Ads, Meta and Microsoft Clarity) with your consent; see the cookie statement.
Six · Your rights
What you can request
You have the right to:
- Access your data
- Have your data corrected
- Have your data erased
- Object to processing
- Receive a copy of your data (data portability)
- File a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl)
Send a request to info@sunspahetgooi.nl. We respond within 30 days.
Seven · Security
How we protect your data
We apply appropriate measures to prevent misuse, loss, unauthorised access and unwanted disclosure of your data. All data communication is encrypted via HTTPS. Access to your data is limited to staff who need it for their work.