Privacy statement
Verenfabriek De Spiraal B.V., Metaalstraat 9, 7483 PD Haaksbergen, the Netherlands, is the controller responsible for processing personal data as described in this privacy statement.
Contact details
• Website: https://www.despiraal.nl/en
• Address: Metaalstraat 9, 7483 PD Haaksbergen, the Netherlands
• Phone: +31 74 291 45 08
• Email: info@despiraal.nl
Personal data we process
We process your personal data when you use our services, contact us or request a quotation, and/or because you provide this data to us yourself. This concerns the following data:
• First and last name
• Company name and job title
• Email address and phone number
• The content of your request or message, including attachments such as technical drawings
• For job applications: your CV, cover letter and any other documents you send us
• IP address, internet browser and device type
• Information about your activity on our website, such as pages visited and click behaviour
• Location data at country or region level, derived from your IP address
• Other personal data you actively provide, for example in correspondence or by phone
Special categories of personal data
We do not process special categories of personal data. Our website and services are not intended to collect data about visitors under the age of 16, unless they have permission from a parent or guardian. However, we cannot verify whether a visitor is over 16. We therefore encourage parents to be involved in their children's online activities. If you believe we have collected personal data about a minor without such permission, please contact us at info@despiraal.nl and we will delete this information.
Purposes and legal bases
We process your personal data only for the purposes below and on the stated legal basis under the General Data Protection Regulation (GDPR):
• Handling your enquiry, quotation request or order, and contacting you by phone or email about it: performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR)
• Assessing your job application: pre-contractual steps (Art. 6(1)(b) GDPR)
• Operating and securing our website: legitimate interest (Art. 6(1)(f) GDPR)
• Analysing website use to improve our website and our offering: consent (Art. 6(1)(a) GDPR)
• Measuring the performance of our online advertising and showing relevant ads: consent (Art. 6(1)(a) GDPR)
• Complying with legal obligations, such as tax record-keeping: legal obligation (Art. 6(1)(c) GDPR)
Automated decision-making
Verenfabriek De Spiraal B.V. does not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you. Decisions about your enquiry, quotation or application are always made by a member of staff.
How long we keep personal data
We keep your personal data no longer than strictly necessary for the purposes for which it was collected:
• Enquiries and quotation requests without a follow-up order: 12 months after the last contact
• Customer and order data: 7 years, due to Dutch statutory tax retention requirements
• Job application data: 4 weeks after the procedure ends, or 1 year with your consent
• Analytics and marketing cookies: see the Cookies section
Sharing personal data with third parties
We do not sell your data. We only share your personal data with third parties when this is necessary to perform our agreement with you, to comply with a legal obligation, or when you have given your consent.
We use service providers who process data on our behalf, including our website host (Webflow) and Google (Google Tag Manager, Google Analytics and Google Ads). We have data processing agreements in place with these processors to safeguard the security and confidentiality of your data.
Some of these providers are based in the United States. Data is only transferred outside the European Economic Area with appropriate safeguards, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
Cookies and similar technologies
A cookie is a small text file that is stored on your computer, tablet or smartphone when you visit this website. We use three types of cookies:
• Functional cookies (Webflow): to make the website work and remember your settings, such as your language and cookie choices. No consent is required.
• Analytics cookies (Google Analytics, via Google Tag Manager): to measure how visitors use the website so we can improve it. Only with your consent.
• Marketing cookies (Google Ads, via Google Tag Manager): to measure which ads lead to an enquiry (conversion tracking) and to show you relevant ads on other websites (remarketing). Only with your consent.
We only place analytics and marketing cookies after you have given consent via our cookie banner. You can withdraw or change your consent at any time through the cookie settings on our website. You can also block cookies and delete previously stored cookies in your browser settings. Please note that the website may then no longer work properly.
For more information on how Google handles your data, see Google's privacy policy.
Your rights
You have the right to access, correct and delete your personal data. You also have the right to restrict processing, to object to processing and to withdraw any consent you have given at any time. In addition, you have the right to data portability: you can ask us to send the personal data we hold about you, in a common file format, to you or to another organisation you designate.
Please send your request to info@despiraal.nl. To make sure the request comes from you, we may ask you for additional information to verify your identity. We only ask for a copy of your ID if this is strictly necessary. We will respond as quickly as possible and in any case within one month.
Complaints
If you are not satisfied with how we handle your data, please contact us first. You also have the right to lodge a complaint with a data protection authority at any time. Our lead authority is the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens. You may also contact the supervisory authority in the EU country where you live or work.
How we protect personal data
Verenfabriek De Spiraal B.V. takes the protection of your data seriously and takes appropriate measures to prevent misuse, loss, unauthorised access, unwanted disclosure and unauthorised modification. If you feel your data is not properly secured or there are signs of misuse, please contact us at info@despiraal.nl.
Changes
We may update this privacy statement, for example when our website or the law changes. The latest version is always available on this page. Last updated: October 2026.
