Clear about your data.

1. Who is responsible?

Van Schieveen Multimedia, trading as VSM Woerden, is the controller for personal data processed through its own services and this website.

This notice applies to www.vsmwoerden.nl. The webshop and support portal are separate systems and may have additional privacy information and terms.

2. Which data do we process?

When you contact us

When you contact us by email, telephone or WhatsApp, we process the information you provide, such as your name, contact details, message, attachments and contact history. We use it to answer your question, arrange an appointment or prepare a quotation.

For a project or subscription

For advice, delivery, support and administration, we may process identity and address details, business details, project and device data, technical notes, invoice and payment data and agreed arrangements. We only request what is needed for the service.

When you visit the website

The hosting environment may process technical information such as IP address, browser type, requested page, date and time. This is needed to deliver the website, investigate faults and prevent misuse. The website code does not use advertising trackers or marketing analytics.

Reviews

The website may display short excerpts from public Google reviews. Names are shortened on this website. Please contact us if you would like your review changed or removed.

3. Our legal grounds

Depending on the situation, we process personal data to take steps before or perform a contract, comply with legal obligations, or pursue legitimate interests such as good service, security, fraud prevention, handling disputes and limited business promotion. Where the law requires consent, you can withdraw it at any time.

When relying on a legitimate interest, we balance it against your privacy interests and limit processing to what is necessary.

4. Who receives data?

We do not sell personal data. We only share it when needed to provide the service or comply with the law, for example with providers of website hosting and infrastructure, email and support, accounting and administration, or professional advisers.

Where required, processors are bound by security and confidentiality arrangements. If a provider processes data outside the European Economic Area, we use a valid transfer mechanism such as an adequacy decision or appropriate contractual safeguards.

If you use WhatsApp, WhatsApp/Meta processes your data under its own privacy policy. Google, Facebook, Instagram, the webshop and the support portal may also process data once you open their external service.

5. How long do we retain data?

• contact that does not lead to a project: up to 24 months after the last contact;
• customer and service files: during the project and generally up to 2 years afterwards, unless warranty, a dispute or the law requires longer;
• financial and tax records: 7 years;
• technical security logs: as briefly as possible and according to the infrastructure provider’s retention settings;
• reviews: while relevant, until consent is withdrawn or a valid objection is accepted.

6. Your privacy rights

You may request access, correction, deletion, restriction or portability of your personal data. You may also object to processing based on legitimate interests and withdraw consent.

Send your request to info@vsmwoerden.nl. We normally respond within one month. To keep data from reaching the wrong person, we may ask you to confirm your identity in an appropriate and data-minimising way.

If you are unhappy with our response, you may complain to the Dutch Data Protection Authority or the supervisory authority in your country.

7. Cookies and external links

VSM does not place advertising, tracking or marketing cookies in the code of this main website. Cloudflare does use the strictly necessary __cf_bm security cookie to recognise automated and malicious traffic. This encrypted cookie is not linked to a user account and expires after approximately 30 minutes of inactivity. It does not currently require prior consent.

This is why the main website does not currently show a cookie banner. If consent-requiring analytics, embeds or marketing technology are added later, they will only activate after your choice and this notice will be updated.

WhatsApp, Google, Facebook, Instagram, the webshop and the support portal are external services. Their provider may process data or place cookies after you open the link. Please consult that provider’s privacy and cookie information.

8. Security and changes

We use appropriate technical and organisational measures to protect personal data against loss, unauthorised access and misuse. The website uses encrypted HTTPS connections and security headers that help prevent unwanted framing and unnecessary access to camera, microphone and location.

We follow the statutory documentation and notification duties for relevant personal data breaches. This notice may change when our services or the law change; the current version is always available here.