Privacy statement

MDJI Services processes personal data for contact, appointments, proposals, contracts and delivery of assignments. This statement explains which data that involves and how it is handled.

Which data is processed

We process contact and company details, appointment information and information required for an assignment. If you request a free website check, we process the website address and your email address to create and send the report. For contracts we also process address and registration details, contract content, signer name and role, consent statements, timestamps, IP address, browser information and a technical audit log. If we send you an invoice, we process your company name, contact person, address, Chamber of Commerce and VAT number, the description and amounts of the work and the payment status. If you use the client portal, we process your name, email address, language preference and the time of your last login, as well as what you post in the portal: comments on test versions, approvals, wishes, answers to the questionnaire and change requests. When you approve a version or ask for changes, we also record the time, your IP address and browser information, so it can be shown later who approved what.

What it is used for

We use data to handle requests, perform appointments and agreements, record contract acceptance, administer payments and protect our systems. Processing is generally based on performance of a contract, a legal obligation or a legitimate business and security interest. We do not use the data for marketing without an appropriate legal basis.

How long it is kept

Appointment data and contact form messages without a follow-up are kept for no more than two years. Invoices are kept for seven years from the end of the year in which they were issued, as required by Dutch tax law. An invoice that has been sent is not changed or deleted; corrections are made with a credit note. Contracts, acceptance evidence and related business records are generally kept for seven years after they cease to be current, or longer where required by law or an ongoing dispute. Website check requests are deleted automatically after twelve months. Login links for the client portal, including the IP address they were used from, are deleted within two days after they expire. What you post in the portal is kept as part of the project records, for the same period as contracts.

Your rights

You may request access, correction, restriction, portability or deletion and may object in certain cases. Data subject to a statutory retention obligation cannot be deleted immediately. Send requests by email; additional identification may be requested.

Cookies

This website uses functional cookies for sessions, security, forms, the admin area and the client portal. After you log in to the client portal, a functional cookie remembers that you are logged in until you log out. Email and hosting providers may act as processors for contract delivery and storage. No tracking or marketing cookies are placed. To improve the website we count, per day, how often pages and the steps of the booking form are viewed. This happens without cookies and without IP addresses or any other data that could identify you.