Privacy notice

1. Who is responsible

Pedro Ivo Vidal Coelho Sciammarella, trading as Pedro Ivo Spatial, is a Dutch sole proprietorship based in Tilburg and is the controller for the processing described below.

• Chamber of Commerce (KVK): 93068425
• VAT identification number: NL004995056B92
• General contact: hello@pedroivospatial.nl
• Privacy requests: privacy@pedroivospatial.nl

No data protection officer has been appointed. You can send privacy questions directly to the privacy address.

2. Personal data we process

Depending on your interaction with us, we may process:

• enquiry data: name, business or organisation, email address, city or postcode, space type, desired outcome and approximate timing;
• correspondence and scheduling data: email content, questions, notes and appointment details;
• proposal, project and delivery data: selected service, location details needed for delivery, contacts, permissions, project status and handover information;
• administrative data: invoice information, payment status and legally required financial records;
• technical and security data: IP address, date and time, request metadata, error and abuse signals, Cloudflare Turnstile security signals, and a language preference that you choose to store locally in your browser.

Your acknowledgement that you have read this notice is only a record of notice. It is not consent to marketing. Do not send passwords, payment-card data, identity documents, health data or other special or highly sensitive personal data through the enquiry form.

3. Purposes and lawful bases

We do not use personal data for incompatible purposes and do not collect more than is reasonably necessary. When relying on legitimate interests, we balance those interests against your rights and reasonable expectations.

4. Who may receive data

We do not sell your personal data. When the enquiry form is submitted, the form data is stored in the Cloudflare application database. The website also creates an internal notification row. A separate Cloudflare Worker processes eligible rows and sends an operational notification to the Pedro Ivo Spatial business inbox. The current flow does not send an automated marketing message or customer acknowledgement. Only when necessary for the relevant step may data be processed by:

• Cloudflare for website delivery, Turnstile security, form handling and application storage;
• Google Workspace to receive the operational business notification and when email, calendar or project documents are needed for the next step;
• Mollie only when a payment link or payment processing is used for an agreed assignment;
• Rabobank only for actual bank transactions and the related financial administration;
• Realsee when you deliberately open an optional external 360 presentation;
• professional advisers, insurers or competent authorities where necessary or legally required.

These parties receive only the information needed for their task. Where a party acts as our processor, we put appropriate processing and security terms in place.

5. Transfers outside the European Economic Area

Some suppliers may process data outside the European Economic Area. In those cases, we use a legally permitted transfer mechanism and appropriate safeguards where required. A Realsee presentation is not loaded automatically: you must first choose to open the external content. Your device may then connect directly to Realsee and data may be processed outside the EEA, potentially including China. Before opening it, also review that provider’s privacy information.

6. Retention

We keep data no longer than necessary for the purpose for which it was collected. Our starting points are:

• enquiries that do not become assignments: up to 12 months after submission, or after the last demonstrable substantive contact when there is follow-up;
• operational project records: for the active project and up to 24 months afterwards;
• working and source files: up to 90 days after accepted handover, unless agreed otherwise in writing;
• invoices, payments and tax records: 7 years, or longer where the law requires;
• privacy, permission and legal records: for as long as needed to demonstrate rights, duties or legal claims.

A statutory retention duty, current dispute or security incident may require a longer period. Website-enquiry deadlines are currently checked periodically and manually; the live website does not yet rely on an automatic deletion task. At the end of the period, data is deleted or irreversibly anonymised.

7. Cookies and local storage

This website does not use advertising cookies, tracking cookies or marketing analytics. A language choice you make can be kept in your browser’s local storage. The enquiry form uses Cloudflare Turnstile for security. Turnstile processes security signals from your device and browser but, according to Cloudflare, not form content. Non-essential cookies or similar technologies will not be used before valid consent is obtained.

8. Automated decisions

We do not make solely automated decisions that produce legal effects or otherwise significantly affect you. Technical checks may flag an enquiry for security or fit, but a rejection, proposal or assignment decision is not determined solely by such an automated check.

9. Security

We use appropriate technical and organisational measures proportionate to the nature and risk of the processing. These include access controls, data minimisation, secure transmission, logging, recovery measures, periodic deletion checks and supplier controls. No system is risk-free; report a suspected security issue through the privacy address.

10. Your data-protection rights

Where the GDPR applies, you may request access, correction, deletion, restriction, portability or object to processing. Where processing is based on consent, you may withdraw it without affecting the lawfulness of earlier processing. We may request reasonable information to verify your identity.

Send a request to privacy@pedroivospatial.nl. You may also complain to the Dutch Data Protection Authority. We welcome the opportunity to investigate first, but this does not limit your right to complain.

11. Changes

We may update this notice when the website, services or law changes. The current version and effective date appear on this page. Where appropriate, material changes will receive additional notice.