Privacy and cookie statement

This is an English translation of our Dutch privacy and cookie statement. In the event of any discrepancy, the Dutch version prevails.

TSD Beheer Nederland B.V. (hereinafter “we”, operator of the multi-tenant business building Rondaire 8) attaches great importance to your privacy. We process personal data with care and in accordance with the General Data Protection Regulation (GDPR; in Dutch: AVG) and the Dutch GDPR Implementation Act (Uitvoeringswet AVG). This statement explains which data we process, for what purposes, on what legal basis, how long we keep it, with whom we share it and what rights you have.

1. Controller

The controller within the meaning of the GDPR is:

TSD Beheer Nederland B.V.
Kapitein Rondairestraat 8, 5015 BC Tilburg
Email: team@tsdgroep.nl

You can use the contact details above for any questions about this statement or about the processing of your personal data, and to exercise your rights. We have not appointed a Data Protection Officer, as we are not legally required to do so.

2. What personal data do we process?

Depending on how you use the website, we process the following categories of data:

• Request and contact details: salutation, first and last name, email address, phone number, company name, website (if any), the number of workstations/m² you need, your preferred times for a viewing and the content of your message.
• Data when sharing an experience/review: your name and the rating/text you enter.
• Technical and usage data: IP address, browser and device type, operating system, pages viewed, click behaviour, the referring source (referrer) and the page on which you arrived.
• Campaign/source data: UTM parameters and advertising identifiers when you reach the site through an advertisement or campaign.
• Consent data: your cookie preference and the moment you gave or changed it.

You are not obliged to provide any data. However, to handle a request we need at least your name and a way to contact you (email or phone); without these details we cannot process your request.

3. Purposes and legal bases

We process your personal data only for the purposes below, each on the legal basis stated under Article 6 GDPR:

• Handling your request and contacting you — legal basis: performance of a contract or taking pre-contractual steps at your request (Art. 6(1)(b)).
• Publishing and displaying reviews — legal basis: your consent (Art. 6(1)(a)).
• Analysing and improving the website (measuring visits and usage) — legal basis: your consent for non-essential cookies (Art. 6(1)(a)); for strictly necessary, functional processing, our legitimate interest in a working, secure website (Art. 6(1)(f)).
• Marketing and advertising (including the Meta Pixel and Conversions API, conversion measurement and building audiences) — legal basis: your consent (Art. 6(1)(a)).
• Complying with legal obligations (such as accounting and retention obligations) — legal basis: legal obligation (Art. 6(1)(c)).
• Security and preventing misuse/fraud — legal basis: our legitimate interest (Art. 6(1)(f)).

4. Cookies and tracking technologies

This website uses three types of cookies and similar technologies:

• Necessary/functional cookies: required for the website to work and to remember your cookie preference. No consent is required for these.
• Analytical cookies/technologies: to measure — with your consent — website visits and usage and to improve the site.
• Marketing cookies and the Meta Business Tools: only after your consent via the cookie banner (see below).

You set your preference via the cookie banner. You can change your choice at any time by clearing this website’s cookies in your browser and reloading the page.

4.1 Meta Pixel and Conversions API

We use the Meta Pixel and the Meta Conversions API (together the “Meta Business Tools”) of Meta Platforms Ireland Ltd. With these — only with your consent — we measure website visits and requests that result from our advertisements on Facebook and Instagram, and we can make advertisements more relevant. With automatic advanced matching, a limited amount of contact data (such as email address or phone number) may be passed to Meta in hashed (encrypted) form; Meta does not receive readable personal data from us. If you do not give consent, the pixel is not loaded and we send nothing to Meta. For this processing, we and Meta are in certain cases joint controllers. How Meta further processes data is described in Meta’s privacy policy.

5. Retention periods

We do not keep your data longer than necessary for the purposes above:

• Requests/leads: for a maximum of 24 months after the last contact if no rental relationship results; if an agreement is concluded, for its duration and the statutory retention periods that apply afterwards (e.g. the 7-year tax retention obligation).
• Reviews: for as long as they are relevant for display on the website, or until you withdraw your consent.
• Analytics and advertising data: limited and no longer than necessary to measure and improve our campaigns; after that we delete or anonymise them.

6. Recipients and processors

We never sell your data. We do engage service providers that process data on our behalf (processors), such as our hosting and email service and the advertising platform Meta. Where required, we conclude a data processing agreement with these parties, so that your data is also well protected by them and used only for the purposes set out in this statement. In addition, we may disclose data where we are legally obliged to do so (for example to supervisory or investigative authorities).

7. Transfers outside the European Economic Area

Some of our service providers (including Meta) may process data on servers outside the EEA, including in the United States. Appropriate safeguards apply to such transfers, such as the European Commission’s standard contractual clauses and, where applicable, the EU-US Data Privacy Framework. This keeps the protection of your data at a level comparable to that within the EU.

8. Automated decision-making and profiling

We do not make decisions with legal effects based solely on automated processing (as referred to in Article 22 GDPR). For advertising, with your consent, profiling by advertising platforms may take place to make advertisements more relevant; this has no legal or similarly significant effects for you.

9. Security

We take appropriate technical and organisational measures to protect your personal data against loss or unlawful processing, including encrypted connections (TLS/HTTPS), restricted access to data and careful handling of login credentials. Have you nevertheless discovered a vulnerability or a possible data breach? Please contact us using the details in section 1.

10. Your rights

Under the GDPR you have the following rights:

• Access to the personal data we process about you (Art. 15).
• Rectification of inaccurate or incomplete data (Art. 16).
• Erasure (“right to be forgotten”) (Art. 17).
• Restriction of processing (Art. 18).
• Objection to processing based on legitimate interest and to direct marketing (Art. 21).
• Portability of your data (data portability) (Art. 20).
• Withdrawal of your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

You can submit a request using the contact details in section 1. In principle we respond within one month. To prevent misuse, we may ask you to identify yourself.

11. Withdrawing consent and turning off advertising

• Clear this website’s cookies in your browser and reload the page; the cookie banner will then appear again so you can change your choice.
• Manage your advertising preferences directly with Meta via your Facebook ad preferences and the settings in your Facebook/Instagram account.

12. Minors

Our website is not aimed at persons under the age of 16. We do not knowingly collect data from minors. Do you believe we have nevertheless processed data of a minor? Please contact us and we will delete it.

13. Filing a complaint

Do you disagree with how we handle your data? We would like to hear from you first. You also always have the right to lodge a complaint with the Dutch supervisory authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

14. Changes to this statement

We may amend this privacy and cookie statement from time to time, for example when we introduce new services or when laws and regulations change. The current version is always available on this page, with the date of the last change at the top.