At Huyslabels we handle your personal data with care. This privacy statement explains
which data we process, why we do so, who we share it with, how long we keep it and
what rights you have. In doing so we comply with the General Data Protection
Regulation (GDPR).
1. Who are we?
Huyslabels is responsible for the processing of your personal data as described in
this privacy statement.
Huyslabels
Ceres 10
6001 WV Weert, the Netherlands
Chamber of Commerce number: 42018351
Email: info@huyslabels.nl
Phone: +31 6 13 65 49 73
2. Which data do we process?
Data you provide to us yourself (through the request form or contact form, by email
or by phone):
- Name and contact details (email address, phone number).
- Address details of the property (street, house number, postcode, town).
- Details about your property, such as property type, construction period and the reason for your request.
- Any comments or messages you add yourself.
Data we receive from others:
Sometimes someone else requests the energy label for your property, for example an
estate agent, landlord or housing association. From that client we then receive your
name, contact details and the address of the property, so that we can contact you and
schedule the inspection. That client is responsible for making sure they are allowed
to pass your details on to us.
Data we collect during the inspection of your property:
-
Structural and installation characteristics, such as insulation, glazing, heating,
ventilation and any solar panels.
-
Photos of the property and of the supporting documents you provide (invoices or
documentation of insulation and installations, for example). We only photograph what
is needed for the energy label and keep people and personal belongings out of frame
as much as possible.
Data for our administration:
- Invoicing and payment details, such as your account number when you make a payment to us.
Data collected when you visit our website:
-
Technical data such as your IP address, processed by our hosting provider to keep the
website secure and available.
3. What do we use your data for, and on what legal basis?
-
Contacting you and scheduling the inspection when someone else has requested the
energy label for your property. Legal basis: our legitimate interest in carrying out
our client's assignment.
-
Drawing up a quote and responding to your request. Legal basis: taking steps at your
request before entering into an agreement.
-
Scheduling and carrying out the inspection of your property and drawing up the energy
label. Legal basis: performance of the agreement.
-
Registering the energy label in EP-online of the Netherlands Enterprise Agency (RVO).
Legal basis: legal obligation.
-
Keeping the inspection file and cooperating with audits by our certification body.
Legal basis: legal obligation and the requirements attached to our accreditation as
an EPA adviser.
-
Sending invoices and keeping our administration. Legal basis: performance of the
agreement and the statutory tax retention obligation.
-
Responding to questions or messages sent through the contact form. Legal basis: our
legitimate interest in answering questions.
- Securing our website. Legal basis: our legitimate interest.
-
Asking you once, after our service has been completed, to leave a review on Google.
Legal basis: our legitimate interest in making the quality of our service visible.
Would you rather not receive a review request? Let us know and we will not send you
one.
We do not use your data for marketing purposes without your consent and we do not sell
your data to third parties. We do not take decisions based solely on automated
processing.
4. Your energy label is public
A registered energy label can be viewed by anyone through ep-online.nl on the basis of
the property address. The details of the label, such as the label class, are visible
there. Your name and contact details are not made public.
5. Reviews on Google
If you post a review about us on Google, it is publicly visible together with the name
and profile picture of your Google account. Google is itself responsible for the
processing of data on its platform; you can read more about that in Google's privacy
policy. We can read your review and respond to it publicly. If you want to change or
delete your review, you can do so yourself through your Google account.
6. Who do we share your data with?
We only share your data where this is necessary for our service or where the law
obliges us to:
-
The client, if someone else requested the energy label for your
property. They receive the energy label and the details needed to complete the
assignment.
- RVO, for the registration of the energy label in EP-online.
-
EP-certificatie B.V., which, as part of our accreditation, audits
files on a sample basis and may revisit a property for that purpose.
-
Service providers that process data on our behalf, such as our form
processor Make, our hosting provider Cloudflare, our calculation software Uniec3, our
email and calendar provider MijnHost and our accounting package EPsys. We make
agreements with these parties about the security and confidentiality of your data.
-
Government authorities, such as the Dutch tax authorities, where we
are legally obliged to do so.
7. Transfers outside the European Union
Some of our service providers, such as Cloudflare, are based in the United States or
have servers there. In those cases we make sure the transfer complies with the GDPR,
for example because the party is certified under the EU-US Data Privacy Framework or
because standard contractual clauses of the European Commission have been agreed.
8. How long do we keep your data?
We do not keep your data longer than necessary:
- Requests and quotes that do not lead to an assignment: 1 year after the last contact.
-
The inspection file, including photos and supporting documents: 15 years after
registration of the energy label, as required for our accreditation.
- Invoices and administration: 7 years, based on the statutory tax retention obligation.
- Messages sent through the contact form: 1 year after they have been handled.
9. Security
We take appropriate technical and organisational measures to protect your data against
loss and unauthorised access. Our systems are secured with passwords and two-step
verification, and only Huyslabels has access to your data.
10. Your rights
You have the right to:
- Access your data.
- Have incorrect data corrected.
- Have your data deleted.
- Have the processing of your data restricted.
- Receive your data in a common format or have it transferred to someone else.
- Object to processing based on our legitimate interest.
- Withdraw consent you have given.
You can send a request to info@huyslabels.nl.
We respond within one month. To prevent misuse, we may ask you to identify yourself.
Please note: data we are legally required to keep, such as the inspection file and our
administration, can only be deleted once the retention period has passed. We cannot
remove a registered energy label from EP-online ourselves.
Are you unhappy with the way we handle your data? You can file a complaint with the
Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via
autoriteitpersoonsgegevens.nl.
We would appreciate it if you contacted us first, so that we can look for a solution
together.
11. Cookies
See our cookie policy for more
information about the use of cookies on this website.
12. Changes
We may amend this privacy statement, for example if our way of working or the law
changes. The most recent version is always on this page.