Privacy statement

Ecommix is the controller for the personal data ECOMIX processes for its own services. This privacy statement explains which data we process, why we do so, who we share it with, how long we keep it and which rights you have.

• Naam: Ecommix (handelend onder de naam ECOMIX)
• Adres: Ebenezer Howardpark 54, 1326 EB Almere
• KvK-nummer: 42129724
• Btw-nummer: NL005518310B59

For privacy questions, contact us through the contact channel given in this statement.

Depending on how you use the website, we may process the following data:

• Contact details, such as your name, email address and telephone number.
• Address details, such as postcode, house number and any addition.
• Home and energy details from the home assessment, such as property type, ownership, solar panels, estimated energy use, grid connection, energy contract, future plans and goals.
• Communication, such as questions, messages and appointments with ECOMIX.
• Consent records, such as the text and version of a consent, the date and time, the partner named in it, and whether data was subsequently shared.
• Source and campaign data, such as UTM parameters, the referring page and advertising click ids — but only where the required consent or another valid basis exists.
• Technical and security data, such as IP address, browser and device details, timestamps and security logs, to the extent our website or hosting environment processes these.

More information about cookies and similar techniques is in our cookie policy.

We only process personal data where there is a valid basis for it:

• Handling a request, home assessment or question: necessary to provide a service at your request or to take steps before a possible agreement; where that does not apply, our legitimate interest in answering your request.
• Providing personal advice: performing the service you asked for, or pre-contractual steps.
• Sharing data with a specific execution partner: your separate consent, unless another legal basis clearly applies in a specific situation, in which case you are informed of this beforehand.
• Securing the website and our systems: our legitimate interest in a safe and reliable service.
• Non-essential analytics, campaign attribution or marketing techniques: your consent, given through the cookie settings.
• Legal obligations and legal claims: a statutory obligation or, where applicable, our legitimate interest in establishing, exercising or defending rights.

Where we rely on a legitimate interest, we assess whether the processing is necessary and whether your privacy interests do not outweigh it.

Data marked as required in a form is data we need in order to handle that request or question. If you do not provide it, we may not be able to carry out the request.

An optional consent — for sharing with an execution partner or for marketing, for example — is not a condition for using the basic functions of the website, unless the service you asked for genuinely cannot be carried out without that specific processing and we use another appropriate basis for it.

We do not share data in advance with an arbitrary or as yet unknown execution partner on the basis of a general consent.

When a specific partner is relevant for a quotation or an installation, we tell you which partner will receive the data, for which purpose and which data is needed. Where consent is the basis, we ask for that consent before the data is shared.

After the handover, the execution partner may be an independent controller for its own quotation, agreement, installation and aftercare. That partner must then inform you about its own processing.

We use service providers to make the website and our services work. They process personal data only on our instructions and within the agreements we have made with them. At present these are our hosting provider, the database in which your request is stored (within the European Economic Area), the service that sends our confirmation and notification emails, and our email and domain supplier.

Would you like to know exactly which parties these are? Ask us through our contact form and we will send you the current list. External analytics and marketing services active on the website are named in our cookie policy.

We may also share data with competent authorities where the law obliges us to.

Some suppliers may process personal data outside the European Economic Area. In that case we use a valid transfer mechanism, for example an adequacy decision of the European Commission or appropriate safeguards such as approved standard contractual clauses. Where necessary we take additional protective measures.

We do not keep personal data longer than necessary for the purpose for which it was collected. As a starting point the following periods apply:

• Requests, home assessments and contact files without a further agreement: at most 12 months after the last substantive contact, unless a longer period is necessary for a complaint, a dispute or a legal obligation.
• Evidence of a specific consent or its withdrawal: for as long as is reasonably needed to demonstrate that the processing was lawful, and no longer than necessary for possible complaints or legal claims.
• Technical security logs: as briefly as possible, and longer only where a security incident or investigation makes that necessary.
• Cookie and attribution data: according to the periods in our cookie policy.
• Data subject to a statutory retention obligation: for the statutory period.

When data is no longer needed, we delete or anonymise it.

ECOMIX does not take decisions about you based solely on automated processing that have legal consequences for you or that affect you to a similarly significant degree.

Depending on the situation, you have the right to:

• access your personal data;
• have incorrect data corrected;
• have data erased;
• have the processing restricted;
• object to processing based on a legitimate interest;
• in certain cases, receive the data you provided to us in a portable form;
• withdraw a consent you have given, at any time.

Withdrawing consent does not work retroactively: processing that lawfully took place on the basis of consent before the withdrawal remains lawful.

Would you like to exercise a right? Neem contact met ons op via info@ecommix.nl of via het contactformulier. We may ask for additional information to verify your identity where that is necessary. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access and other unlawful processing. The measures are matched to the nature of the data, the systems and the risks.

We may adjust this privacy statement when our services, our suppliers or our legal obligations change. The most recent version is on this page, with the date of the latest change.

Do you have questions about this privacy statement or about how ECOMIX handles personal data? Neem contact met ons op via info@ecommix.nl of via het contactformulier.