Privacy Policy

Who we are

MercesArtGolden trade and services B.V. (“MercesArtGolden”, “we”) is the controller of the personal data collected through this website. Address: H. de Lintweg 63, 3201 EK Spijkenisse, Nederland. Chamber of Commerce (KvK): 42169061. VAT (BTW): NL870017688B01. Privacy contact: commercial@mercesartgolden.com · +31 6 57567824.

What data we collect and why

• Contact form: name, email, subject and message — to answer your enquiry (legitimate interest and pre-contractual steps).
• Catalogue orders (cart): name, email, telephone, company, tax number, country, address and message — to prepare the quote, deliver and invoice (performance of a contract and pre-contractual steps).
• Client area: your account details, quotes, documents and messages — to manage the business relationship (performance of a contract).
• Online payments: payment takes place on the pages of Mollie or Stripe; we only receive the confirmation and the amount, never your card details (performance of a contract).
• Technical data: IP address and server logs, kept briefly, for the security of the website (legitimate interest).
• Contacts with partners: when you press a button to contact a partner, we record the date, the channel (WhatsApp, email, phone or website), the language and the type of device, with a reference included in the message — no name, number, email or IP address — so that the partner knows the request came from our website (legitimate interest).
• Quotation request to a partner: if you use the form on the partner page, your name, email, phone, project location and message are emailed to that partner, who replies to you directly, and you receive a copy; we do not keep them in our database, only the request reference (steps taken at your request before a contract).

We use no analytics, advertising or tracking tools, and we never sell data.

Who we share it with

Only with the processors we need, under a data processing agreement: the website hosting provider (European Union), Zoho (email, EU data centre), Mollie and Stripe (online payments), and the CallMeBot service, which sends us an internal WhatsApp notice of each new order (name and reference). The latter may involve a transfer outside the EU, with the safeguards provided for in the GDPR. We also share data with the authorities where the law requires it.

How long we keep it

• Contact messages: up to 2 years after the last contact.
• Orders, quotes, invoices and accounting records: 7 years, as required by Dutch tax law.
• Client area account: while it is active; afterwards, only what the law requires us to keep.

Your rights

You may request access to, rectification, erasure, restriction or portability of your data, and object to processing based on legitimate interest. Write to commercial@mercesartgolden.com; we reply within one month. You also have the right to lodge a complaint with the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl) or with the data protection authority of your own country.

Security

The website runs on HTTPS only, passwords are stored encrypted, the internal panel uses two-step verification, and client documents are accessible only to the client concerned. The website is not intended for children under 16.