Draft: this text has not been legally checked yet.

Privacy notice

This notice explains which personal data heizcheck (https://heizcheck.molenista.nl) processes, why, and what your rights are.

Controller

Angelista Enterprise B.V., Zeeltsloot 17, 2427 EA Zoetermeer, Nederland, KVK 88867013. Contact: angelista.enterprise@mailbox.org. We have not appointed a data protection officer; we are not required to.

Purposes

Inspection plan for heating systems under §60a and §60b GModG (formerly GEG): calculate deadlines and collect inspection reports from installers.

Which data

• Email address of the property manager (sign-in)
• Building addresses and number of units
• System type, year installed and date of the last inspection
• Installer name, inspection date and inspection report (PDF)
• Email addresses of installers who are sent an upload link

Legal basis

• Performance of the contract with your organisation: account, login, the service itself and support (GDPR art. 6(1)(b)).
• Legal obligation: invoices and bookkeeping (GDPR art. 6(1)(c), 7-year Dutch tax retention).
• Legitimate interest: security, debugging and business contact with organisations (GDPR art. 6(1)(f)). You can object at any time.

Files you upload

If your files contain personal data of others (for example your clients), we process that data only on your behalf, under our data processing agreement.

Retention

We keep the data as long as the account exists and delete it on request by email.

We keep invoice data for 7 years because the law requires it.

Recipients

We do not sell data. Only these processors work for us, under a data processing agreement:

• OVHcloud SAS, Roubaix, France (hosting of server and database)
• Heinlein Hosting GmbH (mailbox.org), Berlin, Germany (sending and receiving e-mail)

All data stays in the European Economic Area.

Your rights

You may access, correct or erase your data, restrict processing, object, and take your data with you (GDPR art. 15 to 21). Write to angelista.enterprise@mailbox.org. We answer within one month. We make no decisions based solely on automated processing.

Contact form

Through the contact form we receive your name, e-mail address and message. We use them only to answer you (GDPR art. 6(1)(f), or (b) if it is about your account). The app does not store the message: it arrives as an e-mail in our mailbox at mailbox.org. We delete it when your question is handled, at the latest after 12 months.

Complaints

You can complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens, or to the authority in your own EU country.