You don't just want to hand over your personal data. They are requested for various purposes. We are happy to explain why this may be necessary. On this page we explain why we need a number of data. If you have any questions after reading, please let us know.

Vestingh Paint & Craft BV and de Vestingh Projecten BV (hereinafter referred to as De Vestingh), located at Huizerweg 29 in Bussum and registered with the Chamber of Commerce under numbers 73589918 (Vestingh Paint & Craft) and 65036980 (De Vestingh Projecten BV) attach importance to the protection of personal data.

This privacy statement explains how De Vestingh handles information about an identified or identifiable natural person, as referred to in the General Data Protection Regulation (GDPR).

  1. Application

This privacy statement applies to the following categories of natural persons whose personal data De Vestingh processes:

  1. (potential customers;
  2. Visitors in the store of De Vestingh;
  3. Visitors to the website(s)
  4. Participants in De Vestingh meetings;
  5. job applicants;
  6. All other persons who contact De Vestingh or whose personal data De Vestingh processes, with the exception of its employees.
  1. Processing of personal data

De Vestingh processes personal data that:

  1. A data subject has personally provided (during a visit to the store), by telephone or digitally (via e-mail or web forms on the website), such as name, gender, e-mail address, purchase, payment and order history, credit card number, e-mail, invoice and/or delivery address, telephone number.
  2. generated during a visit by a data subject to the De Vestingh website, such as the IP address, the surfing behavior on the website (such as data on the first visit, previous visit and current visit, the pages viewed and the way in which the website is navigated) and on which parts of it the data subject clicks;
  3. Captured by camera images during a visit to the store of De Vestingh. Camera images are made for the safety of staff and customers. These are stored securely for a limited time and then destroyed.
  1. Processing purposes

De Vestingh processes personal data for the following purposes:

  1. Vestingh processes the personal data that the customer provides or has ever provided to Vestingh on the website, in order to process the customer's purchases and to fulfill its obligations towards the customer
  2. The data can be used for identification, targeted marketing, customer research, newsletters and statistics. The data can also be used to send mail, SMS and e-mails to the customer and for marketing and providing information by telephone, all only when the customer registers for the newsletter via the website or when the customer has placed an order . If the customer does not wish his/her data to be used for marketing by SMS or e-mail, the customer can inform Vestingh of this by sending a message to or unsubscribe at the bottom of the mailing. The customer can contact Vestingh at any time to opt out of any form of marketing directed at the customer.
  3. Keeping track of user statistics of the websites. The data can also be used to analyze purchasing behavior with the aim of providing the customer with relevant information and marketing material and to improve the website, payment methods and procedures. Processing for the purpose of improving payment methods and procedures may mean that the customer's personal data is transferred to other companies within the Vestingh group and/or third parties.
  4. Third parties are, for example , SendCloud , Mollie and Mailchimp. Click to read their privacy statement. These parties comply with the Safety Shield.
  5. Vestingh uses Google's advertising services. The customer can find more information about the collection, sharing and use of data by Google in Google's privacy policy. ( )
  6. Vestingh uses cookies. Cookies allow us to improve the functionality of the website. In addition, we can keep track of how many and which advertisements are shown to you, so that you do not always see the same advertisement.
  7. If you do not want us to collect this information from you, you can:
    Delete cookies from your browser in your browser settings.
    2. Set your browser not to automatically accept cookies.
    Please note that websites will function less well if you do not accept cookies. This website uses cookies. We use cookies to personalize content and ads, to provide social media features and to analyze our website traffic. We also share information about your use of our site with our social media, advertising and analytics partners. These partners may combine this information with other information that you have provided to them or that they have collected based on your use of their services. You agree to our cookies if you continue to use our website. Cookies are small text files that can be used by websites to make user experiences more efficient. The law allows us to store cookies on your device if they are strictly necessary for the use of the site. For all other types of cookies we need your consent.
  1. Legal basis

De Vestingh processes personal data on the basis of one of the following legal grounds:

  1. Consent of the data subject. This consent can always be withdrawn, without affecting the lawfulness of the processing based on the consent before the withdrawal;
  2. A legitimate interest, such as using contact details to send invoices and/or orders and using contact details to store paints and used colors for a customer.
  1. Processors

De Vestingh can engage service providers (processors) for the processing of personal data, who only process personal data in accordance with instructions from De Vestingh. De Vestingh enters into a processing agreement with processors that meets the requirements set by the General Data Protection Regulation (GDPR).

  1. Sharing personal data with third parties

De Vestingh shares personal data with third parties if this is necessary to comply with a legal obligation. De Vestingh does not share personal data with third parties for commercial purposes, unless meetings / promotions are organized jointly with another organisation. In that case, only necessary contact details will be shared.

  1. Transfer outside the EEA

In principle, De Vestingh does not transfer personal data to countries outside the European Economic Area (EEA). If this should nevertheless be necessary, De Vestingh will ensure that the transfer only takes place if the European Commission has indicated that the country in question offers an adequate level of protection or if there are appropriate safeguards within the meaning of the General Data Protection Regulation (GDPR).

  1. Store and protect data

De Vestingh does not store personal data longer than necessary.

If the customer has agreed to be registered with Vestingh as a customer/member, the customer's personal data will be retained until the customer logs out again. This is to prevent information relevant to the customer, such as paints and colors used, from being lost.

The customer can unsubscribe as a customer/member on the website at any time. The customer can change and/or delete data at any time within the created account. If the customer does not register as a customer/member, his/her personal data will only be used for as long as required by law or as long as necessary for Vestingh to fulfill its obligations towards the customer, e.g. to complete a delivery or guarantee obligations. can meet are kept.

In any case, the customer's personal data will not be kept for longer than is legally permitted under the Personal Data Protection Act.

In principle, De Vestingh also applies the following retention periods:

  1. (Financial) administrative data: 7 years after recording the data;
  2. Data of employees and self-employed persons, other than (financial) administrative data: 5 years after termination of employment or after the end of the contract for services;
  3. Applicant data: 6 months after completion of the application procedure;

How does De Vestingh protect the customer's personal data?

De Vestingh has drawn up security procedures and taken technical and organizational measures to protect the customer's personal data. In addition, Vestingh has adequate firewall and antivirus programs to protect the Vestingh computer network and to deny unauthorized access to it. Physical access to the areas where the data is stored is limited, only authorized persons have physical access to it.

  1. Left

The Website may contain links to other websites. This privacy statement only applies to the Vestingh website. When the customer is further linked to another website, the customer must consult the integrity policy that applies to that website. Vestingh is not responsible for the processing of the customer's personal data by or on other websites.

  1. Changes to privacy statement

De Vestingh can always change this privacy statement. A current version of the privacy statement is published on the website of De Vestingh. It is advisable to consult this privacy statement regularly, so that you are aware of any changes.

  1. Rights, questions and complaints

You have the right to request De Vestingh to view, rectify, delete, transfer, limit the processing and object to the processing of your personal data. You can contact De Vestingh about this by sending an e-mail to

You can also contact De Vestingh with questions or complaints about the way in which De Vestingh processes personal data by sending an e-mail to

We try to resolve a complaint to your satisfaction. If that does not work, you can turn to the Dutch Data Protection Authority (AP).

Download the file here.