1. Data Controller Information
The legal entity responsible for the collection and processing of your personal information is:
JumbleoClips Archv Sports Facility Restoration Ltd
Company Registration No.: 09482173
Registered Address: 42 Keizersgracht, 1015 CR Amsterdam, Netherlands
Direct Data Protection Contact: [email protected]
2. Categories of Data We Collect
We believe in data minimization. We only collect personal information that is strictly required to provide technical advisory services, answer restoration briefs, or maintain the security of our online infrastructure:
- Direct Communications Data: When you complete our contact or technical assessment form, we collect your name, business or club email address, facility type, country, and any specific engineering parameters included in your enquiry.
- Technical Telemetry & Access Logs: Our web servers automatically log truncated Internet Protocol (IP) addresses, user agent strings, HTTP request headers, browser types, and timestamped page requests to safeguard our platform against distributed denial-of-service (DDoS) events.
- Consent Records: Records of choices made via our bottom cookie consent banner are stored locally in your browser's localStorage storage to prevent banner fatigue.
3. Legal Grounds for Processing (GDPR Article 6)
We process personal information under the following legal bases recognized by European data protection legislation:
- Legitimate Interests (Art. 6(1)(f)): Ensuring operational security, defending against automated vulnerability scans, and maintaining clean diagnostic delivery of our tennis court guides.
- Contractual Necessity & Pre-Contract Inquiries (Art. 6(1)(b)): Responding to diagnostic requests submitted by sports clubs, estate managers, or municipal tennis operators.
- Explicit Consent (Art. 6(1)(a)): For non-essential analytics tracking or optional telemetry where you have explicitly opted in via our cookie preferences mechanism.
4. Third-Party Sub-Processors & Infrastructure Providers
We do not sell, rent, or trade your personal data to programmatic advertisers or marketing brokers. We rely on vetted technical infrastructure providers who adhere to strict data processing agreements (DPAs):
- Cloud Hosting & Content Delivery: European edge servers providing secure SSL/TLS delivery and static file rendering. Data remains within the European Economic Area (EEA).
- Transactional Mail Relays: Encrypted SMTP services utilized solely for dispatching replies to customer project assessments.
5. Data Retention Schedules
We retain diagnostic inquiries and correspondence submitted via our contact portal for a maximum period of twenty-four (24) months to facilitate multi-year project planning and seasonal maintenance check-ins. After twenty-four months without active communication, records are securely expunged or anonymized. Technical server access logs are cycled and deleted automatically every thirty (30) days.
6. Your Statutory Rights (GDPR & International)
Under the GDPR (Articles 15 through 22) and analogous global frameworks such as the California Consumer Privacy Act (CCPA), you maintain the following enforceable rights regarding your personal information:
- Right of Access: Request a copy of the specific personal data held in our systems.
- Right to Rectification: Request correction of inaccurate, outdated, or incomplete records.
- Right to Erasure ("Right to be Forgotten"): Demand the deletion of personal information where no ongoing statutory retention obligation exists.
- Right to Restriction & Objection: Object to processing carried out under legitimate interest grounds.
- Right to Data Portability: Receive your submitted contact records in a machine-readable JSON or CSV format.
To exercise any of these protections, submit a signed request to our designated Data Protection Officer at [email protected]. We will respond within thirty (30) calendar days without fee.
7. Supervisory Authority Oversight
If you believe our processing of your personal information infringes on European data protection law, you hold the legal right to lodge a complaint with your local supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (AP).