Privacy Policy

Last updated: 19 October 2026

This policy explains what personal data Florunner collects through the website www.florunner.nl, why we collect it, and what rights you have. We process personal data in line with the EU General Data Protection Regulation (GDPR).

Who we are

The controller of your personal data is Florunner, Schiphol Boulevard 127, 1118 BG Schiphol, the Netherlands, registered with the Dutch Chamber of Commerce (KVK) under number 84259183. You can reach us at [email protected] or +31 (0)20 308 5252.

What we collect and why

• Contact form. When you send us a message we receive your name, email address, company name (optional) and the content of your message. We use this only to answer your enquiry and, if you become a client, to prepare and maintain our business relationship. Legal basis: our legitimate interest in responding to business enquiries and taking steps at your request before entering into a contract (Art. 6(1)(b) and (f) GDPR).
• Email and phone. If you contact us directly, we process the details you provide for the same purpose.
• Technical data. Our hosting and content-delivery providers process technical data such as IP address, browser type and the pages requested, to deliver the website securely and protect it against abuse. Legal basis: legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).

Cookies and analytics

This website does not use cookies for tracking or advertising. We use Cloudflare Web Analytics, a privacy-friendly service that counts page views without cookies and without building visitor profiles. Fonts are served from our own server; no data is sent to Google Fonts.

Who receives your data

• Formspree (Formspree, Inc., USA) delivers contact-form messages to our mailbox.
• Cloudflare (Cloudflare, Inc.) provides the content-delivery network, security filtering and web analytics.
• Google Workspace (Google Ireland Ltd.) hosts our business email.

Some of these providers may process data outside the European Economic Area. Where this happens, the transfer is protected by the EU–US Data Privacy Framework or by the European Commission's Standard Contractual Clauses. We do not sell your personal data and do not share it with third parties for marketing.

How long we keep data

Enquiries that do not lead to a business relationship are deleted no later than 24 months after our last contact. Data of clients is kept for as long as the relationship lasts and afterwards for as long as Dutch law requires us to keep business records (generally 7 years).

Your rights

You have the right to access, correct or delete your personal data, to restrict or object to its processing, and to data portability. To exercise these rights, email [email protected]. We will reply within one month.

If you believe we handle your data incorrectly, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Security

The website is served only over encrypted HTTPS connections, and access to personal data within Florunner is limited to the people who need it for their work.

Changes

We may update this policy from time to time. The date at the top shows when it was last changed.