Skip to content

Privacy Policy (GDPR)

Last updated: 10 February 2026

1. Who is responsible?

This privacy notice applies to the use of aquafleur.com and the processing of personal data by:

AquaFleur International
Burgerweg 6A
3155 DB Maasland
The Netherlands

For privacy questions, please contact: info@aquafleur.com (please include: “Attn: privacy”).

2. What personal data do we process?

  • Contact and communication data: name, email address, country, phone number, and the content of your message (and any attachments you provide).
  • Recruitment and social media lead data: name, email address, phone number, and any additional data you provide in a lead form (e.g., on Facebook/Instagram) or during the recruitment process.
  • Technical and cookie data: IP address (where applicable), cookie IDs, device/browser data, pages visited, and usage data and statistics (where possible aggregated and/or anonymised).
  • Location data (store locator / maps): location data you enter (e.g., city/postcode) and, only if you explicitly permit it in your browser/device settings, your precise location (this is typically not required).

3. Purposes of processing

  • Contact & customer service: responding to enquiries and communicating with you.
  • Recruitment & selection: contacting candidates, assessing applications/sign-ups, and managing the recruitment process and selection for open roles (including leads received via social media campaigns).
  • Website improvement & analytics: analysing website usage and improving content, usability, and performance.
  • Marketing measurement / advertising (where enabled): measuring campaign effectiveness and, where applicable, enabling remarketing (only according to cookie preferences).
  • Security: preventing misuse, fraud, and security incidents.
  • Legal obligations: complying with applicable legal requirements (including retention duties where relevant).

4. Legal bases

  • Consent (Art. 6(1)(a) GDPR): for cookies/trackers where required, and other processing where we ask for your consent (e.g., keeping recruitment data longer in a talent pool).
  • Contract / pre-contract steps (Art. 6(1)(b) GDPR): when your enquiry or application leads to (pre-)contractual steps.
  • Legitimate interests (Art. 6(1)(f) GDPR): website security, fraud prevention, website improvement and analytics (where permitted), and efficient handling of enquiries and recruitment leads, subject to a balancing test.
  • Legal obligation (Art. 6(1)(c) GDPR): where we are legally required to process or retain data.

5. Recruitment and social media lead campaigns (Meta: Facebook/Instagram)

If you respond to an ad on Facebook or Instagram and submit a lead form, we receive your data from Meta Platforms Ireland (the platform provider). We use these data to contact you about roles/applications, assess your submission, and manage the recruitment and selection process.

Data categories

Typically: name, email address, phone number, and any additional fields you provide.

Legal basis

  • Legitimate interests: our interest in recruiting suitable candidates and handling your application/lead.
  • Consent (where applicable): if we want to keep your details longer (e.g., in a talent pool) or use them for a purpose
    that requires consent, we will ask for your consent.

Sharing

Lead data may be shared with parties supporting us in managing ads and lead forms (such as our marketing/IT service providers and the relevant platform), solely for the purposes stated above and, where required, under appropriate agreements.

Important note

Meta also processes your personal data under its own terms and privacy policy for its own purposes. Please review Meta’s policies for more information.

6. Cookies, tag management, embedded video and maps

We use cookies and similar technologies. You can set preferences and (where necessary) give or withdraw consent via our cookie banner. Non-essential cookies and third-party embedded content are enabled only according to your cookie preferences.

Cookie categories

  • Strictly necessary cookies: required for the website to work properly.
  • Preference cookies: remember settings.
  • Analytics cookies: measure and analyse website usage (consent where required).
  • Marketing cookies/trackers: advertising/remarketing (consent required where applicable).

Google Analytics and Google Tag Manager

We use Google Analytics to understand how our website is used and to improve it.
We use Google Tag Manager to manage the loading of website tags (such as Analytics).
Analytics and other non-essential tags are enabled only according to your cookie preferences.

Vimeo (embedded video)

We embed videos via Vimeo. Embedded players may set third-party cookies/trackers. Therefore, Vimeo content is loaded only after you have given consent for relevant cookies/embedded content, or via a “two-click” solution where you first click to load the video.

Google Maps (store locator)

Our store locator uses Google Maps. Google Maps may set third-party cookies/trackers. Therefore, the map is loaded only after you have given consent for relevant cookies/embedded content, or via a “two-click” solution where you first click to load the map.

7. Who do we share data with?

We may share personal data with the following categories of recipients, where relevant and only as necessary:

  • IT, hosting and security providers (website hosting, maintenance, monitoring, security).
  • Google (Google Analytics, Google Tag Manager, and Google Maps), in line with your cookie settings.
  • Meta (Facebook/Instagram) to run/manage campaigns and lead forms and to receive leads (and, if enabled, marketing measurement in line with your cookie settings).
  • Vimeo for embedded video playback, in line with your cookie settings.
  • Public authorities where we are legally required to do so.

Where required, we enter into data processing agreements with processors acting on our behalf.

8. Transfers outside the EEA

Some providers may process personal data outside the European Economic Area (EEA), for example in the United States.
Where this happens, we implement appropriate safeguards, such as EU Standard Contractual Clauses (SCCs) and additional measures where necessary.

9. Retention periods

  • Contact enquiries: up to 24 months after completion, unless longer is necessary (e.g., ongoing relationship or legal obligation).
  • Recruitment and social media lead data: typically up to 4 weeks after the end of the recruitment process.
    We may keep your details for up to 12 months if you consent to longer retention (e.g., talent pool), or longer where necessary for legal claims/obligations.
  • Technical/log data: as short as possible, unless needed for security and troubleshooting.
  • Cookies: according to each cookie’s lifetime (see cookie banner/settings for details).

10. Security

We implement appropriate technical and organisational measures to protect personal data against loss, misuse,
unauthorised access, unwanted disclosure, and unauthorised alteration.

11. Your rights

Depending on the situation, you may have the following rights:

  • Access
  • Rectification
  • Erasure
  • Restriction of processing
  • Objection (especially where based on legitimate interests)
  • Data portability
  • Withdrawal of consent (where applicable)

To exercise your rights, contact info@aquafleur.com and include “Attn: privacy”. We generally respond within 1 month.

12. Complaints

If you disagree with how we handle your data, you may lodge a complaint with the Dutch Data Protection Authority
(Autoriteit Persoonsgegevens).

13. Required information and automated decision-making

  • Required information: If you contact us or apply, certain information is necessary to handle your request (e.g., an email address and/or phone number). Without it, we may be unable to respond or continue the process.
  • Automated decision-making: We do not make decisions based solely on automated processing that produce legal effects or similarly significant effects for you.

14. Changes

We may update this privacy notice. The most current version is always available on this page.