Privacy policy
How CONSOO & CO handles personal data through this website and its services.
1. Who we are
CONSOO & CO, Lelystad, the Netherlands, is the controller for personal data processed through this website and its services. Questions can be sent to peter@consoo.co.
2. The data we process
Contact details you provide through the contact form or by email, including your name, email address, telephone number and project details.
Data needed to carry out a sourcing process, including the delivery address, project specifications, contracts and inspection files.
The website uses no analytics or advertising cookies. The selected language is stored functionally in the browser.
When the trade-line globe is initialised, the website does not request IP geolocation and does not call a geolocation endpoint. The browser only reads the locally available IANA time zone through Intl.DateTimeFormat().resolvedOptions().timeZone. A limited local table maps supported time zones to an approximate city and coordinates; if there is no match, the route starts in Lelystad. Browser geolocation and GPS are not used and no location permission prompt is shown. The derived approximation remains only in JavaScript memory and is not stored in localStorage, sessionStorage, IndexedDB or a cookie.
When pages, images or other website files are requested, Netlify as the hosting provider may process technical connection data such as an IP address, time of the request, requested URL and browser information in server or CDN logs needed to deliver and secure the service. The static website code does not read or persist those hosting logs.
3. Why we process this data
- General enquiries are processed on the basis of our legitimate interest in handling incoming business and project enquiries (Article 6(1)(f) GDPR).
- Steps you request before entering into an agreement, and performance of an agreement with you, are processed under Article 6(1)(b) GDPR.
- Processing required to comply with legal obligations is based on Article 6(1)(c) GDPR.
- Where necessary personal data is processed for technical website operation, security and functional preferences, we rely on our legitimate interest in operating and securing the website (Article 6(1)(f) GDPR).
We do not rely on consent for these processing activities where no consent is requested.
4. How we receive your enquiry
The contact form sends the entered data through a same-origin POST to Netlify Forms. After a successful HTTP response, the page displays the configured success message and resets the form. The form does not depend on WhatsApp and its contents are not automatically sent to WhatsApp. WhatsApp is a separate contact channel for messages and calls. Only when you choose a WhatsApp link does your browser open the relevant wa.me destination; any information you then send is handled through WhatsApp under the provider’s own terms and privacy arrangements. If the form POST fails or times out, the page displays the configured error message and keeps the entered form data available for correction or another attempt.
5. How long we retain data
- Enquiries that do not result in an assignment: for as long as necessary to handle the enquiry and comply with applicable legal retention duties.
- Project, contract and administrative data: for as long as necessary to perform the assignment and comply with applicable legal retention duties.
6. Sharing with third parties
Data is shared only when necessary with parties involved in operating the website or carrying out your project. This may include Netlify for website hosting and form processing, the selected factory, the appointed Chinese lawyer who drafts contracts and logistics partners. The website code does not automatically send the contents of the contact form to WhatsApp. We do not sell personal data to third parties.
7. Processing outside the EEA
A project in China may require necessary project and contact data to be transferred outside the European Economic Area. Such a transfer may take place only when the applicable conditions of Chapter V GDPR are met. This website build does not establish which transfer safeguard has been put in place for a specific recipient and therefore does not claim that standard contractual clauses are already in place for every transfer. Ask us for the applicable mechanism and safeguards before a specific transfer.
8. Cookies
The website uses no analytics or advertising cookies. The functional language preference is stored locally in your browser and is not used for tracking.
9. Security
We limit access to personal data to parties that need it for their task and apply appropriate technical and organisational security measures.
10. Your rights
Under the GDPR, you have the right to:
- Access — find out what data we process about you.
- Rectification — have inaccurate data corrected.
- Erasure — have data erased where no statutory retention obligation applies.
- Restriction — have processing temporarily restricted.
- Objection — object to processing.
- Data portability — receive data you provided yourself in a portable format.
You can exercise these rights by contacting peter@consoo.co. If you disagree with how we process your data, you can lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).
11. Changes
This privacy policy may be amended. The most recent version is always available on this page.
Frequently asked questions
Is my project data shared with parties in China? Only when necessary for your enquiry or assignment, such as with the factory, the appointed lawyer or an inspector. We limit what they receive to what is necessary for their role.
Can I ask for my data to be erased? Yes, send a request to peter@consoo.co. We will tell you whether any data must be retained for a little longer because of a statutory retention obligation.