1. Data Controller & Contact Details
This website (fixophone.nl) is operated by FIXORA, based in Amstelveen, the Netherlands. You can contact us regarding the processing of personal data at servicefixophone@gmail.com or +31 6 86316849. [DRAFT — Required from owner prior to launch: Official legal entity name, Chamber of Commerce (KvK) number, and statutory correspondence address.]
2. Personal Data We Process
When you submit the online repair form, track an order, or review a quotation, we process only the information required for your request: (a) Contact details: full name, email address, phone number, and whether you optionally permit manual contact via WhatsApp; (b) Return address details: street address, postal code, and city; (c) Device and repair details: selected device category and model, repair type, your description of the issue, the indicative catalog estimate at the time of request, quotation amounts, and customer-visible status messages; (d) Voluntarily attached device photos: up to 4 photos to clarify visible damage or issues; (e) Security and verification metadata: timestamps and records of your privacy and diagnostic consents, unique secure tokens used to access your order tracking and quotation without requiring account registration, and technical security logs used to protect against automated abuse. Your raw IP address is not stored in our customer database.
3. Purposes & GDPR Legal Bases
We process your data to register and assess your repair request, prepare and present quotations, perform approved repairs, coordinate device handover or return shipping, and provide secure order status tracking (Article 6(1)(b) GDPR — performance of a contract and pre-contractual measures). We also process technical security logs to protect the service against abuse and unauthorized access (Article 6(1)(f) GDPR — legitimate interest). Invoicing records are retained to comply with the statutory 7-year retention obligation under Dutch tax law (Article 6(1)(c) GDPR; Algemene wet inzake rijksbelastingen Art. 52). Optional communication via WhatsApp is based on your explicit consent (Article 6(1)(a) GDPR).
4. Browser Storage, Tokens & Cookies
The public website does not use advertising, analytics, or third-party tracking cookies. Your browser's sessionStorage is used temporarily only to carry your selected device from the price estimator to the repair form and to prevent duplicate submissions if a network retry occurs. Private tracking and quotation links carry their bearer token in the URL hash fragment (#) and remove it from the browser address bar once loaded. Strictly necessary encrypted HttpOnly cookies are used only on restricted staff administration pages.
5. Data Sharing & Retention Periods
FIXORA does not sell personal data and does not send automated marketing messages. Customer communication is handled manually by our own staff. Data is shared exclusively with carefully selected sub-processors: (a) postal carriers (PostNL / DHL) for insured return delivery; (b) dedicated European hosting infrastructure located in Amsterdam / Helsinki (EU), protected by strict access controls and encrypted storage. Personal data for active orders is retained throughout the repair workflow and the applicable warranty period, after which it is securely archived. Voluntarily uploaded device photos are used solely for technical inspection and are retained for at most 90 days after repair completion and warranty. Invoices and payment records are retained in compliance with the statutory 7-year Dutch tax retention obligation (AWR Art. 52). [DRAFT — To be confirmed by owner: Exact archiving duration for cancelled repair files.]
6. Your Rights under the GDPR
Under the General Data Protection Regulation (GDPR / AVG), you have the right to request access to your personal data, rectification of inaccurate data, erasure (where no statutory retention duty applies), restriction of processing, data portability, and objection to processing, as well as the right to withdraw consent. To exercise these rights, contact servicefixophone@gmail.com with your order reference. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).