Privacy statement

In short: we ask only for what we need to recover your data, we never sell it, and we delete it when we no longer need it. The details are below.

Who is responsible for your data

Recovery Expert (“we”, “us”) is the controller for the personal data described in this statement. We are registered with the Dutch Chamber of Commerce under number 69815844, our VAT number is NL862352290B01, and our lab and office are at Javastraat 95, 1094 HC Amsterdam.

Questions about privacy, or a request to use one of your rights? Email info@recoveryexpert.nl or call +31 6 8536 8992.

What we collect

• Contact details — name, email address, phone number, and company name or VAT number where relevant.
• Case information — what happened to the device, the device type and model, serial numbers, and any notes you send us.
• The data carrier itself — the drive, phone or tape you hand in, and the files on it, insofar as we need access to recover them.
• Correspondence — emails, messages and notes from phone calls about your case.
• Financial records — quotes, invoices and payment status.
• Technical data — IP address, browser type and pages visited, in the server logs of our hosting provider. These logs are used for security and to keep the site online.

Why we process it, and on what legal basis

• To answer your request and quote a price — necessary to take steps before entering into an agreement (Art. 6(1)(b) GDPR).
• To carry out the recovery and invoice it — necessary to perform the agreement (Art. 6(1)(b) GDPR).
• To keep financial records — legal obligation (Art. 6(1)(c) GDPR). Dutch tax law requires us to keep invoices for seven years.
• To keep our lab, network and website secure — legitimate interest (Art. 6(1)(f) GDPR) in protecting our business and our clients’ data.
• To send case updates you asked for — performance of the agreement, or your consent where you chose the channel.

We do not use your data for automated decision-making or profiling, and we do not send marketing email you did not ask for.

How long we keep it

• Enquiries that do not lead to a case: 12 months.
• Case files and the recovery report: 2 years after the case is closed, so we can answer follow-up questions.
• Invoices and financial records: 7 years, as required by Dutch tax law.
• Server logs: 30 days, unless we need them longer to investigate abuse.
• Recovered data and the medium it arrived on: returned to you, or securely erased after you confirm receipt.

Who we share it with

We use a small number of service providers who act only on our instructions:

• Cloudflare — hosting and delivery of this website, and the email routing that delivers mail sent to our address.
• Google — the mailbox in which we read and answer your email, and the font used on this website.
• Our accountant — for bookkeeping and tax filings.
• Couriers — to send your drive back, with your name and address only.

If a case has to be referred to another lab, we ask your permission first. We may also have to hand over data when the law requires it. We never sell personal data, and we do not share it for advertising.

Transfers outside the EEA

Our providers may process data outside the European Economic Area, mainly in the United States. Where that happens, the transfer is covered by an adequacy decision such as the EU–US Data Privacy Framework, or by the European Commission’s standard contractual clauses. You can ask us for more detail.

Cookies

This website uses no advertising or analytics cookies. What we do place, and why, is set out in our cookie statement.

Your rights

You have the right to:

• see which personal data we hold about you;
• have incorrect data corrected;
• have data deleted, where we are not required to keep it;
• have processing restricted, or object to it;
• receive your data in a machine-readable format (data portability);
• withdraw consent you gave earlier, without affecting work already carried out.

Email us to use any of these rights. We answer within one month. If you are not satisfied with our answer, you can complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

How we protect your data

Case data is stored on encrypted disks, access to a case file is limited to the engineers working on it, and the lab is only accessible to staff. Removable media is wiped securely before it leaves our possession. If a breach ever affects you, we report it to the Autoriteit Persoonsgegevens and to you where the law requires it.

Changes to this statement

We update this statement when our working methods change. The date at the top of this page shows when it was last revised. The version published here applies from that date.

Contact

Recovery Expert
Javastraat 95, 1094 HC Amsterdam
KvK 69815844 · btw NL862352290B01
info@recoveryexpert.nl · +31 6 8536 8992