This Privacy & Cookies Policy explains how Coare (hereinafter: “Coare,” “we,” or “us”) handles personal data and cookies on coare.nl (including subpages under coare.nl/nl and coare.nl/en). We process personal data in accordance with the General Data Protection Regulation (GDPR) and the Telecommunications Act.

1. Who is “Coare”?

Controller(s):
Coare – consisting of:

• Coare Architectuur B.V. 34241959
• Coare-Realisatie B.V. 33236954
• Coare Inrichten en Beheeren B.V. 34372005

Contact:
Address: Godebaldkwartier 407, 3511DT Utrecht · Telephone: +31 31 854 05 55 · Email: info@coare.nl
or
Address: Mokerstraat 10, 1021 KC Amsterdam · Telephone: +31 20 670 26 36 · Email: info@coare.nl

2. For what purposes and on what legal basis do we process data?

We process personal data solely for legitimate purposes and with a legal basis under the GDPR:

• Contact & quote requests
• Execution of assignments
• Job applications
• Website security & performance
  
  

3. What data do we process?

Depending on your interaction with us:

• Identification & business contact data: name, position, (business) email/phone, company name.
• Website and cookie data: IP address (anonymized), device/browser information, cookie IDs, page visits, click behavior.
• Application data: resume, cover letter, portfolio, references/LinkedIn profile (if shared).
• Financial/administrative: invoice and payment information, legally required record keeping.

We do not request any special personal data via the website and request that you do not send it unsolicited.

4. Data source

• Directly from you (form, email, phone, events).
• Automatically via your browser/device (cookies, logs).
• Public sources (e.g., trade registers) for B2B relationships.
  
  

5. Sharing data (recipients)

We share only where necessary with:

• IT and hosting providers: BLOKES-IT
• Analytics service: Google Analytics 4 (Google Ireland Limited)
• Professional service providers: accountants, lawyers.
• Government agencies: where legally required.

We conclude data processing agreements with processors. For Google, the EU Standard Contractual Clauses (SCCs) and supplementary measures apply, where relevant.

6. Transfer outside the EEA

If (sub)processors process data outside the EEA, we ensure appropriate safeguards, such as EU SCCs and supplementary measures. Information on relevant safeguards is available upon request via info@coare.nl.

7. Retention Periods

• Contact/quote data: up to 2 years after the last contact, unless an assignment is issued.
• Assignment files & invoices: 7 years (tax retention period).
• Job applications: 4 weeks after the end of the procedure; with consent, up to 1 year (revocable).
• Cookies: see cookie overview below.

We delete or anonymize data after the retention period.

8. Your Rights

You have the right to access, rectify, erase, restrict, port, and object (including to direct marketing or processing based on legitimate interest). You can also withdraw consent (non-retroactive).
Requests: info@coare.nl.
Not satisfied? You can file a complaint with the Dutch Data Protection Authority.

9. Security

We take appropriate technical and organizational measures, including: TLS encryption, access control, logging/monitoring, least privilege, backups, and periodic updates. In the event of a data breach, we act in accordance with the GDPR reporting obligations.

10. Cookies

10.1 What are cookies?

Cookies and similar technologies (such as pixels and local storage) are small files or pieces of code that store or read information on your device.

10.2 What categories do we use?

• Necessary/Functional cookies – required for basic functionality (e.g., sessions, security, cookie preferences).
• Statistical/Analytical cookies (Google Analytics 4) – help us improve the site. Only placed with consent.
  
  

11. Minors

Our services are aimed at business customers. We do not request data from children under the age of 16 and request that minors do not provide data via the site.

12. External links and embeds

We do not link to external sites and do not use external embeds (such as social pixels) outside of Google Analytics. If this changes in the future, we will update this policy and request permission where necessary.

13. Changes

We may update this policy. The date of the last update is shown at the top. We will inform you of any material changes in an appropriate manner (e.g., a notification on the website).

14. Contact

Questions or requests about privacy or cookies?
Email: info@coare.nl