Privacy policy

1. Who we are

SAVA Glass is the data controller for the personal data collected through this website and when you place an order.

• —Chamber of Commerce (KvK) number: 94323380
• —Address: Weg door Rijpel 20, 5709 AT Helmond, Nederland
• —Email: info@savaglass.nl
• —Phone: +31 6 81411290

2. What personal data we collect

Depending on how you use the website, we process the following data:

• —Contact details: name, email address, phone number, delivery and/or billing address
• —Order and configuration data: chosen product, dimensions, options, price and order history
• —Payment data: only the payment status and payment method used — we never see or store your full card or bank details; payment itself is handled by Mollie
• —Account data: if you create an account, your login details (password stored encrypted) and saved addresses
• —Communication: messages you send us via email, the contact form or WhatsApp
• —Technical data: IP address, device and browser data, and functional cookies (see section 4)

3. Why we process this data

We use your data only for the following purposes, each with a legal basis:

• —Performance of the contract — processing and delivering your order, scheduling installation, and handling warranty or service
• —Legal obligation — keeping records for tax purposes (invoices are retained for 7 years as required by law)
• —Legitimate interest — securing our website, preventing fraud, and improving our service
• —Consent — only where you explicitly opt in, for example to receive offers; you can withdraw this consent at any time

4. Cookies

We only place functional cookies that are necessary for the website to work — for example, to remember your shopping cart or keep you logged in. No consent is required for these cookies under cookie law, as they are strictly necessary.

• —nv_cart — remembers the contents of your shopping cart
• —nv_session — keeps your account session active so you don't have to log in repeatedly

5. Sharing with third parties

We never sell your data to third parties. We only share personal data with parties necessary to provide our service, and only to the extent required:

• —Mollie — to securely process your payment; Mollie is itself the data controller for the payment data it processes about you
• —Our own delivery and installation teams — to plan and carry out delivery and installation; these are not outsourced subcontractors
• —Hosting and IT providers — for the technical management of our website and systems, bound by a data processing agreement

6. Transfers outside the EU

We only work with parties established within the European Economic Area (EEA), or that provide appropriate safeguards. Your data is not transferred outside the EEA without adequate protection.

7. How long we keep your data

We do not keep personal data longer than necessary for the purposes it was collected for.

• —Order and invoice data: 7 years, in line with the statutory tax retention obligation
• —Account data: for as long as your account is active, or until you request deletion
• —Data collected with your consent (e.g. offers): until you withdraw your consent

8. Security

We take appropriate technical and organizational measures to protect your data against loss, misuse or unauthorized access. Data is always transmitted over a secure (HTTPS) connection, and passwords are never stored in readable form — only encrypted using a modern hashing method.

9. Your rights

Under the GDPR, you have the following rights regarding your personal data:

• —Right of access — request which data we process about you
• —Right to rectification — have inaccurate or incomplete data corrected
• —Right to erasure — have your data deleted, unless we are legally required to retain it
• —Right to restriction of processing
• —Right to object to processing
• —Right to data portability
• —Right to withdraw consent previously given

10. Minors

Our website and services are not directed at minors. We do not knowingly collect personal data from individuals under the age of 16.

11. Changes to this policy

We may update this privacy policy from time to time, for example when our services change. The date at the top of this page shows when it was last updated.