Privacy Statement

COARE respects your privacy. In the following 10 questions and answers, this privacy statement sets out how we process your personal data. COARE processes personal data in accordance with the General Data Protection Regulation (GDPR). 


1. Who is responsible for processing my personal data? 

COARE is the party responsible for processing your personal data within the meaning of the General Data Protection Regulation (GDPR) for the purposes described in the privacy statement. COARE is located at Mokerstraat 10 (1021 KC) in Amsterdam.


2. What personal data do you process? 


We process the following personal data from you:

  • Contact details. Name, job title, address, telephone number and e-mail address;

  • Financial data. Bank account number, payment information and VAT number;

  • Communication data. E-mail messages, contact form on our website and letters.


3. For what purposes do you process personal data and on what legal basis? 


Your personal data is exclusively used for the following purposes:

  • Client management. We process your personal data for client administration purposes, project management and delivery purposes, and to invoice our services;

  • Supplier management. We process your personal data for supplier administration purposes and to manage orders and invoice our suppliers.

  • Communication. We process your personal data to maintain a relationship with you within the context of our services (architecture and realisation).

  • Implementation or application of regulations.


Our legal basis for processing your data is:

  • Necessary to safeguard our legitimate interests in view of providing our services to you and for establishing and maintaining a business relationship with you;

  • Necessary for the purposes of fulfilling certain contractual obligations to which you are a party, such as a service provision agreement;

  • Necessary to comply with a legal obligation, such as tax laws.


4. Who will have access to my personal data?


The recipients of personal data are limited to COARE's personnel who, in their professional capacity, need to access the data to support the performance of their duties for the purposes described above.


5. Is my personal data shared with third parties?


We may pass your details onto third parties, such as associated suppliers of IT systems, for the delivery of the project or our services. If we share your personal details with third parties who have been appointed as data processors to perform functions and services on our behalf, we will remain the data controller and conclude agreements in order to guarantee a thorough protection of your personal data.


6. Where is my personal data processed?


In principle, COARE processes your personal data in the Netherlands. This may involve transferring your personal data to countries outside the European Economic Area (EEA), if the third party processing your data on our behalf is located outside the EEA. Countries that belong to the EEA include all EU countries, Norway, Liechtenstein and Iceland. The transfer of data to any entity outside the EEA is done in accordance with the supplementary rules provided for in the GDPR. For each of these transfers, we make sure that we provide an adequate level of protection to the data transferred in accordance with the obligations established by the GDPR.


7. How long do you keep my personal data?


COARE retains your personal data for as long as needed to fulfil the purposes for which it is collected, unless we are required or permitted by law to keep the personal data for longer, e.g. to comply with tax reporting obligations. This means we may keep your personal data for a period of time even after you have stopped using our services. 


8. How is my personal data protected? 


COARE is responsible for taking suitable technical and organisational measures to protect your personal data against loss and against any form of unlawful processing.


9. What are my rights?


The GDPR states that you, under specific conditions, have the right to view, correct, object, limit, transfer or delete the personal data that COARE processes and to object to the processing of your personal data. 


To exercise your rights as set out above please contact us through the contact information below. If you are not satisfied with the way in which we process your personal data, you may lodge a complaint with the Dutch Data Protection Authority.


10. What should I do if I have questions?


If you have any questions about the way in which we process you personal data or this privacy policy, please contact us via or +31206702636.