Who is responsible?
De Wrap Wereld is responsible for the processing described here. This policy covers our website, configurators and enquiries about vehicle wrapping, paint protection film (PPF), ceramic coating and starlight headliners.
De Wrap WereldValeton 7b, 5301 LW Zaltbommel, Netherlands
info@dewrapwereld.nl
+31 6 38368237
What information do we process?
- Enquiries: your name, email address, optional telephone number, subject, message and subsequent correspondence.
- Your vehicle and preferences: registration number or selected make and model, vehicle characteristics, treatment, colour, film, finish and configuration choices. Photos and attachments you provide may also contain personal information.
- Orders: information needed to prepare a quote, arrange work, invoice you and handle service or warranty questions.
- Website use: technical information such as IP address, browser, device, pages visited, timestamps, cookie choices and interactions. Depending on consent, this may include advertising data, click patterns and session recordings.
Most information comes directly from you. Registration lookups use public RDW vehicle data, such as make, model, colour and first registration date. This does not retrieve the registered keeper’s name or address. You can select a make and model manually instead.
Required form fields are needed to handle your request. Without sufficient contact or vehicle details, we may be unable to respond or prepare a suitable quote. Please do not send identity documents, payment card details or medical information.
Why do we use your information?
| Purpose | Legal basis |
|---|---|
| Answer quote requests, prepare an offer and fulfil an order. | Steps at your request before a contract, or performance of a contract. |
| Answer general questions and communicate with you. | Our legitimate interest in assisting customers and interested visitors, balanced against your privacy. |
| Secure the website, investigate errors and prevent spam or misuse. | Our legitimate interest in providing a secure and reliable service. |
| Maintain financial records. | Legal obligations, including tax record retention. |
| Non-essential statistics, advertising measurement and personalised advertising. | Your consent where required. You can withdraw it. |
A confirmation email is part of handling your enquiry. Submitting a request does not subscribe you to a newsletter.
Which services receive information?
External services process information for the following functions:
- Hosting and storage: OpenAI Sites and Cloudflare provide the website and configurator infrastructure, which may process enquiries and saved configurations.
- Email: Resend delivers form messages and confirmation emails containing the details you submit.
- Cookie choices: Cookiebot (Usercentrics) provides the consent banner and records choices.
- Measurement and advertising: Google Tag Manager manages tags including Google Analytics and Google Ads. Microsoft Clarity can analyse interactions and sessions. These services may process online identifiers and usage data. Where enhanced conversions are enabled, Google Ads tags may process hashed contact details; hashed data is not anonymous.
- Vehicle and colour information: RDW supplies public vehicle data. An embedded Avery Dennison/ColorSwatch viewer may receive technical information when used.
- WhatsApp and social media: Meta processes information under its own terms when you contact us through WhatsApp or open Instagram. Email and telephone contact are also available.
Order-related information may also be needed by administrative service providers or authorities where disclosure is legally required. External services have their own privacy policies.
How long is information retained?
Retention depends on its purpose, using these criteria:
- Enquiries, quotes and configurations: while handling the request and follow-up. After completion, retention depends on whether information remains necessary for an order, an ongoing dispute or evidence of agreements.
- Orders and service: during delivery and while relevant for agreed warranties, complaints or legal claims. This does not mean that all information remains necessary indefinitely.
- Financial records: basic records subject to Dutch tax retention requirements are generally kept for seven years under the applicable rules.
- Cookies and measurement data: durations vary by cookie and service. A cookie’s lifespan is not necessarily the same as the provider’s data retention period. See cookie information and the relevant provider’s privacy policy.
- Technical information: for as long as needed to investigate and prevent faults, security incidents or misuse.
For the retention period applicable to your request or configuration, or to request deletion, email us with enough information to identify your enquiry.
Processing outside the EEA
Some providers operate internationally. Information may be processed outside the European Economic Area (EEA), including in the United States. Such transfers require a valid GDPR transfer mechanism, for example an applicable adequacy decision or standard contractual clauses with additional safeguards where needed.
The applicable safeguard depends on the provider and processing. You can request information about recipients and safeguards relevant to your data.
Your rights and choices
You can request access, correction or deletion of your personal information. Depending on the circumstances, you can also request restriction or portability, or object to processing based on legitimate interests. You can always object to direct marketing.
Where processing relies on consent, you can withdraw it. Withdrawal does not affect the lawfulness of processing before withdrawal.
Email info@dewrapwereld.nl to exercise your rights. We normally respond within one month. For complex requests, the GDPR allows an extension of up to two further months; we will explain this within the first month. We may need to verify your identity. Please do not send a copy of your identity document unless an appropriate verification method has been agreed.
You can lodge a complaint with the Dutch Data Protection Authority or your local supervisory authority. You do not have to complain to us first.
Security and automated processing
The website uses encrypted HTTPS connections. Enquiry forms include checks against spam and misuse. Contact us by email if you suspect unauthorised access or a data breach.
The configurator automatically displays a visualisation or estimate based on your choices. An actual quotation or booking is agreed with you. The configurator does not make solely automated decisions with legal or similarly significant effects on you. With consent, advertising providers may infer interests for personalised advertising.
Changes to this policy
We may update this policy as the website or services change. The date above indicates the latest update. Contact us if you have questions about this policy.