Last updated: July 2026

DakXL Groep B.V. (hereinafter: “DakXL”, “we” or “us”) attaches great importance to the protection of your personal data. In this privacy statement, we explain which personal data we collect, why we do so, how long we retain it, and what rights you have. We process your data in accordance with the General Data Protection Regulation (GDPR).

1. Who are we?

DakXL Groep B.V. is the data controller for the processing of personal data as described in this privacy statement.

2. Which personal data do we process?

We process personal data that you provide to us yourself, as well as data that is collected automatically when you visit our website.

Data you provide yourself:

• First and last name
• Phone number
• E-mail address
• City of residence and/or address details
• Information about your roof or home (for example, when reporting a leak or requesting a quote)
• Photos you send along with a report or request
• Any other information you actively provide, for example in correspondence or by phone

Data collected automatically:

• IP address (pseudonymised where possible)
• Information about your device, browser and operating system
• Browsing and click behaviour on our website (pages visited, mouse movements, scrolling behaviour)
• Cookies and similar technologies (see our cookie policy)

3. What do we use your data for?

We process your personal data for the following purposes:

We do not process more data than necessary for these purposes and do not use your data for automated decision-making.

4. Website analytics and Microsoft Clarity

We use Microsoft Clarity, which shows us how visitors use our website through, among other things, session replays, heatmaps and behavioural statistics. This data helps us improve the website, ensure its security and optimise our marketing. For more information about how Microsoft collects and protects your data, please see the Microsoft Privacy Statement.

In addition, we use Google Tag Manager and connected analytics and advertising services to measure the use of our website and optimise our advertising. We ask for your consent to place non-essential cookies via our cookie banner. See our cookie policy for a complete overview.

5. Who do we share your data with?

We never sell your data to third parties. We only share your data with parties that support us in providing our services, such as:

• Microsoft (Clarity) – website analytics and behavioural statistics
• Google (Tag Manager, analytics and advertising services) – website statistics and advertising
• Jotform – processing of forms, including leak reports
• Our hosting provider and website administrator – technical maintenance and security of the website
• E-mail and administration software – communication, quotes and invoicing

We enter into a data processing agreement with parties that process personal data on our behalf, to ensure the same level of security and confidentiality. Some of these parties are located outside the European Economic Area (EEA), such as Microsoft and Google in the United States. Transfers take place on the basis of appropriate safeguards, such as the EU-U.S. Data Privacy Framework and/or standard contractual clauses of the European Commission.

We may also disclose data where legally required to do so, for example to the Dutch Tax Administration.

6. How long do we retain your data?

We do not retain your personal data longer than necessary for the purposes for which it was collected:

• Enquiries and quotes without follow-up: a maximum of 1 year after the last contact
• Customer data and project files: for the duration of the contract and the subsequent warranty period
• Financial and tax records: 7 years (statutory retention obligation)
• Analytics data (Clarity, statistics): in accordance with the retention periods of the relevant service, generally a maximum of 13 months

7. How do we protect your data?

We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. These include a secure SSL connection (https), restricted access to data and up-to-date security updates for our website. If you have the impression that your data is not properly secured, or if there are indications of misuse, please contact us at info@dakxl.nl.

8. Your rights

Under the GDPR, you have the following rights:

• Access – you may request which personal data we process about you
• Rectification – you may have incorrect or incomplete data corrected
• Erasure – you may request that your data be deleted
• Restriction – you may request that the processing of your data be temporarily restricted
• Objection – you may object to the processing of your data, including processing for marketing purposes
• Data portability – you may request to receive your data in a commonly used file format
• Withdrawal of consent – where you have given consent, you may withdraw it at any time

You can submit a request via info@dakxl.nl. To verify that the request was made by you, we may ask you to identify yourself. We will respond to your request within four weeks.

If you disagree with how we handle your data, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl.

9. Cookies

Our website uses cookies and similar technologies. On your first visit, we ask for your consent to place non-essential cookies via the cookie banner. You can adjust your preferences at any time. More information can be found in our cookie policy.

10. Changes

We may amend this privacy statement from time to time, for example in the event of changes to our services or legislation. The most recent version can always be found on this page. We recommend that you review this statement regularly.

Questions?
Please contact DakXL Groep B.V. at info@dakxl.nl or 085 87 69 133.