Privacy Policy
Last updated: 12 February 2026
Dinvastoria takes the protection of your personal data seriously. This policy describes which data we collect, why we do so and which rights you have under the General Data Protection Regulation (GDPR) and the Dutch Implementation Act.
1. Data controller
Dinvastoria, located at Keizersgracht 482-H, 1017 EG Amsterdam, registered with the Dutch Chamber of Commerce under number 89 124 376, acts as the data controller for data collected via dinvastoria.com. You can contact us at privacy@dinvastoria.com.
2. Data we collect
We collect only data that you actively provide (name, email, message) and technical data required for the site to function (truncated IP address, browser type). With your consent we use additional cookies for analytics and ads via Google Consent Mode v2.
3. Purpose and legal basis
Your data is used only to answer your message, keep the site secure and — if you give consent — to measure usage. Legal bases are your consent (art. 6(1)(a) GDPR) and our legitimate interest in offering a functional website (art. 6(1)(f) GDPR).
4. Retention periods
Messages from the contact form are kept for a maximum of 24 months after the last contact. Cookie settings are stored locally on your device and remain valid for 12 months or until you clear them manually.
5. Sharing with third parties
We never sell your data. We share technical data only with processors that help us with hosting and, after your consent, with Google (Consent Mode v2 / Google Ads / GA4) for anonymised measurement. We sign data processing agreements with all of them.
6. International transfers
When data is transferred outside the European Economic Area, this happens exclusively on the basis of the European Commission's standard contractual clauses or an equivalent level of protection.
7. Your rights
You have the right to access, rectification, erasure, restriction, objection and data portability. You can send requests to privacy@dinvastoria.com. You may also lodge a complaint with the Dutch Data Protection Authority in The Hague.
8. Security
We use TLS encryption, role-based access control and regular backups. Our infrastructure is hosted in data centres within the EU.
9. Changes
This policy may be updated to reflect legal developments. The most recent version is always published on this page, with the date.