Legal
GDPR Information
How Grafikare B.V. processes personal data of EU/EEA residents.
Updated: 4 October 2026
This page informs visitors and clients in the European Union and the European Economic Area about how Grafikare B.V., Leiden, the Netherlands, processes personal data under the General Data Protection Regulation (EU) 2016/679 ("GDPR").
1. Controller
Grafikare B.V., Mendelweg 32, 2333 CS Leiden, the Netherlands — info@grafikare.com. Grafikare B.V. and Grafikare Tasarım ve Teknoloji Ltd. Şti. may act as joint controllers for projects delivered across both companies; the essence of that arrangement is available on request.
2. What we process and why
| Data | Purpose | Legal basis (GDPR art. 6) |
|---|---|---|
| Name, e-mail, phone, company, project description | Answering enquiries, preparing offers | (1)(b) pre-contractual steps |
| Contract, invoicing and project data | Delivering services, accounting | (1)(b) contract, (1)(c) legal obligation |
| IP address, device and log data | Security, abuse prevention | (1)(f) legitimate interest |
| Analytics and marketing cookies | Measuring and improving the site, advertising | (1)(a) consent |
3. Recipients and transfers
Processors: hosting and e-mail providers, analytics and advertising platforms (only with consent), accountants. Transfers outside the EEA — including to our Turkish company — are based on the European Commission's Standard Contractual Clauses or another transfer mechanism under GDPR Chapter V.
4. Retention
Enquiry data: up to 24 months after the last contact. Contract and invoicing data: 7 years (Dutch fiscal retention obligation). Analytics data: as configured in the respective tool, maximum 26 months.
5. Your rights
You have the right of access (art. 15), rectification (16), erasure (17), restriction (18), data portability (20), objection (21) and to withdraw consent at any time without affecting prior processing. Write to info@grafikare.com. You may lodge a complaint with the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
6. Automated decision-making
We do not make decisions based solely on automated processing that produce legal or similarly significant effects.