Privacy statement
How SVS Warmteservice handles your personal data. Last updated 19 August 2026.
In short. This website sets no cookies, uses no trackers and loads nothing from external servers. We collect only what you enter yourself in the contact or fault form, and use it solely to deal with your question or report. We do not sell anything on. You can always ask to see your data or have it erased.
Who is responsible
SVS Warmteservice is the data controller for the personal data described in this statement. That means we decide what those data are used for and how.
- SVS Warmteservice
- Kokermolen 2-8, 3994 DH Houten
- KvK 98935925
- Telephone +31 85 301 66 75
- Email info@svs-warmte.nl
If you have a question about your data, you can reach us using the details above. We are not required to appoint a data protection officer and have not done so; your question goes to a member of staff who can decide on it directly.
Where we work on the instructions of your heat supplier, housing association or managing agent, for that work we act as processor and your client is the controller. For the data you leave on this website yourself, we are.
What data we process, and why
Contact form
When you complete the contact form we process your first name and surname, company name, telephone number, email address, the subject you chose and your message.
Purpose: to answer your question and contact you where needed. Legal basis: performance of a contract or, where none exists yet, steps taken at your request prior to entering into one (Article 6(1)(b) GDPR). For a general enquiry the basis is our legitimate interest in being able to respond to business questions (Article 6(1)(f)).
Fault form
For a fault report we additionally process the address where the fault occurs, the postcode and, if you provide them, the project name and reference number.
Purpose: to be able to resolve the fault. Without an address and a telephone number no engineer can attend and no appointment can be made. Legal basis: performance of the contract with you or with the party that has placed the maintenance with us, and our legitimate interest in handling it properly.
This form does not ask about your health, your household or your financial situation. None of that belongs in it. If you do enter such details in the free text field, we use them solely to deal with your report.
Job applications
If you send us a CV and a covering letter, we process the data you include in them: usually your name, contact details, education, work experience and whatever else you mention.
Purpose: to assess whether you fit the role and to run the application process. Legal basis: steps prior to entering into an employment contract, taken at your request.
We carry out no background checks and approach no references without your prior agreement. We only ask for a certificate of conduct once there is a concrete offer, not during the process.
Visiting the website
Our web server keeps technical logs recording, among other things, the IP address, the time, the page requested and the type of browser. Every website does this; it is necessary to deliver the site, to trace faults and to counter abuse. Legal basis: our legitimate interest in a working and secure website.
To limit abuse of the forms we briefly record how many submissions each visitor has made in the past hour. For that we store only an irreversibly hashed representation of the IP address together with timestamps and for no longer than an hour. We do not store the IP address itself and the hash cannot be reversed.
Cookies and measurement
This website sets no cookies and stores nothing in the visitor's browser. No cookies, no local storage, no session storage. There are no trackers, no advertising networks and no third-party analytics running.
The site also loads nothing from external servers: no fonts, no maps, no videos and no embedded social media posts. Everything you see comes from our own domain, so no other party knows about your visit.
That is why you see no cookie banner: there is nothing to accept and nothing to refuse. If we do introduce a measurement or advertising service in future, we will ask for your consent beforehand. Nothing loads until you give it and we will update this statement.
Who we share data with
We do not sell your data and do not share it with third parties for commercial purposes. We do engage the following parties as processors:
| Party | Purpose | Location |
|---|---|---|
| Twilio SendGrid | Sending the email generated by the forms | United States |
| Our hosting provider | Running the website and the email environment | European Union |
We have a data processing agreement with these parties setting out what they may do with the data and what security they must provide. For transfers to the United States we rely on the EU-US Data Privacy Framework. Where that is not sufficient, we rely on the European Commission's standard contractual clauses.
We also share your report with the client responsible for your installation. That is your heat supplier, housing association or managing agent, for example. Sharing is necessary in order to carry out the work and account for it, and it follows from the agreements they have with you. We share no more than that handling requires.
Beyond that we disclose data only where a legal obligation requires it, for example to the tax authorities or at the demand of a regulator.
How long we keep data
We keep data no longer than is necessary for the purpose we received it for. In concrete terms:
| Data | Retention period | Why |
|---|---|---|
| Enquiries that do not lead to an assignment | Two years after the last contact | So that we can find an earlier enquiry if you contact us again |
| Fault reports and work carried out | Seven years | Statutory retention requirement for business records, and evidence for your client |
| Job applications | Four weeks after the process ends. With your consent, one year | So that we can approach you about a suitable vacancy |
| Technical log files | Six months at most | Tracing faults and investigating abuse |
| Counter against form abuse | One hour | Longer serves no purpose: the limit applies per hour |
Once the period ends we erase the data or make it untraceable. Where a dispute or legal proceedings are running, we keep what is needed for that until it is concluded.
How we protect your data
We take appropriate technical and organisational measures. The main ones, so that you can judge whether that is more than a sentence:
- The website is reachable only over a secure connection; unsecured traffic is redirected
- The browser may load content only from our own domain, which blocks scripts injected from outside
- The forms have an invisible trap against automated submissions and a limit on submissions per hour
- Line breaks are stripped from every field, so the form cannot be used as a relay for spam
- The recipient of the form email is fixed in the server settings and cannot be influenced through the form
- Access to the mailbox where your message arrives is restricted to staff handling your question or report
- Our staff are bound by a duty of confidentiality
Complete certainty does not exist. If you notice something wrong, or think you have found a weak spot, please report it to us at info@svs-warmte.nl. We take such reports seriously and will tell you what we did about it.
What we do in the event of a data breach
If something goes wrong despite everything and personal data ends up in the wrong hands, we immediately establish what happened, which data it concerns and how we stop it.
Where there is a risk to your rights and freedoms, we report it to the Dutch data protection authority within 72 hours. Where that risk is high, we also tell you directly in plain language: what happened, which data it concerns, what we are doing about it and what you can do yourself. Where the data are the responsibility of your client, we notify them without delay.
Your rights
The GDPR gives you a number of rights. You can exercise all of them with us:
- Access: ask which data we hold about you and what we do with it
- Rectification: have incorrect data corrected or incomplete data completed
- Erasure: have your data deleted, unless we are legally required to keep it
- Restriction: have the processing paused, for instance while a correction is pending
- Objection: object to processing based on our legitimate interest
- Portability: receive your data in a common file format
- Withdrawing consent: without affecting anything done before that point
Send your request to info@svs-warmte.nl. We respond within one month; if your request is complex we may extend that by two months and will tell you so within the first month. To prevent us handing data to the wrong person, we may ask you to identify yourself. There is no charge for a request.
Making a complaint
If you disagree with how we handle your data, please tell us first. In most cases we resolve it together, and that is quicker.
You also always have the right to lodge a complaint with the supervisory authority. In the Netherlands that is the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl. If you live in another EU country, you can also go to the supervisory authority there.
Automated decision-making and profiling
We take no decisions about you on the basis of automated processing. Every report, every enquiry and every application is read and assessed by a member of staff. There is no system that ranks your report, screens your application or builds a profile of you.
Children
This website is aimed at business clients and at residents with a fault. We are not directed at children under sixteen and do not ask for their details. If you believe we have received a minor's data without consent, please contact us and we will delete it.
Links to other websites
Our website carries a link to our company profile on LinkedIn. If you click it you leave our site and that party's privacy statement applies. We have no influence over what they record, and nothing of theirs is loaded while you stay on our site.
Changes to this statement
If our way of working changes, we update this statement. The date at the top shows when that last happened. For a significant change we announce it clearly on the website rather than amending it quietly. That applies if we engage a new processor, for instance, or start measuring after all.
This statement was last updated on 19 August 2026.