Privacy policy
How personal data is handled.
Last updated: October 8, 2026
Faro Costa – Property Care ("Faro Costa", "we") respects your privacy. This policy explains which personal data we collect when you use farocosta.com, request a quote, use the client portal or use our services, and what rights you have.
1. Who we are
The controller of your personal data is:
- Bart Fiedorowicz, owner of the sole proprietorship United Movement, trading as Faro Costa
- Poolsterstraat 6, 6133VP Sittard, Netherlands
- Chamber of Commerce (KvK): 86002678 · VAT: NL004175569B80
- Email: info@farocosta.com · Phone: +31618877095
We have not appointed a data protection officer. For any privacy question, contact info@farocosta.com.
2. What data we collect
When you request a quote or contact us: name, email address, phone number, preferred language, whether you prefer WhatsApp, town and postcode, property type, a description of the work, photos you upload, preferred timing, and the consents you give.
When you become a client: billing name and address, tax number (if you are a business), property address and details (for example pool, garden, irrigation), contact persons and their roles, and access information you give us such as key arrangements and alarm codes.
When we carry out work: visit reports, checklists, photos and videos taken at your property, materials used, time spent, quotes, invoices, payments, and the messages and calls we log with you.
When you use the client portal: your login details, sign-in activity, and the requests, comments and approvals you submit.
When you visit the website: technical data needed to deliver the site securely, such as IP address, browser type and the strictly necessary cookies described in our Cookie Policy. We do not use analytics or advertising cookies.
3. Why we use it and on what legal basis
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Answering your request and preparing a quote | Steps at your request before a contract (6.1.b) |
| Carrying out services, visit reports, the client portal | Performance of a contract (6.1.b) |
| Invoicing, bookkeeping and tax obligations | Legal obligation (6.1.c) |
| Securing our website, portal and systems; preventing fraud | Legitimate interest (6.1.f) |
| Sending news or offers (only if you opt in) | Consent (6.1.a), which you can withdraw at any time |
| Showing completed projects on our website | Consent (6.1.a); photos never show addresses, faces or number plates |
4. Access information (keys and alarm codes)
We store access information encrypted. Access is restricted to authorised staff who need it for a scheduled visit, every view is logged, and we apply appropriate technical and organisational safeguards. Please never send key codes or alarm codes by email or WhatsApp; give them to us in person or through the client portal.
5. Who receives your data
We do not sell your data. We share it only where needed:
- Service providers acting on our behalf: our hosting provider TransIP B.V. (Netherlands) and our email provider Proton AG (Switzerland).
- Specialist partners: when work requires a certified installer (for example electrical work), we share only what they need to do that job.
- Authorities: when the law requires it, such as tax authorities.
WhatsApp: if you choose to contact us by WhatsApp, your messages are also processed by WhatsApp (Meta Platforms Ireland Ltd.) under its own privacy policy. We log the content of relevant messages in your client record.
Switzerland has an adequacy decision from the European Commission. If we ever transfer data outside the EEA without such a decision, we use the EU Standard Contractual Clauses.
6. How long we keep it
| Data | Retention |
|---|---|
| Quote requests that did not lead to work | 24 months after the last contact |
| Client, property and service records | For the duration of our relationship plus 5 years |
| Invoices and financial records | At least the statutory retention period for that record (generally 7 years under Dutch tax law; longer periods may apply to certain records, including records relating to immovable property) |
| Access information (keys, alarm codes) | Deleted within 30 days after the service ends |
| Server and security logs | 90 days |
7. Your rights
You have the right to access, correct or delete your data, to restrict or object to its use, to data portability, and to withdraw consent at any time. Clients can download a copy of their data themselves in the portal (Profile → Privacy → Download my data): a ZIP file with their details, properties, requests, reports, quotes, invoices, photos and documents, available for 24 hours after it is made. Keys, alarm codes and access notes are not in that file; we give them on request. A deletion request can be sent from the same page and is handled by our office. You can also email info@farocosta.com. We respond without undue delay and normally within one month. Where the law allows, this period may be extended by up to two further months for complex or numerous requests; we will tell you within the first month.
We may need to keep some data after a deletion request, for example invoices we must keep by law.
8. Complaints
If you are unhappy with how we handle your data, please contact us first. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or to the supervisory authority in the country where you live, such as the Spanish AEPD.
9. Security
We use encrypted connections (HTTPS), two-factor authentication for staff, encrypted storage of sensitive data, access control per role, and regular backups.
10. Changes
We may update this policy. The date at the top shows the latest version. We will inform clients of significant changes.