Controller
The controller for personal data processed through CercoOffro.eu is C. Eijkelenboom, operating CercoOffro.eu as a natural person. Privacy requests can be sent to info@cercooffro.eu.
PRIVACY & GDPR
Privacy information
How CercoOffro handles information about visitors, reviewers, business owners and people named in directory data.
Data we can process
Depending on how you use the service, this can include your name, email address, business role, review text, messages, business details you submit, profile correction information, public business contact data, IP/security log data and your analytics consent choice. CercoOffro aims to process only data relevant to operating, securing and improving the directory.
Purposes and legal bases
Form data is used to answer requests, moderate reviews, verify business claims and maintain directory accuracy. Processing can rely on steps requested by you, legitimate interests in operating and securing the directory, compliance with legal obligations, or consent where consent is the appropriate basis. Google Analytics is enabled only after an analytics consent choice grants permission.
Directory data obtained from other sources
Business-profile information can originate from compatible public or open datasets, including place data, or from business owners and other contributors. Where information identifies an individual, applicable GDPR transparency and rights rules remain relevant. Source information is described on the Data sources page.
Service providers and external recipients
Hosting, security, anti-spam, analytics and map functionality can involve service providers acting under their own terms or, where applicable, as processors. Cloudflare Turnstile is used for anti-spam verification. Google Analytics is used only after analytics consent. Mapping and route services can receive technical request information when their resources are loaded or opened.
Retention
Information is kept only for as long as reasonably necessary for the purpose for which it was collected, to maintain security and audit trails, to resolve disputes or to meet legal obligations. Review, claim, correction and contact records can be retained while the related request or listing remains relevant. Security logs can be retained for a shorter operational period depending on the hosting configuration.
Your GDPR rights
Where the GDPR applies, you may have rights to information, access, rectification, erasure, restriction, data portability, objection and safeguards concerning solely automated decisions. You can also withdraw consent for future analytics processing through Cookie settings. Rights can be subject to legal conditions and exceptions.
Complaints and response
Privacy requests will be handled without undue delay and, where the GDPR applies, within the time limits required by law. You also have the right to lodge a complaint with the competent data-protection supervisory authority in your EU/EEA jurisdiction.