Privacy policy
Montage Vandaag ("we", "us", "the company") is an independent assembly service for customers who bought IKEA products. This privacy policy explains what personal data we collect, why, how long we keep it and what rights you have under the General Data Protection Regulation (GDPR).
1. Who is the data controller?
okti
trading as Montage Vandaag
KvK (Chamber of Commerce): 87 74 36 71
VAT: NL004469219B92
Address: Cruquiusweg 79 B6, 1019AT Amsterdam
E-mail: oktayelipek@gmail.com
Tel: +31 6 1936 7190
2. What data do we collect?
- Contact details you enter in the quote form: name, e-mail address, postcode.
- Job details: service type, desired installation date, IKEA planner or order link, any notes you add.
- Attachments you send: photos and/or PDF files.
- Technical data: hashed IP address, user agent and referring page, solely for spam and abuse prevention.
3. Why do we collect this data?
- To review your quote request, send a quotation and schedule the assembly appointment (performance of a contract).
- To contact you about your request (legitimate interest).
- To prevent spam, abuse and inappropriate use of the form (legitimate interest).
- To comply with legal record-keeping obligations such as tax and accounting law (legal obligation).
4. Legal basis
We process your data on the basis of Article 6(1)(b) (performance of contract), 6(1)(f) (legitimate interest in abuse prevention) and 6(1)(c) (legal obligation) of the GDPR.
5. Who receives your data?
We only share your data with:
- Our hosting and database provider ([Supabase / provider name], based in the EU).
- Our e-mail provider (e.g. [Resend]), used to send quote confirmations.
- Our bookkeeper or accountant, where legally required.
- Competent authorities, where we are legally required to do so.
We never sell your data to third parties and we do not use it for third-party marketing.
6. How long do we keep your data?
- Quote requests that do not lead to an assignment: up to 12 months, then deleted.
- Customer records: 7 years (statutory retention period for tax records).
- Attachments (photos / PDF): the same retention period as the related request.
7. Your rights
Under the GDPR you have the right to:
- access your data (Art. 15);
- rectify your data (Art. 16);
- have your data erased, where we are not legally obliged to retain it (Art. 17);
- restrict processing (Art. 18);
- receive your data in a machine-readable format (Art. 20);
- object to processing (Art. 21).
Requests can be sent to oktayelipek@gmail.com. We respond within one month. You also have the right to lodge a complaint with the Dutch Data Protection Authority.
8. Security
We take appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS/TLS), access restrictions, hashing of IP addresses and regular updates of our systems.
9. Cookies and similar technologies
This website does not use third-party tracking cookies and does not set any non-essential cookies of its own. Should analytics be added in the future, this will be noted in this policy in advance and, where legally required, consent will be requested.
10. Changes
We may update this privacy policy from time to time. The date of the last change is shown at the top of this page. For material changes we will notify you via a notice on the website or by e-mail.