This Privacy Policy explains how Gold Line D.C. collects, uses, stores, and protects personal data when the website is visited, materials are downloaded, contact is initiated through the website, email, WhatsApp, Facebook, Instagram, or phone, or services are requested. Data collection is kept limited and purposeful. Personal data is collected only where it serves a clear operational, communication, security, analytics, consent-management, legal, or service-related purpose.
Controller information
Business name: Gold Line D.C. Country: The Netherlands. Chamber of Commerce number: 42078198. Address: Markt 38c, 5701RL Helmond, The Netherlands. Contact: contact@goldlinedc.com. Gold Line D.C. acts as the data controller for the personal data described in this Privacy Policy.
Personal data collected
When a contact form is submitted, a request is made, a download is requested, or contact is initiated, the following personal data may be collected: name if provided, email address, message content, business context, requested service information, attachments submitted through the form, and any additional information voluntarily included by the person contacting Gold Line D.C. If a call is requested, scheduling details required to arrange the call may also be collected. The contact form sends the message through the hosting provider Cloudflare to the Gold Line D.C. mailbox; the message is delivered by email and is not stored by the website.
Analytics, cookies, and technical data
The website uses its own consent banner and, where consent has been provided, Google Analytics 4, a service of Google Ireland Limited. The consent banner stores the choice in the browser, where it can be changed at any time through the cookie settings link in the footer. Google Analytics is loaded only after consent; before that, no data is sent to Google. A Global Privacy Control signal sent by the browser is treated as a refusal. After consent, the following analytics data may be collected: pages visited, approximate location down to city level derived from the IP address, device and browser information, referral source, interaction with the website such as scrolling, clicks on outbound links, file downloads and form interactions, and timestamps. Google Analytics does not store IP addresses, and email addresses are filtered out of the measurement data. The same measurement covers goldlinedc.com and goldlinedc.nl; when a visitor switches between the two, an identifier is passed along in the link so that both sites can count the visit as one. Advertising features are not used: the linking of visits to signed-in Google accounts is switched off and every measurement is marked as not available for advertising. Non-essential cookies or similar technologies are used only where consent is provided through the cookie banner or cookie settings. The hosting provider, Cloudflare, may also collect basic technical logs required for security and reliability purposes, such as IP address, device or browser type, timestamps, and technical request data.
Purpose of processing
Personal data is processed only for clear and limited purposes, including responding to messages and requests, communicating regarding an inquiry or project, arranging requested calls or advisory contact, sending an email sequence only where details are submitted explicitly for that purpose, managing cookie consent preferences, understanding website performance and visitor interaction where consent has been provided, maintaining website security and functionality, preparing possible service agreements, delivering agreed services, handling administration, and complying with applicable legal obligations. Personal data is not sold.
Legal basis under GDPR
Where the General Data Protection Regulation applies, processing is based on one or more of the following grounds. Legitimate interest may apply when operating a secure website, maintaining technical reliability, preventing misuse, responding to inquiries, and keeping a clear communication record. Consent may apply where explicit opt-in is provided, including email sequences, non-essential cookies, analytics-related processing, transcribing a phone call, and similar optional processing. Contract or pre-contractual steps may apply where preparation, discussion, quotation, or delivery of potential work is requested before or during a service relationship. Legal obligation may apply where retention, administration, tax records, accounting, or disclosure is required by applicable law.
Email communication
When an email address is submitted through the website, it is used only for the purpose stated at the point of collection or for communication reasonably related to the request. Email sequences are sent only where details are submitted explicitly for that purpose. Opt-out is available at any time via an unsubscribe option where provided, or by emailing contact@goldlinedc.com.
Contact through WhatsApp, Facebook, Instagram, email and phone, and the use of AI
When contact is made through WhatsApp, email, Facebook, or Instagram (a comment, or a message in Messenger or Instagram Direct), Gold Line D.C. processes the name or number as the channel shows it, the message, and the time it came in, in order to answer and handle the question. An email, and a WhatsApp message that is passed on internally to be answered, is kept with its text in the internal system of Gold Line D.C., which runs on a computer of Gold Line D.C. itself. Of a comment or a message through Facebook or Instagram, the name the channel shows is kept there, and its text only for a conversation that Gold Line D.C. follows. A few key words of an email or a WhatsApp message are kept there as well, so that it can later be found what it was about; digits, phone numbers, addresses, and links are left out. Gold Line D.C. works openly with AI assistants. An AI assistant reads incoming email, gives each email a priority, and can turn it into a task, an appointment, or a project in the internal system. An email is treated as information, never as an instruction: the AI assistant that reads an email sends, answers, posts, or approves nothing because of it; a step outside the internal system is taken separately, by Gold Line D.C. or by an AI assistant that did not read that email. A WhatsApp message that an AI assistant sends without the approval of Gold Line D.C. says that an AI wrote it, and so does an email that an AI assistant sends at once, before Gold Line D.C. can look at it. When Gold Line D.C. is not available, the Gold Line DC Agent, an AI assistant, may answer a message through WhatsApp. That assistant always says that it is an AI, only gives information approved in advance, makes no commitments about prices, timelines, or orders, and can schedule an appointment on request. Anyone who would rather speak to a person can say so, and the message is passed on. Phone calls are not recorded. Notes are taken of a call, so that help can continue after the call. Only with consent, asked at the start of the call, an AI program on a computer of Gold Line D.C. transcribes the call as it happens. The sound and the transcribed text are held only in the working memory of that computer and are not stored; they are gone as soon as an AI model on the same computer has made a short summary of them. That summary is kept in the internal system, where the AI assistants can also read it to prepare the follow-up. The legal basis is the legitimate interest in answering a question, or the preparation or performance of a contract. For transcribing a call, it is consent, which can be withdrawn at any time.
Cookie preferences
Cookie preferences can be accepted, rejected, or adjusted through the cookie banner or cookie settings made available on the website. Consent can be withdrawn or changed at any time where the cookie settings option is available. More information about cookie usage is provided in the Cookie Policy.
Data sharing
Personal data is shared only where necessary to operate the website, manage consent, deliver communications, provide requested contact, process analytics where consent is given, maintain technical security, process payments where applicable, or deliver agreed services. This may include the website hosting provider Cloudflare, the analytics service Google Analytics of Google Ireland Limited, email providers or tooling required to deliver messages, scheduling tools where used to arrange calls, payment providers where payment services are used, and professional service providers where required for legal, financial, or administrative purposes. Google processes the analytics data as a processor under its data processing terms. Aggregated measurement data without identifiers may be used by Google for modelling and benchmarking, and Google support staff may access the analytics account when support is requested. Analytics data is not shared with Google for the improvement of its own products and services. To read, sort, and answer messages, notes, and summaries, Gold Line D.C. uses AI services of external providers (United States). Messages through WhatsApp, Facebook, Messenger, Instagram, and Instagram Direct pass through Meta, email through Google (Google Workspace). Transcribing and summarising a phone call happens on a computer of Gold Line D.C. itself; for that, the call is not sent to an outside AI service. Pages that Gold Line D.C. sends a client through portal.goldlinedc.com, with the answers and files the client leaves there, are held by Cloudflare until Gold Line D.C. removes them, and no longer than 45 days after the last day of the page (or 120 days after its last change, if the page has no last day).
Third-party providers
Service providers are selected with the intention of responsible data processing. Third-party providers may process data according to their own terms, privacy policies, security standards, and technical conditions. Google, Cloudflare, Meta, and the providers of these AI services may process data in the United States. Where personal data is processed outside the European Economic Area, appropriate safeguards are applied where required, such as the EU-U.S. Data Privacy Framework, standard contractual clauses, or other lawful transfer mechanisms. Further details can be requested via email.
Data retention
Personal data is not retained longer than necessary for the purpose for which it was collected, unless longer retention is required by law or necessary to protect legitimate interests. Inquiry messages and correspondence are retained only as long as required to handle the request and maintain a clear communication record. In the internal system, a message through WhatsApp, email, Facebook, or Instagram, its key words, and a summary made by an AI are deleted no later than twelve months after the matter was handled. Notes and summaries of phone calls are kept while there is contact or an engagement, and after that for no more than twelve months, unless the law requires longer retention. Email sequence signups are retained until an unsubscribe request or deletion request is received. The cookie choice is stored only in the browser of the visitor, for twelve months, and is not kept on a server. Analytics data that is linked to a cookie identifier is retained for fourteen months; statistics without identifiers may be kept longer. Security logs, if collected by the hosting provider, are retained according to the provider’s operational requirements. Administrative, payment, invoice, or project-related records may be retained where required for legal, tax, accounting, or business administration purposes. Deletion requests are honored unless retention is required by law or another lawful basis applies.
Data subject rights
Depending on location and applicable law, the following rights may apply: access to personal data, correction of inaccurate data, deletion of personal data, restriction of processing, objection to processing, withdrawal of consent where applicable, data portability where applicable, and lodging a complaint with a competent data protection authority. In The Netherlands, the competent data protection authority is the Autoriteit Persoonsgegevens. Requests can be submitted via contact@goldlinedc.com.
Security
Reasonable technical and organizational measures are used to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. No method of transmission or storage is completely secure. Absolute security cannot be guaranteed.
Automated decision-making
Gold Line D.C. does not use automated decision-making that produces legal or similarly significant effects.
Third-party links
The website may contain links to third-party websites or services. Gold Line D.C. is not responsible for the privacy practices, content, terms, or security of third-party websites or services.
Updates
This Privacy Policy may be updated periodically as the website evolves, services are changed, legal requirements change, or data processing activities are adjusted. The most recent version is published on the website with an updated “Last updated” date.
Contact
Questions regarding this Privacy Policy can be directed to Gold Line D.C., Markt 38c, 5701RL Helmond, The Netherlands. Email: contact@goldlinedc.com. Chamber of Commerce number: 42078198.