This notice explains how schipperhuren.nl, as operator of HELMERYS, processes personal data through helmerys.com, accounts, requests, cases, specialist profiles, payments, invoicing and support.
The controller is schipperhuren.nl, Dutch Chamber of Commerce number 75954109, VAT ID NL003028871B47. HELMERYS is the trade and platform name used on this website and is not a separate legal entity.
Privacy enquiries can be sent to advies@adnveiligheidsadviseur.nl.
Account and authentication data, including email address, user id, session and security data.
Business identity and contact data, including company name, address, trade-register number, VAT number and billing email.
Request and case data, including your question, selected disciplines, context, vessel or business information, documents, images and communications.
Quotes, engagement data, progress, messages, feedback and released case documents.
For specialists: profile data, photograph, business logo, experience, certificates, qualification evidence, insurance information and verification status.
Payment and invoicing data, including Stripe customer and account identifiers, payment method, authorisation or debit status, invoice numbers and invoice documents. HELMERYS does not store full card details.
Technical, security and audit data required for abuse prevention, troubleshooting, access control and evidence of important platform actions.
Depending on the processing, the legal basis is performance of a contract or pre-contractual steps, a legal obligation, or legitimate interests. Consent is used only where it is genuinely appropriate and required, such as separate marketing that legally requires consent.
Managing accounts, receiving requests and operating cases.
Routing requests to relevant disciplines and verified specialists.
Handling quotes, engagement confirmation, payment, release, invoicing and archiving.
Verifying specialist qualifications, insurance and professional identity.
Sending transactional status communications.
Securing the platform, preventing fraud and abuse, investigating incidents and establishing or defending legal claims.
Meeting legal accounting, tax and other obligations.
The intake may use rules and automated logic to classify a request, show a fixed service or identify relevant specialist disciplines. HELMERYS does not use this to make a solely automated decision about you that produces legal or similarly significant effects. The client chooses a proposal and specialist admission and verification are reviewed separately.
Personal data is not sold to advertisers.
The selected or matching specialist where necessary to handle a request, proposal or engagement.
The client where necessary to show the selected specialist's profile, proposal, qualifications, insurance status, progress and result.
Supabase for database, authentication and private storage.
Vercel for hosting and application runtime.
Stripe for card payments, SEPA Direct Debit and Stripe Connect specialist payments.
Resend and configured email infrastructure for transactional email.
Cloudflare Turnstile or similar anti-abuse services where enabled.
Professional advisers, insurers or competent authorities where required for legal, administrative or statutory purposes.
Some technical providers operate internationally and may process personal data outside the European Economic Area. Where this occurs, the relevant transfer mechanism and, where required, appropriate safeguards such as an adequacy decision or European Commission Standard Contractual Clauses are used to the extent relied on by the provider.
Draft requests and local draft storage are kept only for a limited period and may be removed earlier by the user or browser.
Unactivated specialist applications are kept only as long as necessary for selection, verification, possible reconsideration and the handling of questions or disputes.
Case content, communications, verification and audit records are retained for as long as reasonably necessary for delivery, professional accountability, security, disputes and legal claims.
Invoices, payment administration and other statutory accounting records are retained for the applicable legal retention period.
Data is deleted or anonymised when it is no longer needed and no legal or legitimate ground for further retention exists.
HELMERYS does not use advertising profiles as part of the current platform flow. Technically necessary cookies, session data and local or session storage may be used for authentication, security, language choice, draft forms and reliable platform operation.
HELMERYS uses appropriate technical and organisational measures including access controls, role-based permissions, private storage, security headers, server-side authorisation, logging and additional verification for administrative functions. No safeguard can eliminate every risk.
Requests can be sent to advies@adnveiligheidsadviseur.nl. HELMERYS may request reasonable identity verification to protect data subjects.
Access to personal data concerning you.
Correction of inaccurate or incomplete data.
Erasure where no valid ground for continued processing or retention exists.
Restriction of processing where the GDPR provides that right.
Objection to processing based on legitimate interests where applicable.
Data portability where the statutory conditions are met.
Withdrawal of consent where processing is based on consent, without affecting earlier lawful processing.
You may lodge a complaint with the Dutch Data Protection Authority, Autoriteit Persoonsgegevens. This notice may be updated when the platform, service providers or law changes. Material changes will receive a new published version date.
schipperhuren.nl · operator of HELMERYS
KvK: 75954109
BTW-id: NL003028871B47
advies@adnveiligheidsadviseur.nl
Privacy regulator: Autoriteit Persoonsgegevens
