Privacy statement

The controller for the personal data described here is:

• Total Power Europe BV
• Kloosterstraat 5, 4901 HR Oosterhout NB, The Netherlands
• Chamber of Commerce (KvK): 18131135
• VAT: NL805685005B01
• Telephone: +31 (0)162 570 087
• Email: info@totalpower.nl

We process personal data in a few situations, each with its own purpose and legal basis under the GDPR:

• Contact form. When you get in touch we process the details you enter: name, company, email, telephone, your message, and the application or sector you select. Purpose: to answer your enquiry and prepare a quotation or development proposal. Legal basis: legitimate interest, as you contact us on your own initiative and expect a reply. Providing your details through the contact form is voluntary; there is no statutory or contractual obligation to do so. If you choose not to, we cannot answer your enquiry or prepare a proposal.
• Server and hosting logs. Our hosting provider automatically records technical data such as your IP address, browser type, and the pages requested, to deliver the site and keep it secure. Legal basis: legitimate interest (delivery and security of the website). Our hosting provider is Google (Firebase Hosting on Google Cloud, operated by Google Ireland Ltd.), which processes these logs on our behalf as a processor under Google's standard Data Processing Agreement (DPA).
• Analytics. Only with your consent through the cookie banner, we use Google Analytics 4 to understand, in aggregated and non-identifying form, how the site is used. Purposes: audience and traffic statistics, and improving the site. Recipient: Google. Your data may be processed outside the EEA (in the United States) by Google LLC; Google is certified under the EU-US Data Privacy Framework, and Standard Contractual Clauses apply in addition. Legal basis: your consent (GDPR art. 6(1)(a)), which you can withdraw at any time through the cookie preferences. We do not currently use advertising cookies or run advertising measurement; if we enable Google Ads later it will run only under your marketing consent and we will update this statement.
• Spam and bot protection. Our contact form is protected by Cloudflare Turnstile, a privacy-friendly alternative to a CAPTCHA. It loads only when you open or use the contact form (not on every page), so Cloudflare receives technical data such as your IP address and browser characteristics only at that point, to tell real visitors apart from automated abuse. It sets no advertising cookies and is not used to track you or build a profile. Cloudflare may process this data outside the EEA under the EU–US Data Privacy Framework and Standard Contractual Clauses. Legal basis: our legitimate interest in protecting our form and systems from abuse (GDPR art. 6(1)(f)).

We keep personal data no longer than necessary for the purposes above.

• Contact-form enquiries: kept until up to 2 years after our last contact with you, then deleted.
• Server and hosting logs: typically kept no longer than a few months, following our hosting provider's retention.
• Analytics: Google Analytics 4 user- and event-level data is retained for 14 months, after which it is deleted automatically; the underlying cookies expire as shown in the cookie table below (for example _ga after 2 years). Aggregated reports may be kept longer.
• Spam and bot protection: to protect the contact form, we use Cloudflare Turnstile, which checks in real time whether a submission comes from a person. To limit abuse, we also keep a temporary one-way hash of your IP address (never the address itself); it is deleted automatically and never stored in a database.

We do not sell personal data. We share it only with the parties needed to provide the service:

• Our own team, who receive your enquiry by email.
• Google (Firebase Hosting on Google Cloud, operated by Google Ireland Ltd.), which hosts and serves this website as our processor under Google's standard data processing terms.
• Google Workspace (Google Ireland Ltd.), which provides our email service and delivers your message to our mailbox, as our processor under the same terms.
• Google, for analytics. Only with your consent, Google Ireland Ltd. (together with Google LLC) processes analytics data on our behalf under Google's Data Processing Terms; where data is processed in the United States, the EU-US Data Privacy Framework and Standard Contractual Clauses apply. If advertising measurement (Google Ads) is enabled later, it will be added here.
• Cloudflare (Cloudflare, Inc.), which provides the Turnstile bot-protection loaded when you open or use the contact form, and processes the technical data described above as our processor; transfers are covered by the EU–US Data Privacy Framework and Standard Contractual Clauses.

Where we rely on Standard Contractual Clauses for transfers outside the EEA, you can request a copy at info@totalpower.nl. For hosting and email, Google may also process data outside the EEA under its data processing terms, with the EU-US Data Privacy Framework and Standard Contractual Clauses as safeguards.

This site sets no cookies until you make a choice in the consent banner. Fonts and search run from our own server, and no third-party script loads simply because you visit a page. The only third-party script is Cloudflare Turnstile, and it loads only when you open or use the contact form (see above). After you make a choice, the cookies below may be set according to the categories you accept.

• The site uses first-party storage for your consent choice and, only after you accept the relevant category, the Google cookies below. The advertising cookies are listed for transparency but are set only once Google Ads is activated in our tag container; Google Ads is not active at present.
• tpe-consent: Total Power Europe (this site). Purpose: remembers your cookie choice so the banner doesn't reappear. Type: local storage (first-party), necessary. Retention: until you clear it or the consent version changes.
• _ga: Google Analytics. Purpose: distinguishes visitors for aggregated statistics. Type: cookie (first-party), analytics. Retention: 2 years.
• _ga_<container-id>: Google Analytics. Purpose: keeps GA4 session state. Type: cookie (first-party), analytics. Retention: 2 years.
• _gcl_au: Google Ads (Conversion Linker). Purpose: attributes a conversion, such as an enquiry, to an ad click. Type: cookie (first-party), marketing. Retention: 90 days.
• IDE / test_cookie: Google (doubleclick.net). Purpose: advertising measurement and remarketing, set on Google's domains after consent. Type: cookie (third-party), marketing. Retention: up to 13 months / session.

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• object to our processing, and ask us to restrict it;
• data portability, where applicable.

To exercise any of these rights, contact us at info@totalpower.nl. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl). We do not use your personal data for automated decision-making or profiling that has legal or similarly significant effects for you.

We may update this statement as our processing or the legal requirements change. The version published here always applies.

• Last updated: 28 October 2026