Privacy Policy

360virtualtour.net is a 360° virtual tour and architectural photography studio based in the Netherlands and serving clients across the European Union since 2004. This policy explains what personal data we collect through this website, why we collect it, how long we keep it and what rights you have.

1. Data controller

The data controller responsible for this website is the operator of 360virtualtour.net.

• E-mail: info@360virtualtour.net

2. Personal data we collect

Contact and quote form

When you send us a message through the contact or quote form we process:

• your name
• your e-mail address
• your phone number, if you choose to share it
• the content of your message and any project details you include

We use this data only to answer your inquiry, prepare a quotation and, if you place an order, to perform the contract. The legal basis is your consent, given by ticking the consent box in the form, and steps taken prior to entering into a contract (Article 6(1)(a) and (b) GDPR).

Website analytics, only with your consent

This website uses Google Analytics 4 to understand how visitors use our pages, but only if you give consent:

• Until you press "Accept" in the consent banner, the Google Analytics script is not loaded and no data is sent to Google.
• If you decline or make no choice, it stays that way: no analytics cookies and no data sent to Google, not even cookieless signals.
• If you accept, Google Analytics collects information such as pages visited, approximate region, device and browser type, linked to a random ID stored in a cookie. Advertising features and Google signals are switched off, and Google Analytics 4 does not store IP addresses. You can withdraw at any time with "Cookie settings" at the bottom of every page.

Cookieless visit counter

A counter on our own server counts how often our pages are opened, as daily totals: the page address, the name of the site you came from (such as "google"), the device type and the code of your browser language. Nothing is written to or read from your device; no IP address, browser signature, time or identifier is stored. These totals are not personal data. Details are in our Cookie Policy.

Website security

To prevent attacks, our server checks every request automatically. When a request presents itself as the Google or Bing search crawler, its IP address is verified via DNS to find out whether it is genuine; the result is kept in server memory for at most 24 hours and is never written to disk. The IP addresses of ordinary visitors are not used in this check. The legal basis is our legitimate interest in keeping the website secure (Article 6(1)(f) GDPR).

Server logs

Like any web server, ours writes each incoming request to a technical log: IP address, date and time, the requested address, the response code, the amount of data transferred, the referring page and the browser identifier. We use these logs only to detect and block attacks and to fix technical errors — never for analytics, profiling or advertising — and we do not share them with anyone. The log is archived every night; at most 5 daily archives are kept and older ones are deleted automatically, so no entry is kept longer than about 6 days. IP addresses that attempt an attack are blocked in the server firewall; the block entry is kept for as long as the block applies, and the firewall's own log for at most 2 weeks. The legal basis is our legitimate interest in keeping the website secure and working (Article 6(1)(f) GDPR).

Spam protection

Our forms are protected by Cloudflare Turnstile, which checks whether a submission comes from a human. Turnstile may process technical data such as your IP address and browser characteristics. This processing is based on our legitimate interest in keeping the website secure (Article 6(1)(f) GDPR).

3. Cookies

We use a small number of cookies and similar technologies: strictly necessary storage for your consent choice, your display mode and, if you pick one, your country; and analytics cookies only with your permission. You will find the details in our Cookie Policy.

4. Third parties that process data for us

• Google Analytics 4 (Google Ireland Ltd.): usage statistics, only after consent; pages visited, device data, approximate location.
• Cloudflare Turnstile (Cloudflare Inc.): spam and abuse protection; IP address, browser characteristics.
• E-mail (SMTP) service provider: delivering form messages to us; name, e-mail address, message content.
• Hosting: Hetzner Online GmbH (Germany); the server is located in its data centre in Finland, inside the EU. It hosts the website and the server logs.

These providers process data under their own privacy terms; where data leaves the EU, appropriate safeguards such as standard contractual clauses apply. Your data is never sold.

5. How long we keep your data

• Form messages and related correspondence: up to 24 months after our last contact, unless a contract or legal obligation requires longer.
• Google Analytics data: 14 months, after which it is deleted automatically.
• Daily totals of the cookieless visit counter: 25 months, after which they are deleted automatically.
• Server access logs: at most about 6 days; firewall log: at most 2 weeks; IP addresses blocked after an attack: until the block is lifted.
• Your consent choice: until you change it or clear your browser data.

6. Your rights

Depending on where you live, you have rights under the GDPR and, for residents of Türkiye, under Law No. 6698 (KVKK). These include the right to:

• access the personal data we hold about you
• have inaccurate data corrected
• have your data deleted
• restrict or object to processing
• data portability
• withdraw consent at any time, without affecting the lawfulness of processing before withdrawal
• lodge a complaint with your local data protection authority or, in Türkiye, with the Personal Data Protection Authority (KVKK)

To exercise any of these rights, e-mail info@360virtualtour.net. We respond within 30 days at the latest.

7. Changes to this policy

We may update this policy from time to time. The date at the top shows the latest version; material changes will be announced on this page.

8. Contact

Questions about this policy or your data: info@360virtualtour.net.