Privacy statement

This is the privacy statement of Ottevanger (hereinafter referred to as ‘we’ or ‘us’). This policy explains why we collect personal data, what data we collect, how we use it, and what rights you have under the GDPR.

1. Name and contact details of Ottevanger

Ottevanger
Attn. Privacy Department
Moerkapelse Zijde 32
2751 DL Moerkapelle, The Netherlands
Chamber of Commerce no. 56662513
Email: privacy@ottevanger.com

2. Why we process personal data and on what legal grounds

We process personal data only when we have a legal basis under the GDPR. We use the following grounds based on Article 6 GDPR.

We process personal data when this is necessary for entering into or performing an agreement. This applies to current and prospective customers, suppliers, vendors, and other contracting parties.

We process personal data if you have given us your consent.

We process personal data if we are legally required to do so, for example for tax administration.

We process personal data if we have a legitimate interest, such as maintaining business operations, improving services, or ensuring secure communication.

If you purchase a product or service from us, we need your personal data to communicate with you, prepare offers, conclude agreements, provide instructions, handle delivery, and process invoices.

If we purchase products or services from you, we need your personal data to request quotations, place orders, receive deliveries, settle invoices, and ensure efficient business communication. We may also use publicly available information, such as data from the Chamber of Commerce or publicly listed contact details.

If you have given consent, we use your data to inform you by email about our products, services, and related offers. You can unsubscribe at any time using the link at the bottom of each email.

You are not obliged to provide personal data. However, without the necessary data we may not be able to perform our services or enter into an agreement with you.

3. What data we collect and use

When you use our services, we may collect the following personal data.

First and last name
Address details
Phone number
Email address
Anonymised IP address
Additional data you actively provide, such as through our contact form, emails, or phone calls
Information about downloads from our website
Browser type and device information
Time stamps

We also collect company names. Company names generally fall outside the scope of the GDPR, except when the company name includes personal data such as a name of an individual.

4. Automated decision-making

We do not use automated decision-making systems that have significant effects on individuals. For more information, visit the website of the Dutch Data Protection Authority.

5. Cookies

Cookies are small text files stored on a visitor’s device. We use functional cookies to improve website usability and analytical cookies to measure website statistics. Analytical cookies have minimal effects on privacy.

We anonymise IP addresses in Google Analytics and do not use user IDs or remarketing features. No personal data is shared with Google unless you have explicitly consented.

If other types of cookies are used, you will be notified when you first visit the website. These cookies will be placed only after you have provided consent.

You can allow, block, or delete cookies through your browser settings.

6. Sharing data with third parties

We do not sell personal data. We only share data with third parties when necessary to perform an agreement, meet legal obligations, or provide services such as newsletter distribution or external data storage.

Third parties that process personal data on our behalf are bound by a data processing agreement requiring proper security and confidentiality.

We remain responsible for the processing carried out on our behalf.

7. Protection of personal data

We take appropriate technical and organisational measures to protect personal data from misuse, loss, unauthorised access, or disclosure. Measures include, among others:

Secure encrypted connections for online forms
Encryption of data during transmission
Security software such as firewalls and antivirus tools
Secure physical storage for paper documents

8. Retention periods

If you request a quotation and do not become a customer, we delete your data no later than seven years after our last contact. The same applies if we request a quotation from you without further business follow-up.

If you become a customer, or if we become your customer, we retain your personal data for at least seven years after the financial year in which the agreement was fully completed. This is required for tax and accounting records.

Other technical data (such as anonymised IP address, browser information, and time stamps) is stored for a maximum of two years. Marketing data is retained until you withdraw your consent.

9. Your rights

Under the GDPR you have the following rights.

The right to access your personal data
The right to correct or supplement inaccurate data
The right to request deletion of your data or restriction of its use
The right to object to the processing of your data
The right to lodge a complaint with the Dutch Data Protection Authority
The right to receive your data or have it transferred to another party
The right to request information about how we balance our legitimate interests

To exercise your rights, contact us using the details provided at the top of this policy.

10. Changes to this privacy policy

We may amend this privacy policy when necessary. The most recent version is always available on our website. The first version dates from May 2018, and this version updates and replaces the previous version from August 2021.

If you have questions about the use of your personal data or require further information, please contact us.