Privacy & Cookie Policy

Version: 2.0 (GDPR Compliant) | Status: Final | Language: English

1. Introduction and Scope

This policy applies to all processing of personal data by Z-Company B.V. (Chamber of Commerce: 71996087). This includes data collected via www.z-company.nl, offline interactions, and data from customers, suppliers, and partners. Z-Company acts as the Data Controller under the General Data Protection Regulation latest version (GDPR).

2. Detailed Categories of Personal Data

•           Business Identification: Name, title, position, business email, and telephone.

•          Corporate Data: Company name, VAT/KvK numbers, IBAN, and organic certifications (e.g., Skal).

•           Interaction Data: Correspondence, trade fair notes, and quotation feedback.

•           Digital Footprint: Anonymized IP, browser characteristics, and regional location data.

•           Marketing Preferences: Opt-in/out status for newsletters and white papers.

3. Legal Grounds and Purposes (Art. 6 GDPR)

Processing occurs based on:

•           Contractual Necessity: Execution of agreements and logistics.

•           Legal Obligation: Tax retention and customs regulations.

•           Legitimate Interest: Marketing to existing clients and fraud prevention.

•           Consent: Specifically for tracking cookies and prospect marketing.

4. Disclosure to Third Parties and Processors

Z-Company does not sell data. Data is shared only under strict Data Processing Agreements (DPA) with:

•           Logistical & IT Partners (e.g., Salesforce, HubSpot).

•           Financial Institutions & Regulatory Authorities (e.g., NVWA).

5. International Data Transfer

Transfers outside the EEA are secured via Standard Contractual Clauses (SCCs) or Adequacy Decisions.

6. Comprehensive Cookie Policy

•           Essential Cookies: Required for technical operation.

•           Analytical Cookies: Google Analytics 4 (IP masked, data sharing disabled).

•           Marketing Cookies: Requires active consent via our Consent Tool.

7. Data Retention Policy

•           Financial: 7 years. | Customer Files: Duration of relationship + 5 years.

•           Applications: 4 weeks (or 1 year with consent). | Newsletters: Until unsubscribed.

8. Rights of Data Subjects

Under the GDPR, you have the right to Access, Rectification, Erasure, Restriction, Portability, and Objection. Submit requests to privacy@z-company.nl.

9. Information Security

We utilize SSL/TLS encryption, Role-Based Access Control (RBAC), and strict data breach protocols.

10. Amendment Clause and Supervision

Z-Company reserves the right to amend this policy without further notice. The latest version can be found on our website www.z-company.nl. You have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).