Privacy Policy

Dutycore B.V. is the data controller responsible for the processing of personal data described in this Privacy Policy.

1.1 Legal entity: Dutycore B.V., a private limited company incorporated under Dutch law.

1.2 Registered office: Walborg 2A, 1082 AM Amsterdam, the Netherlands.

1.3 Chamber of Commerce: 91283027.

1.4 VAT number: NL865604587B01.

1.5 Contact for privacy matters: sales@dutycore.nl.

We collect personal data that you voluntarily provide to us through the following channels:

2.1 Contact form submissions: name, company name, email address, telephone number (optional), role indication, and the content of your message.

2.2 Direct communications: any information you share with us by email, telephone, or in person.

2.3 Business correspondence: contact details, order history, invoicing information, and other information necessary for the conduct of our business relationship.

2.4 We do not collect any personal data automatically through analytics tools or tracking technologies on our website.

We use personal data for the following purposes:

3.1 Responding to enquiries and requests submitted through our contact form or other channels.

3.2 Establishing and maintaining business relationships with our customers and suppliers.

3.3 Processing and fulfilling orders, including invoicing, delivery coordination, and after-sales service.

3.4 Complying with legal obligations, including tax, customs, anti-money laundering, and sanctions compliance requirements.

3.5 Protecting the legitimate interests of our business, including fraud prevention and security.

We process personal data on the following legal bases under Article 6 GDPR:

4.1 Performance of a contract (Article 6(1)(b)) for processing related to orders, deliveries, and business correspondence with our customers and suppliers.

4.2 Compliance with a legal obligation (Article 6(1)(c)) for processing required for tax, customs, sanctions, and other regulatory purposes.

4.3 Legitimate interests (Article 6(1)(f)) for general business communications, fraud prevention, and security, where such interests are not overridden by your rights and freedoms.

4.4 Consent (Article 6(1)(a)) for any processing that requires explicit consent, which can be withdrawn at any time without affecting the lawfulness of processing prior to withdrawal.

We do not sell or rent personal data. Personal data is shared only with selected service providers, public authorities where required by law, or in the context of a business transaction with appropriate safeguards in place.

5.1 Service providers: we may share personal data with providers who process data on our behalf (such as hosting, email, form processing, and accounting). These providers are bound by confidentiality and data processing agreements compliant with Article 28 GDPR.

5.2 Public authorities: we may disclose personal data where required by law, court order, or regulatory request.

5.3 Business transactions: in the event of a merger, acquisition, restructuring, or sale of assets, personal data may be transferred subject to appropriate safeguards and continued protection.

5.4 Form processing: our website contact form is processed by Formspree (Formspree, Inc., Boston, USA), which forwards submissions to our designated email address. Please refer to Formspree’s privacy policy for details on their data handling practices.

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law:

6.1 Contact form submissions: up to two (2) years after the last meaningful contact, unless they form part of an active business relationship.

6.2 Business and customer records: up to seven (7) years after the end of the business relationship, in accordance with Dutch tax retention obligations (Article 52 General State Taxes Act / Algemene wet inzake rijksbelastingen).

6.3 Marketing communications: until you unsubscribe or request deletion.

6.4 After the applicable retention period, personal data is securely deleted or anonymized.

7.1 As an international wholesaler with customers worldwide, we may transfer personal data outside the European Economic Area (EEA) in the course of conducting business, for example when corresponding with customers in the United States, Israel, the Middle East, or Asia.

7.2 Where we transfer personal data outside the EEA, we ensure appropriate safeguards under Articles 44 to 50 GDPR, including Standard Contractual Clauses approved by the European Commission, or transfers to countries with an adequacy decision.

7.3 A copy of the safeguards in place can be obtained by contacting us at sales@dutycore.nl.

Under the GDPR, you have the following rights regarding your personal data:

8.1 Right of access (Article 15): to obtain confirmation of and access to the personal data we hold about you.

8.2 Right to rectification (Article 16): to correct inaccurate or incomplete personal data.

8.3 Right to erasure (Article 17): to request deletion of personal data in certain circumstances.

8.4 Right to restriction (Article 18): to request limitation of processing in certain circumstances.

8.5 Right to data portability (Article 20): to receive your personal data in a structured, commonly used, machine-readable format.

8.6 Right to object (Article 21): to object to processing based on legitimate interests.

8.7 Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

8.8 To exercise these rights, please contact us at sales@dutycore.nl. We will respond within one (1) month.

8.9 If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), P.O. Box 93374, 2509 AJ The Hague, the Netherlands. Website: autoriteitpersoonsgegevens.nl.

9.1 Our website does not use cookies, analytics tools, or third-party tracking technologies. We do not collect any data through automated means when you simply visit our website.

9.2 When you submit our contact form, your data is transmitted directly to our designated email address through our form processing service (see article 5.4).

9.3 Web fonts on our website are loaded from third-party services (Fontshare). These services may receive limited technical data, such as your IP address, which is necessary for the technical delivery of the fonts. No personal data is stored or used for tracking purposes.

10.1 We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction, in accordance with Article 32 GDPR.

10.2 These measures include encrypted transmission (HTTPS), access controls, role-based permissions, secure backups, and regular security reviews.

10.3 In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, we will notify the Dutch Data Protection Authority within seventy-two (72) hours, and where required, the affected individuals.

11.1 We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations.

11.2 The most recent version is always available on our website. The effective date at the top of this Policy indicates when the latest changes were made.

11.3 Material changes will be communicated through appropriate channels.

For any questions about this Privacy Policy or our handling of personal data, please contact us at the details below.

Email: sales@dutycore.nl

Address: Walborg 2A, 1082 AM Amsterdam, the Netherlands

Chamber of Commerce: 91283027 · VAT: NL865604587B01