Privacy policy

1. Who we are

Bossa Group B.V. is responsible (the "controller") for the processing of personal data described in this policy.

Bossa Group B.V.
Alexanderveld 5-9, 2585 DB Den Haag, The Netherlands
Chamber of Commerce (KvK): 87202034
Email: info@bossagroup.nl
Telephone: +31 6 27 44 08 40

2. What data we process

We only process data that you provide to us or that is needed to run our website and our business:

• Contact and quotation requests: company name, VAT number, contact person, business email address, telephone number, delivery country and the details of your request.
• Business relationship: data needed for orders, deliveries, invoices and payments, such as names, addresses and contact details of your company and contact persons.
• Website visits: technical data such as your IP address, browser type and time of visit, which our hosting provider processes in server logs to deliver and secure the website.

3. Why we process your data

• To answer your questions and prepare quotations at your request (steps prior to a contract, Article 6(1)(b) GDPR).
• To perform agreements: deliveries, invoicing and payments (performance of a contract, Article 6(1)(b) GDPR).
• To meet legal obligations, such as keeping our financial records for the tax authorities (legal obligation, Article 6(1)(c) GDPR).
• To secure our website and to keep in touch with existing business contacts about comparable products (legitimate interest, Article 6(1)(f) GDPR). You can object to this at any time.

4. How the quotation form works

Our quotation form does not store your data on our website. When you submit it, it opens a pre-filled email in your own email program, and we only receive your details if you send that email.

The product groups you select are remembered in your browser's local storage, so your selection stays available while you browse between pages. This information stays on your device and is not sent to us. You can remove it at any time by clearing your browser data.

5. Cookies and analytics

We do not use tracking cookies, advertising cookies or analytics tools on this website.

Our website loads fonts from Google Fonts, which means your IP address is sent to Google when a page is opened. Links to Google Maps only open Google when you click them. Google may process this data in the United States under the EU-US Data Privacy Framework. See Google's privacy policy for details.

Newsletter

If you sign up for our monthly market update, we use your email address only to send you the newsletter. We use a double opt-in: after you sign up, you receive a confirmation email, and your subscription only starts once you click the confirmation link. We keep a record of when and how you gave and confirmed your consent.

Every newsletter contains an unsubscribe link, and you can also unsubscribe by emailing info@bossagroup.nl. If you don't confirm your sign-up, your email address is deleted within 30 days.

Job and supplier applications

If you send an open application, we use your details only to assess it. We delete them no later than 4 weeks after the procedure ends, unless you agree that we keep them for up to one year for future vacancies. Supplier applications are used only to assess a possible partnership and are deleted within 12 months if no agreement follows.

Local storage

Our request form remembers your selections in your browser's local storage. See our cookie statement for details.

6. Who we share data with

We never sell your data. We only share it where necessary with:

• our hosting and email providers, who process data on our behalf under a processing agreement;
• carriers and freight forwarders, to deliver your order;
• our accountant and the tax authorities, where the law requires it.

7. How long we keep data

• Quotation requests that do not lead to an agreement: up to 24 months after our last contact.
• Customer, order and invoice records: 7 years, as required by Dutch tax law.
• Server logs: as set by our hosting provider Hostinger, usually a few weeks.

8. Security

We take appropriate technical and organisational measures to protect personal data against loss and unauthorised access, and we limit access to people who need it for their work.

9. Your rights

You have the right to access, correct or delete your personal data, to restrict or object to its processing, and to receive your data in a portable format. Send your request to info@bossagroup.nl. We respond within one month.

If you are not satisfied with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

10. Changes

We may update this policy when our services or the law change. The date at the top shows when it was last updated.