If you have any questions regarding your privacy, please contact us at info@nedstar.com.

1. Who is responsible for processing your personal data?

Nedstar B.V., located at Herengracht 477, 1017 BS Amsterdam, The Netherlands, is the data controller responsible for processing your personal data.

You can contact us regarding privacy matters:

• Email: info@nedstar.com

• Phone: +31 (0)20 210 16 56

2. Scope of this privacy policy

This policy applies to:

• Visitors to our website www.nedstar.com

• Prospective and current clients, suppliers, and partners

• Individuals who contact us via forms, email, chat, or other communication channels

This policy does not apply to third-party websites linked from our site. We encourage you to review their privacy policies separately.

3. What data we collect

We may collect and process the following categories of personal data:

a) Identification and Contact Details

• First name, last name

• Company name

• Business email address

• Phone number

b) Company and Business Information

• Company website

• Industry and country

• Product-specific data (e.g., specifications, origin, certifications, quantities, packaging, other commercial details)

c) Technical Information

• IP address

• Browser type and version

• Device and usage data collected via analytics tools (e.g., pages visited, referral source)

We do not intentionally collect sensitive personal data (such as health information, religious beliefs, etc.).

4. How we collect your data

We collect personal data directly when you:

• Fill out our “Request a Quote” form or any other contact form on our website

• Communicate with us via email, phone, or chat

We may also collect data indirectly from:

• HubSpot CRM (enrichment of company details);

• Google Analytics or similar tools (for site performance and usage analysis).

5. How we use your data

We process your personal data for the following purposes:

• To respond to your inquiries and provide requested information

• To prepare and deliver quotes or offers

• To manage and maintain our commercial relationship

• To comply with legal and regulatory obligations

• To improve our website, services, and communications

We do not sell or rent your personal data to third parties.

6. Legal basis for processing

We process your personal data based on:

• Contractual necessity: to fulfill your requests and provide our services

• Legitimate interest: to operate and improve our business and respond to inquiries

• Legal obligations: to comply with applicable laws and regulations

Where required, we will obtain your explicit consent (e.g., for optional marketing communications) and you may withdraw it at any time.

7. Sharing of personal data

We may share your personal data with:

• Trusted service providers (e.g., CRM platforms, IT and hosting providers, analytics tools) who process data on our behalf under strict confidentiality and GDPR-compliant agreements

• Legal authorities or regulators where required by law

We do not transfer your data outside the European Economic Area (EEA) unless adequate safeguards (such as EU Standard Contractual Clauses) are in place.

8. Data retention

We retain personal identification data for 1 year, after which it will be deleted or anonymized unless there are legitimate reasons to retain it longer (e.g., ongoing contracts, risk management, security, or legal obligations).

Company-level and product-related data may be retained longer for business continuity, compliance, and risk management purposes.

9. How we protect your data

We use appropriate technical and organisational measures to safeguard your personal data against unauthorized access, loss, misuse, alteration, or disclosure. Data is stored in our secure CRM system, HubSpot, which adheres to recognised industry security standards.

10. Your data protection rights

You have the following rights under GDPR:

• Right of access: Request copies of your personal data.

• Right to rectification: Request correction of inaccurate or incomplete data.

• Right to erasure: Request deletion of your personal data, under certain conditions.

• Right to restrict processing: Request restriction of processing, under certain conditions.

• Right to object: Object to processing of your personal data based on legitimate interests.

• Right to data portability: Request transfer of your data to another organization or directly to you.

To exercise these rights, contact us at info@nedstar.com. We will respond within one month as required by law.

11. Third-Party links

Our website may contain links to other websites. This Privacy Policy applies only to our website. We are not responsible for the privacy practices or content of third-party sites.

12. Changes to this privacy policy

We review and update this Privacy Policy regularly. Any updates will be posted on this page with a revised “last updated” date.
In case of significant changes, we may also notify you directly by email or a website notice.

13. Contact information

For questions, concerns, or to exercise your rights, contact us at:

• Email: info@nedstar.com

• Phone: +31 (0)20-210 16 56

• Address: Herengracht 477, 1017 BS Amsterdam, The Netherlands

If you are not satisfied with our response, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

• Phone: +31 (0)70-888 85 00

• Website: https://autoriteitpersoonsgegevens.nl