Legal
Privacy policy
How we handle personal data when you visit this website, contact us or do business with us.
1. Who is responsible
The controller for the processing of your personal data is:
Windmolen Machines B.V.
John M. Keynesplein 10, 1066 EP Amsterdam, the Netherlands
KVK 94913781
E-mail: sales@windmolenmachinesbv.nl · Phone: +31 (0)10 713 8162
2. Which data we process
We process only the data you give us or that is needed to provide our services:
- Contact and request forms: name, company, e-mail address, phone number, country, subject, your message and the equipment details you enter, plus the language you used.
- Correspondence: e-mails, letters and call notes relating to your request or order.
- Customers and suppliers: contact details of contact persons, company details, VAT and bank details needed for contracts, invoicing and delivery.
- Technical data: our hosting provider processes IP addresses and request logs for security and delivery of the website (see section 6).
We do not use tracking cookies, analytics or advertising technologies on this website.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Answering your request or question | Performance of a contract or pre-contractual steps at your request (art. 6(1)(b)) |
| Concluding and executing sales, purchase or rental agreements, including transport and export | Performance of a contract (art. 6(1)(b)) |
| Invoicing, bookkeeping and tax obligations | Legal obligation (art. 6(1)(c)) |
| Fraud prevention, verifying counterparties and securing our website | Legitimate interest (art. 6(1)(f)) |
| Remembering your language preference | Legitimate interest; stored only in your own browser (art. 6(1)(f)) |
4. How long we keep data
- Requests that do not lead to a contract: up to 12 months after our last contact, unless you ask us to delete them sooner.
- Contracts, invoices and related correspondence: 7 years, as required by Dutch tax law (art. 52 Algemene wet inzake rijksbelastingen).
- Hosting and security logs: retained by our hosting provider for a limited period in line with its own retention policy (typically up to 30 days).
5. With whom we share data
We share personal data only where necessary for the purposes above:
- Transport and freight partners, to deliver machines to you.
- Manufacturers, dealers and inspectors, where needed to source or inspect a machine for you.
- Accountants, legal and tax advisers, bound by professional confidentiality.
- Authorities, where we are legally required to do so (for example customs or tax authorities).
- Service providers (processors) such as our website hosting and form-handling provider (see below), acting on our instructions under a data processing agreement.
We do not sell personal data and we do not share it for marketing purposes.
6. Website hosting and international transfers
This website and its forms are hosted by Netlify, Inc. (San Francisco, USA), which delivers the site through a global content delivery network and stores form submissions on our behalf. Netlify acts as our processor under its Data Processing Addendum, which incorporates the EU Standard Contractual Clauses; Netlify also participates in the EU-U.S. Data Privacy Framework. We retrieve form submissions and delete them from the hosting platform once they have been processed.
If you choose to load the map on our contact page, your browser connects to the OpenStreetMap Foundation (United Kingdom) and your IP address is transmitted to it; the map is not loaded until you click.
7. Your rights
Under the GDPR you have the right to access, rectify or erase your personal data, to restrict or object to its processing, and to data portability. Where processing is based on consent you can withdraw it at any time. To exercise your rights, e-mail sales@windmolenmachinesbv.nl; we respond within one month. You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
8. Security
The website is served over HTTPS with strict security headers and contains no third-party scripts. Access to form submissions and business data is limited to staff who need it to handle your request. E-mail correspondence is protected by access controls and spam and phishing filtering.
9. Changes to this policy
We may update this policy to reflect changes in our services or in the law. The version number and date at the top of this page show the current version.