Privacy Page

EcoLine™ highly values the protection of your personal data. In this privacy statement, we explain which personal data we collect through our website (ecoline.global) and B2B platform, why we process this data, and on what legal basis. You will also read about the purpose of our use of cookies, how long we retain data, with whom we share personal data, and what rights you have regarding your data. This privacy statement is drafted in accordance with the General Data Protection Regulation (GDPR) and applies to all services of EcoLine™ within the European Union. We recommend that you read this statement carefully.

Data Controller 
EcoLine™, located at Krombraak 4, 4906 CR Oosterhout, the Netherlands, is responsible for the processing of personal data as described in this privacy statement. For questions or requests regarding privacy, you can contact us via [email protected] or by mail at the address above. EcoLine™ processes personal data in accordance with the GDPR and other applicable privacy laws.

Personal Data We Process 
We process personal data only to the extent necessary for the purposes described below. Here, we specify which personal data we collect in each situation:

• Visiting our website (Google Analytics) – When you visit our public website, we generally do not collect directly identifiable personal data. However, we use Google Analytics to analyze and improve website usage. Google Analytics places analytical cookies that collect data such as your IP address, device and browser information, and page visits. We have configured Google Analytics in a privacy-friendly manner (e.g., through IP anonymization) to safeguard your privacy. The information from Google Analytics is used solely to obtain statistics on website usage and improve the user experience. No other personal data is collected via the website beyond what is mentioned in this section.

• Registration and use of our B2B platform (webshop) – When you register as a business customer on our B2B platform or place an order, we process the standard personal data required to create and manage your account and handle your orders. This includes, among other things: name (first and last), company name (if applicable), address and location details (billing and shipping address), contact details (email address and phone number), login credentials (username and password in encrypted form), and your order and purchase history. You provide this data yourself during registration or the ordering process. We use this information to maintain your account, process your orders, and fulfill the agreement with you (as a customer).

• Email newsletter – If you are a registered B2B user, we may use your contact details to send you our email newsletters. This primarily includes your name and email address. We send newsletters to keep you informed about product updates, offers, or relevant developments regarding our products and services. You will only receive these messages if you are a business customer with us and/or have explicitly indicated that you wish to receive such communications. You can unsubscribe from the newsletter at any time; each newsletter contains an unsubscribe link at the bottom to withdraw your consent. After unsubscribing, you will no longer receive newsletters from us.

• Payment data – For processing payments in our webshop, we use external payment service providers, namely Mollie and PayPal. When you pay for an order, you will be redirected to the secure environment of your chosen payment provider. We receive a payment confirmation and limited payment details (such as a transaction ID and payment method) from the payment providers to process your order. For payment processing, Mollie or PayPal may process certain personal data, such as your name, payment card or account details, billing address, email address, and payment amount, to the extent necessary to execute the payment. EcoLine™ itself does not store full payment card details or bank account numbers of customers. We refer you to the privacy statements of Mollie and PayPal for more information about their data processing.

Cookies 
Our website uses cookies and similar technologies. Cookies are small text files placed on your device. We primarily use functional cookies and analytical cookies:

• Functional cookies: These are necessary for the website to function properly, for example, to save your language preference or keep you logged in to the B2B platform. Without these cookies, the site may not work as intended.

• Analytical cookies: Through Google Analytics, we use cookies to gain insight into the use of our website. These analytical cookies collect statistical information (as mentioned under Visiting our website above). Where possible, we have implemented privacy-protective measures (such as IP address anonymization and disabling data sharing with Google).

We do not place cookies for marketing or third-party tracking purposes beyond what is mentioned above. During your first visit to our site, we inform you about the use of cookies and, where legally required, ask for your consent to place analytical cookies. You can also refuse or delete cookies afterward via your browser settings. Please note that disabling certain cookies may affect the functionality of the website.

. Keep in mind that disabling certain cookies may impact the website's functionality.

Purposes and Legal Bases for Processing 
We process your personal data only for specific purposes and based on a valid legal ground as outlined in Article 6 of the GDPR. Below, we explain the purposes, along with the corresponding legal basis for each:

• Website use and analysis: We process data about your website visit (via cookies/Analytics) to ensure our website functions and to track usage statistics. Legal basis: legitimate interest (optimizing our website and services) or your consent, where legally required for analytical cookies.

• Account registration and contract execution: We process your name, contact and address details, login credentials, and order details to create your account, grant you access to the B2B platform, and process and deliver orders. Legal basis: necessity for the performance of a contract (Art. 6(1)(b) GDPR) – without this data, we cannot enter into or fulfill the purchase agreement.

• Customer service and communication: If you contact us (e.g., via email or the contact form), we process your name, contact details, and the content of your message to address your query or complaint. Legal basis: performance of the contract (if the query relates to an order) or legitimate interest (to provide good customer service).

• Newsletters and marketing: We process your name and email address to send you newsletters or marketing communications about our products and services. Legal basis: your prior consent (Art. 6(1)(a) GDPR), such as when subscribing to the newsletter, or our legitimate interest (Art. 6(1)(f) GDPR) to inform existing customers about similar products/services. In all cases, you have the right to object and unsubscribe (see Your Rights below).

• Payment processing: For processing payments and preventing fraud, we share necessary data with Mollie or PayPal. Legal basis: performance of the contract (completing payment, Art. 6(1)(b)) and our legitimate interest in secure and reliable payment processing (Art. 6(1)(f)).

• Legal obligations: We may also process your data to comply with legal obligations. For example, we are required to maintain financial records, meaning certain invoice data (name, address, order details) must be retained for 7 years. Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).

. Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).

We will not process your personal data for other, incompatible purposes without informing you in advance and, where necessary, obtaining your consent.

Retention Periods 
We do not retain your personal data longer than necessary for the purposes mentioned above or as required by law. The specific retention periods are as follows:

• Website visit data (Analytics data) is retained in Google Analytics for a maximum of 14 months, after which it is automatically deleted. Server log data (such as IP addresses) is also deleted after a few months, unless we need it longer for security purposes.

• Account and profile data on the B2B platform is retained as long as your account is active. If you do not use your account for an extended period (e.g., 24 months), we may contact you to ask if you wish to keep the account. Upon your request, we can delete your account; in this case, your account data will be erased or anonymized, except for data we are legally required to retain.

• Order and transaction data is retained for at least the duration of the customer relationship. After termination (e.g., account deletion), relevant order data is retained for 7 years after the end of the fiscal year in which your last order was placed, due to tax retention obligations. This includes invoice data and payment information listed on the invoice.

. This includes invoice data and payment information listed on the invoice.

• Email addresses and other data for the newsletter are retained as long as you are subscribed. Once you unsubscribe, we will remove your email address from the mailing list. We may retain anonymized information about your opt-out to respect it in the future.

• Correspondence and contact requests (e.g., via email or contact form) are retained as long as needed to address your query and any follow-up questions. Depending on the nature of the contact, we may retain certain correspondence (e.g., related to a contract or complaint) for the duration of the agreement or as per statutory limitation periods for business disputes.

• Data required to comply with legal obligations may be retained longer than mentioned above if required by law. Once there is no longer a legal or business need to retain the data, we will securely delete or anonymize it.

Sharing Personal Data with Third Parties 
EcoLine™ does not sell your personal data to third parties. We only share data with third parties to the extent necessary for the execution of our services or to comply with legal obligations. With parties that process personal data on our behalf (processors), we have concluded data processing agreements to ensure they adhere to the same level of security and confidentiality. The categories of third parties with whom we share personal data include:

• IT and hosting service providers: We host our website and B2B platform with external parties within the EU. These parties may have access to personal data for maintenance and hosting purposes but only in accordance with our instructions.

• Analytics and cookie services: As mentioned, we use Google Analytics for website analysis. Google acts as a processor in this context. We have a data processing agreement with Google and applied privacy-friendly settings. Google may not use the data for its own purposes.

• Payment service providers: For processing payments, we share data with Mollie (based in the Netherlands) and PayPal (Europe) S.à r.l. et Cie, S.C.A. (based in Luxembourg). These parties receive information necessary to execute the payment and may, in turn, share data with your bank or card issuer. Mollie and PayPal process your data according to their own privacy policies and compliant privacy rules.

• Delivery and logistics partners: If you order products from us that require shipping, we share your name, address, and contact details with the carrier (e.g., postal or courier service) to facilitate delivery. These partners may only use your data for delivery and track & trace communication.

• Government authorities and legal obligations: If we are legally required to provide personal data to competent authorities (e.g., for a court order or tax audit), we will comply. In such cases, we ensure the disclosure is lawful.

In all cases, we limit the shared data to the minimum necessary for the third party's purpose. The third parties we work with are preferably located within the European Economic Area (EEA). If parties outside the EEA are involved, we will – before transferring personal data – implement appropriate safeguards to protect your privacy, such as EU model contract clauses or using parties certified under an adequacy decision by the European Commission.

Data Security 
EcoLine™ takes the protection of your personal data seriously and has implemented appropriate technical and organizational measures to prevent misuse, loss, unauthorized access, and unauthorized modification. We use secure connections (SSL encryption) for all parts of our website where personal data is provided, ensuring data is transmitted encrypted. Additionally, only authorized employees have access to your personal data, and they are bound by confidentiality obligations. We monitor our systems for potential vulnerabilities and attacks and regularly evaluate our security measures. While we strive to protect your data, no method of data transmission or storage is 100% secure. Should a data breach with likely adverse effects on your privacy occur despite our measures, we will notify you and the relevant authorities as required by law.

Your Rights 
Under the GDPR, you have certain rights regarding your personal data. You can submit a request to us at any time to exercise one or more of these rights. These rights include:

. You can submit a request to us at any time to exercise one or more of these rights. These rights include:

• Right of access: You have the right to request which personal data we have about you and to receive a copy. We will explain how and why we process this data.

• Right to rectification: If the personal data we process about you is incorrect or incomplete, you have the right to have it corrected or supplemented.

• Right to erasure (right to be forgotten): You may request us to delete (certain) personal data. We will comply with a deletion request unless we have a compelling reason or legal obligation to retain the data. For example, we cannot immediately delete certain transaction data due to tax retention obligations.

• Right to restriction of processing: In certain cases, you have the right to ask us to restrict the processing of your personal data (e.g., if you dispute the accuracy of the data or if the processing is unlawful but you do not want us to delete the data). In case of restriction, we will store the data but not process it further without your consent, except for handling legal claims or for important reasons.

• Right to data portability: To the extent we process your personal data based on your consent or for the performance of a contract and the processing is automated, you have the right to request that we provide this data in a structured, commonly used, and machine-readable format so you can store it or transfer it to another service provider. You may also request that we transfer the data directly to another party, if technically feasible.

• Right to object: You have the right to object to processing based on our or a third party's legitimate interest if you have personal reasons for doing so. Upon objection, we will cease processing unless we have compelling legitimate grounds that override your interests or rights (e.g., to establish or defend a legal claim). If your personal data is processed for direct marketing purposes (e.g., our newsletter), you always have the right to object. In such cases, we will stop the processing for marketing activities immediately.

• Right to withdraw consent: To the extent the processing of your personal data is based on your consent, you have the right to withdraw this consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal, but we will stop the relevant processing afterward. For example, if you consented to receiving our newsletter, you can withdraw this consent by unsubscribing, after which we will no longer send you newsletters.

• Right to lodge a complaint: If you believe we are not acting in accordance with privacy laws or are not handling your personal data carefully, we would appreciate hearing from you to address any issues. Additionally, you have the right to lodge a complaint with the supervisory authority. In the Netherlands, this is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, AP). You can contact the AP via their website or phone number to file a complaint.

You can submit requests regarding the above rights to EcoLine™, Attn: Privacy, via email at [email protected]. We will respond to your request as soon as possible, but no later than the legally required period of one month. Please note that we may ask for additional information to verify your identity to protect your privacy. Generally, we do not charge for handling your request unless the requests are manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse the request in accordance with the GDPR.

Obligation to Provide Data 
In most cases, you are not legally or contractually obligated to provide us with personal data. You are free to visit the website without providing personal information (apart from cookies for which you can give or refuse consent). However, to enter into a purchase agreement with EcoLine™ (e.g., placing an order via our B2B platform), it is necessary to provide certain personal data. Without your name, address, contact details, and payment information, we cannot create an account for you or process your order. Providing this data is thus a prerequisite for entering into an agreement; if you do not fill in these mandatory fields, we cannot provide the service. Optional data (if requested) is marked as such and is not required for the agreement.

Automated Decision-Making 
EcoLine™ does not use automated decision-making processes or profiling that could have legal consequences for you or similarly significantly affect you. This means we do not make decisions based on automatically processed data without human intervention that could have legal or other significant effects. In all cases where we would apply such profiling, we will seek your explicit consent in advance and clearly inform you about the underlying logic and intended consequences, in accordance with the GDPR.

Changes to This Privacy Statement 
We may update this privacy statement from time to time, for example, due to changes in our processing activities or amended legislation. We therefore advise you to review the privacy statement regularly. For significant changes, we may also notify registered users via email or the platform. The date of the most recent update is always indicated at the bottom of the statement.

This privacy statement was last updated on April 4, 2025.

Contact Information 
If you have any questions after reading this privacy statement about how EcoLine™ handles your personal data, or if you have a complaint or wish to exercise any of your rights, please feel free to contact us. You can reach us via email at [email protected] or by mail at: EcoLine™, Krombraak 4, 4906 CR Oosterhout, the Netherlands. We are happy to assist with any privacy-related questions.

​​For more information about the GDPR or your privacy rights, we refer you to the website of the Dutch Data Protection Authority.