Privacy Policy

Introduction

WaxWindspe B.V. ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, process, and safeguard your personal data when you visit our website at waxwindspe.life or engage with our services.

As a company registered in the Netherlands and operating within the European Union, we comply with the General Data Protection Regulation (GDPR) and all applicable data protection laws. This policy applies to all users of our website and services.

Data Controller

WaxWindspe B.V. is the data controller for the personal information we collect and process. Our contact details are:

Data Collection

The data we collect includes personal information that you provide directly to us, information collected automatically when you use our website, and data from third-party sources when applicable. We collect this information to provide our services, improve user experience, and comply with legal obligations.

Information You Provide Directly

• Contact information (name, email address, phone number)
• Company information (company name, position, business details)
• Communication data (messages, enquiries, support requests)
• Service preferences and requirements
• Marketing preferences and consent records

Automatically Collected Information

• IP address and location data
• Browser type, version, and settings
• Device information and operating system
• Website usage data (pages visited, time spent, click patterns)
• Cookies and similar tracking technologies (see our Cookie Policy)

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal bases:

• Consent: When you provide explicit consent for specific processing activities
• Contract Performance: To fulfil our contractual obligations and provide requested services
• Legitimate Interests: For business operations, security, and service improvement
• Legal Obligation: To comply with applicable laws and regulations

How We Use Your Information

We explain how we use your information for various purposes related to our business operations and service delivery. The use of your data is always limited to what is necessary and proportionate for the stated purposes.

Primary Uses

• Providing and delivering our retail solutions and services
• Processing and responding to your enquiries and requests
• Managing customer relationships and accounts
• Communicating about services, updates, and important notices
• Processing payments and maintaining financial records

Secondary Uses

• Improving our website functionality and user experience
• Analysing usage patterns to enhance our services
• Marketing communications (with your consent)
• Ensuring security and preventing fraud
• Complying with legal and regulatory requirements

Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your data only in the following circumstances:

• Service Providers: Trusted third-party vendors who assist in our operations
• Legal Requirements: When required by law, court order, or regulatory authority
• Business Transfers: In the event of a merger, acquisition, or sale of assets
• Consent: When you have given explicit consent for specific sharing
• Protection: To protect our rights, property, or safety, or that of others

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Our retention periods vary depending on the type of data and the purpose for processing.

Retention Periods

• Contact Information: Retained while you remain a client and for 3 years after the last interaction
• Financial Records: 7 years as required by Dutch tax and accounting laws
• Marketing Data: Until consent is withdrawn or 2 years of inactivity
• Website Analytics: 26 months for Google Analytics data
• Security Logs: 12 months for fraud prevention and security purposes

Your Rights

Under GDPR, you have several rights regarding your personal data. You can exercise these rights by contacting us at privacy@waxwindspe.life.

Your Data Protection Rights Include

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Request transfer of your data to another service
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for specific processing activities
• Right to Lodge a Complaint: File a complaint with the Dutch Data Protection Authority

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Employee training on data protection practices
• Incident response procedures
• Regular backups and disaster recovery plans

International Data Transfers

As we primarily operate within the EU, most data processing occurs within the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules where applicable
• Explicit consent for specific transfers

Cookies and Tracking

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyse website usage. For detailed information about our use of cookies, please refer to our Cookie Policy.

You can manage your cookie preferences through our consent management platform or by adjusting your browser settings.

Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@waxwindspe.life.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending email notifications to registered users
• Displaying prominent notices on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the following contact information:

We will respond to your enquiry within 30 days as required by GDPR. For urgent privacy matters, please indicate this in your communication.

Supervisory Authority

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):