Privacy Policy
We take the protection of your personal data seriously, in accordance with GDPR and EU law
Last updated: May 2026Protected data
SSL encryption and secure storage in accordance with EU standards
We never sell data
Your data is never shared with third parties for marketing purposes
GDPR compliant
Full compliance with the EU General Data Protection Regulation
Contents
Who we are
The controller of your personal data is b2bExport Fabjak, operating as an eenmanszaak (sole trader), registered under the laws of the Netherlands.
- Name: b2bExport Fabjak
- Address: De Nieuwe Erven 3, Unit 14714, 5431 NV Cuijk, Netherlands
- KVK: 42017554
- BTW-id: NL005437074B94
- EORI: NL1791609415
- Email for data enquiries: info@b2bexport.nl
- Website: b2bexport.nl
We process personal data in accordance with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the Dutch GDPR Implementation Act (UAVG).
Data we collect
| Data category | Examples | When collected |
|---|---|---|
| Identity | First name, last name | Registration, placing an order |
| Contact | Email, phone, delivery address | Placing an order, contact form |
| Payment | Card type, last 4 digits, PayPal ID | Order payment (processed by provider) |
| Order | Purchase history, selected products | Order fulfilment and delivery |
| Technical | IP address, browser type, device | Automatically upon visiting the Site |
| B2B data | Company name, KVK number, VAT number | B2B account registration |
Important: We do not collect full bank card numbers. Payment data is processed exclusively by certified providers and is not stored on our servers.
How we use your data
We use your personal data for the following purposes:
- Order processing — picking, packing and delivering goods
- Communication — order confirmations, delivery status, responses to enquiries
- Account management — managing B2B accounts and wholesale pricing
- Returns and exchanges — processing refund requests
- Service improvement — traffic analysis and Site optimisation
- Legal obligations — accounting and tax reporting
We do not use your data for automated decision-making or profiling that has legal consequences.
Legal grounds for processing (GDPR)
| Purpose of processing | Legal basis (Art. 6 GDPR) |
|---|---|
| Order fulfilment and delivery | Performance of a contract (Art. 6(1)(b)) |
| Accounting and tax records | Legal obligation (Art. 6(1)(c)) |
| Email newsletters and marketing | Consent (Art. 6(1)(a)) |
| Site improvement | Legitimate interest (Art. 6(1)(f)) |
| Fraud prevention | Legitimate interest (Art. 6(1)(f)) |
Sharing with third parties
We share your data only with third parties that are necessary for providing our services:
| Recipient | Purpose | Country |
|---|---|---|
| OpenCart / hosting | Platform hosting, order processing | EU |
| Mollie B.V. | Online payment processing | Netherlands (EU) |
| Meest | International order delivery | EU |
| Google Analytics | Site traffic analysis | EU / USA |
All partners are required to comply with GDPR or to provide an equivalent level of data protection.
We never sell your personal data to third parties for marketing or advertising purposes.
Cookies
Our Site uses cookies — small text files stored in your browser:
| Type | Purpose | Duration |
|---|---|---|
| Essential | Shopping cart, login, security | Session / up to 1 year |
| Analytical | Google Analytics — traffic and behaviour | Up to 2 years |
| Functional | Saving language, currency and preferences | Up to 1 year |
Essential cookies are set automatically. Analytical and functional cookies are only set with your consent. You can change your cookie settings in your browser at any time.
Data retention
We retain your data only for as long as necessary:
- Order data — 7 years (required by Dutch tax law)
- Account data — until account deletion + 30 days
- Contact requests — up to 2 years after last contact
- Marketing consent — until consent is withdrawn
- Cookies / analytics — as per cookie durations (section 6)
After the retention period expires, data is permanently deleted or anonymised.
Your rights under GDPR
As a data subject, you have the following rights:
- Right of access (Art. 15) — receive a copy of your personal data
- Right to rectification (Art. 16) — correct inaccurate or incomplete data
- Right to erasure (Art. 17) — request deletion of your data ("right to be forgotten")
- Right to restriction of processing (Art. 18) — restrict the processing of your data
- Right to data portability (Art. 20) — receive your data in a machine-readable format
- Right to object (Art. 21) — object to processing based on legitimate interest
- Right to withdraw consent — at any time for processing based on consent
To exercise your rights, send a request to info@b2bexport.nl. We will respond within 30 days in accordance with GDPR requirements.
Right to lodge a complaint: You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): autoriteitpersoonsgegevens.nl
Data protection
We take appropriate technical and organisational measures to protect your data:
- SSL/TLS encryption — all data is transmitted via a secure HTTPS connection
- PCI DSS — payment data is processed by certified providers
- Restricted access — only authorised persons have access to the data
- Regular audits — security monitoring and updates to protection systems
In the event of a data breach, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay, in accordance with Art. 33–34 GDPR.
Contact information
For any questions regarding the processing of your personal data or the exercise of your rights, please contact us:
- Data controller: b2bExport Fabjak
- Country: Netherlands
- Address: De Nieuwe Erven 3, Unit 14714, 5431 NV Cuijk, Netherlands
- Email: info@b2bexport.nl
- Telegram: @b2bexportFabjak
We undertake to respond to your request within 30 calendar days. In complex cases, the deadline may be extended to 60 days with appropriate notification.
This Privacy Policy may be updated. The current version is always available on this page with the date of the last update.
Have a question about your data?
Write to us — we will respond within 30 days in accordance with GDPR
Contact us