Privacy Policy

We take the protection of your personal data seriously, in accordance with GDPR and EU law

Last updated: May 2026

Protected data

SSL encryption and secure storage in accordance with EU standards

We never sell data

Your data is never shared with third parties for marketing purposes

GDPR compliant

Full compliance with the EU General Data Protection Regulation

1

Who we are

The controller of your personal data is b2bExport Fabjak, operating as an eenmanszaak (sole trader), registered under the laws of the Netherlands.

  • Name: b2bExport Fabjak
  • Address: De Nieuwe Erven 3, Unit 14714, 5431 NV Cuijk, Netherlands
  • KVK: 42017554
  • BTW-id: NL005437074B94
  • EORI: NL1791609415
  • Email for data enquiries: info@b2bexport.nl
  • Website: b2bexport.nl

We process personal data in accordance with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the Dutch GDPR Implementation Act (UAVG).

2

Data we collect

Data categoryExamplesWhen collected
IdentityFirst name, last nameRegistration, placing an order
ContactEmail, phone, delivery addressPlacing an order, contact form
PaymentCard type, last 4 digits, PayPal IDOrder payment (processed by provider)
OrderPurchase history, selected productsOrder fulfilment and delivery
TechnicalIP address, browser type, deviceAutomatically upon visiting the Site
B2B dataCompany name, KVK number, VAT numberB2B account registration

Important: We do not collect full bank card numbers. Payment data is processed exclusively by certified providers and is not stored on our servers.

3

How we use your data

We use your personal data for the following purposes:

  • Order processing — picking, packing and delivering goods
  • Communication — order confirmations, delivery status, responses to enquiries
  • Account management — managing B2B accounts and wholesale pricing
  • Returns and exchanges — processing refund requests
  • Service improvement — traffic analysis and Site optimisation
  • Legal obligations — accounting and tax reporting

We do not use your data for automated decision-making or profiling that has legal consequences.

4

Legal grounds for processing (GDPR)

Purpose of processingLegal basis (Art. 6 GDPR)
Order fulfilment and deliveryPerformance of a contract (Art. 6(1)(b))
Accounting and tax recordsLegal obligation (Art. 6(1)(c))
Email newsletters and marketingConsent (Art. 6(1)(a))
Site improvementLegitimate interest (Art. 6(1)(f))
Fraud preventionLegitimate interest (Art. 6(1)(f))
5

Sharing with third parties

We share your data only with third parties that are necessary for providing our services:

RecipientPurposeCountry
OpenCart / hostingPlatform hosting, order processingEU
Mollie B.V.Online payment processingNetherlands (EU)
MeestInternational order deliveryEU
Google AnalyticsSite traffic analysisEU / USA

All partners are required to comply with GDPR or to provide an equivalent level of data protection.

We never sell your personal data to third parties for marketing or advertising purposes.

6

Cookies

Our Site uses cookies — small text files stored in your browser:

TypePurposeDuration
EssentialShopping cart, login, securitySession / up to 1 year
AnalyticalGoogle Analytics — traffic and behaviourUp to 2 years
FunctionalSaving language, currency and preferencesUp to 1 year

Essential cookies are set automatically. Analytical and functional cookies are only set with your consent. You can change your cookie settings in your browser at any time.

7

Data retention

We retain your data only for as long as necessary:

  • Order data — 7 years (required by Dutch tax law)
  • Account data — until account deletion + 30 days
  • Contact requests — up to 2 years after last contact
  • Marketing consent — until consent is withdrawn
  • Cookies / analytics — as per cookie durations (section 6)

After the retention period expires, data is permanently deleted or anonymised.

8

Your rights under GDPR

As a data subject, you have the following rights:

  • Right of access (Art. 15) — receive a copy of your personal data
  • Right to rectification (Art. 16) — correct inaccurate or incomplete data
  • Right to erasure (Art. 17) — request deletion of your data ("right to be forgotten")
  • Right to restriction of processing (Art. 18) — restrict the processing of your data
  • Right to data portability (Art. 20) — receive your data in a machine-readable format
  • Right to object (Art. 21) — object to processing based on legitimate interest
  • Right to withdraw consent — at any time for processing based on consent

To exercise your rights, send a request to info@b2bexport.nl. We will respond within 30 days in accordance with GDPR requirements.

Right to lodge a complaint: You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): autoriteitpersoonsgegevens.nl

9

Data protection

We take appropriate technical and organisational measures to protect your data:

  • SSL/TLS encryption — all data is transmitted via a secure HTTPS connection
  • PCI DSS — payment data is processed by certified providers
  • Restricted access — only authorised persons have access to the data
  • Regular audits — security monitoring and updates to protection systems

In the event of a data breach, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay, in accordance with Art. 33–34 GDPR.

10

Contact information

For any questions regarding the processing of your personal data or the exercise of your rights, please contact us:

  • Data controller: b2bExport Fabjak
  • Country: Netherlands
  • Address: De Nieuwe Erven 3, Unit 14714, 5431 NV Cuijk, Netherlands
  • Email: info@b2bexport.nl
  • Telegram: @b2bexportFabjak

We undertake to respond to your request within 30 calendar days. In complex cases, the deadline may be extended to 60 days with appropriate notification.

This Privacy Policy may be updated. The current version is always available on this page with the date of the last update.

Have a question about your data?

Write to us — we will respond within 30 days in accordance with GDPR

Contact us