Legal
Privacy Policy
EROPEX processes personal data in line with the EU General Data Protection Regulation. This statement explains what we collect, why, and how long we keep it.
Last updated: 1 July 2026
1. Controller
EROPEX, Zwanenveld 3449, 6538 ZE Nijmegen, The Netherlands, is the controller for the personal data described in this statement. Chamber of Commerce (KvK) 87451203, VAT NL864321098B01. Privacy questions: info@eropex.eu.
2. Data we collect
We collect only data that is necessary for the purpose it was given for:
- Contact and quotation forms: name, company, email, phone, country, request details.
- Dealer applications: company registration data, VAT number, trade references, expected volumes.
- Webshop orders: billing and delivery address, order lines, order correspondence.
- Website usage: pages visited, device and browser type, referring source (only with analytics consent).
3. Purposes and legal basis
- Preparing and following up quotations and orders â performance of a contract.
- Dealer assessment and account administration â performance of a contract and legitimate interest.
- Statutory invoicing and product traceability records â legal obligation.
- Website statistics and marketing measurement â consent, withdrawable at any time.
4. Sharing with third parties
We share data only with processors that support our operations: hosting and website infrastructure, email delivery, ERP and invoicing, logistics carriers and payment providers. All processors are bound by a data processing agreement and process data inside the European Economic Area wherever possible.
5. Retention
Quotation and enquiry data is retained for 24 months after the last contact. Order, invoicing and traceability records are retained for 7 years to meet Dutch fiscal obligations. Analytics data is retained for a maximum of 14 months.
6. Security
Access to personal data is limited to employees who need it for their role. Transport is encrypted with TLS, systems are patched on a defined schedule, and access to administrative systems requires multi-factor authentication.
7. Your rights
You may request access, rectification, erasure, restriction, data portability, or object to processing. Send your request to info@eropex.eu and we will respond within one month. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
8. Changes
We may update this statement when our services or legal obligations change. The version published on this page is always the applicable one.