Privacy statement

Who does this privacy statement apply to?
This privacy statement applies to customers, suppliers, business contacts and other relations of DTA Hydraulics. It also applies to visitors of dta.eu [and vanepump.eu].

Our contact details
Damen Technical Agencies B.V.
Campagneweg 18, 4761 RM Zevenbergen, the Netherlands
Chamber of Commerce: 20149692

What personal data do we process?
We process personal data that you provide to us yourself. This happens when you request a quotation, place an order, contact us by email or phone, or use our vane pump configurator. It concerns business contact details, such as your name, job title, company name, address, email address and phone number. It also concerns order, delivery and invoice details, such as your delivery address, VAT number and payment information, and the content of your correspondence with us. When you visit our website, we also collect technical data, such as your IP address, browser type and information about how you use the website.

Purposes and legal grounds
We use your personal data only for the following purposes:

• To perform agreements. We use your data to prepare quotations, process and deliver orders, arrange repairs, provide consultancy services and send invoices. The legal ground for this is the performance of a contract.
• To answer your questions. When you contact us, we use your data to respond to your request. The legal ground for this is our legitimate interest, or taking steps at your request before entering into a contract.
• To meet legal obligations. We keep financial records to comply with tax and accounting laws. The legal ground for this is a legal obligation.
• To improve our website and services. We analyse how our website is used and may inform existing customers about relevant products and services. The legal ground for this is our legitimate interest. For analytical cookies that require it, and for marketing to new contacts, we ask for your consent.

You are not legally obliged to provide your personal data to us. However, we need certain data to prepare a quotation, deliver an order or perform an agreement. If you do not provide this data, we cannot do so.

Retention periods
We do not keep personal data longer than necessary. Data from enquiries that do not lead to an agreement is kept for up to 12 months. Data we need for an agreement is kept for the duration of that agreement and for up to one year after it ends. Invoice, payment and other financial data is kept for 7 years, as required by Dutch tax law.

Sharing with third parties
We do not sell your personal data. We share it with third parties only when this is necessary for the purposes above, when you have given consent, or when we are legally required to. These third parties include:

• transport and courier companies (such as DHL, UPS, FedEx and TNT), so they can deliver your order;
• manufacturers, suppliers and certified repair workshops, when this is needed to process your order or repair;
• IT and hosting providers [such as name hosting party] and our accountant.

When a third party processes data on our behalf, we conclude a data processing agreement with that party. Some of these parties are located outside the European Economic Area, for example in the United States. In that case, we make sure that appropriate safeguards are in place, such as the EU standard contractual clauses or the EU-US Data Privacy Framework.

Cookies and Google Analytics
Our website uses cookies. Cookies are small text files that are stored on your device. We use functional cookies to make the website work properly. We use analytical cookies [via Google Tag Manager and Google Analytics] to understand how visitors use our website. [We have concluded a data processing agreement with Google, anonymised IP addresses and disabled data sharing with other Google services.] For more information, please see our cookie statement.

Third-party websites and social media
Our website contains links to other websites and to our LinkedIn page. This privacy statement does not apply to those websites. We have no influence on how these parties process your personal data. We therefore advise you to read their privacy statements.

Security
We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. Please note that information you send to us by regular email is not secured. For sensitive information, please contact us first.

Your rights
Under the GDPR, you have the following rights:

• the right of access to your personal data;
• the right to have incorrect data corrected;
• the right to have your data deleted;
• the right to restrict the processing of your data;
• the right to data portability;
• the right to object to processing based on our legitimate interest, including direct marketing;
• the right to withdraw your consent at any time, without affecting processing that took place before the withdrawal.

To exercise any of these rights, please send an email to info@dta.eu. To prevent misuse, we may ask you to verify your identity. We will respond to your request within one month.

We do not use automated decision-making that has legal consequences for you or otherwise significantly affects you.

Complaints
If you have a complaint about how we handle your personal data, please contact us first, and we will work with you to find a solution. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl.

Changes
We may update this privacy statement from time to time. The latest version is always available on our website. If we make significant changes, we will announce them on our website.