Privacy & Cookie Policy – Introgreen

1. Introduction

Introgreen, part of Denvo, is committed to protecting your privacy. We only process personal data that is necessary for providing and improving our services, and we handle all information with care. We never sell your data to third parties for commercial purposes.

This Privacy & Cookie Policy applies to the use of our website and the services offered by Introgreen. It is effective as of 23/06/2025. Any new version replaces previous versions.

This policy explains:

• what personal data we collect

• how and why we process it

• with whom data may be shared

• how we store and protect your data

• your rights under the GDPR

If you have questions, you can contact our Data Protection Officer (details at the end of this document).

2. Data Processing

Below you will find an overview of how we process your data, where it is stored, which security measures apply, and who has access to it.

2.1 Webshop Software – Magento

Our webshop is built using Magento. Personal data you provide to us may be shared with Magento for technical support. Magento applies strong security measures, including:

• SSL encryption

• secure data storage

• strict password policies

Magento may share anonymised data within its group to improve services. Magento complies with all applicable legal retention periods.

2.2 Hosting & E‑mail – TransIP

We use TransIP for web hosting and business e‑mail.

TransIP:

• has access to data only when necessary for technical support

• does not use your data for its own purposes

• applies SSL encryption and strong password policies

• performs regular backups

• may collect anonymised metadata (not personal data)

• is bound by confidentiality obligations

2.3 Payment Processing – MultiSafepay

For processing payments, we use MultiSafepay.

MultiSafepay processes:

• name

• address and residence details

• payment information (IBAN, credit card number)

MultiSafepay uses strict technical and organisational security measures. They may share anonymised data with third parties to improve their services. Data is retained only as long as legally required.

2.4 Reviews – WebwinkelKeur

We collect reviews via WebwinkelKeur.

• When leaving a review, you must provide your name and e‑mail address.

• WebwinkelKeur shares this information with us to link the review to your order.

• If we invite you to leave a review, we share your name and e‑mail address with WebwinkelKeur.

• WebwinkelKeur may use subcontractors under strict confidentiality.

2.5 Shipping & Logistics – PostNL, DHL, DPD

To deliver your order, we share your:

• name

• address

• residence details

with PostNL, DHL, or DPD.

These carriers use your data solely for executing the delivery. If subcontractors are used, your data may be shared with them as well.

2.6 Accounting – Microsoft

For administration and accounting, we use Microsoft.

Microsoft receives:

• name

• address

• residence details

• order details

Microsoft stores your data securely, is bound by confidentiality, and does not use your data for other purposes.

2.7 External Sales Channels – Bol.com & eBay

If you place an order via Bol.com or eBay, these platforms share your order and personal data with us.

We use this data only to process your order and protect it with appropriate security measures.

3. Purpose of Data Processing

We process your data only to:

• provide our services

• process orders

• communicate with you

• comply with legal obligations (administration, tax, accounting)

We do not use your data for targeted marketing without your explicit consent. We do not share your data with third parties except when necessary for our services or legal obligations.

4. Automatically Collected Data

Our website automatically collects technical data such as:

• IP address

• browser type

• operating system

This data is used to improve our services and is not directly identifiable.

5. Cooperation with Authorities

Introgreen may be legally required to share data in the context of tax or criminal investigations. We only share what is strictly necessary and within the limits of the law.

6. Retention Periods

We retain your data as long as you are a customer. If you request deletion, we treat this as a “right to be forgotten” request.

We do not store personal data longer than two years after the last contact, unless legally required.

Invoices and administrative records are stored for the legally required period.

7. Your Rights (GDPR)

You have the following rights:

✔ Right of access

You may request a copy of your personal data.

✔ Right to rectification

You may request corrections to inaccurate data.

✔ Right to restriction

You may request that we temporarily stop processing your data.

✔ Right to data portability

We can transfer your data to another provider upon request.

✔ Right to object

You may object to the processing of your data.

✔ Right not to be subject to automated decision‑making

We do not use automated profiling.

Requests are processed within 30 days.

8. Cookies

8.1 Google Analytics

Our website uses Google Analytics to analyse visitor behaviour.

Google may:

• combine data with other Google services

• use data for personalised advertising

We share only anonymised browsing data.

8.2 Third‑party Cookies

If third‑party software uses cookies, this is stated in this policy.

9. Changes to This Policy

We may update this policy at any time. The most recent version is always available on our website. If changes affect previously collected data, we will notify you by e‑mail.

10. Contact Details

Denvo / Introgreen Kwartellaan 11 1602 NH Enkhuizen The Netherlands

T: (+31) 637482558 E: [email protected]

Data Protection Officer: Johan van der Deure