Privacy Policy
La tâche est simple : une traduction pure, sans site à construire. Voici la version anglaise du contenu, avec tout le code conservé :
Privacy Policy
1. Data Controller
The controller responsible for processing personal data collected through this website is:
— Sole trader (self-employed)
Email: contact [at] nederlandse-varenvereniging.nl
No Data Protection Officer (DPO) has been appointed; the data controller remains the sole point of contact for any questions relating to personal data.
2. Data Collected
Depending on your browsing and interactions with the site, the following data may be collected:
- Identification data: first name, last name (via forms)
- Contact details: email address (contact form, newsletter)
- Technical data: IP address, browser type, operating system
- Browsing data: pages visited, session duration, traffic source
- Voluntarily submitted content: messages sent via forms, comments
This data is collected while browsing, submitting a contact form, signing up for a newsletter, or leaving a comment.
3. Purposes of Processing
The personal data collected is used for the following purposes:
- Ensuring the technical operation of the website
- Responding to your contact or information requests
- Sending newsletters or marketing communications, if you have consented
- Analyzing audience behavior and improving the user experience
- Ensuring website security and preventing fraudulent access
- Complying with applicable legal obligations
4. Legal Basis for Processing
In accordance with Article 6 of the GDPR, each processing activity is based on a distinct legal ground:
- Consent (Art. 6.1.a): newsletter sign-up, placement of non-essential cookies (analytics, marketing)
- Performance of a contract (Art. 6.1.b): processing an order or providing an online service
- Legitimate interest (Art. 6.1.f): anonymized traffic statistics, website security
- Legal obligation (Art. 6.1.c): retention of billing data, accounting obligations
5. Retention Period
Data is retained only for the period necessary for the purpose for which it was collected:
- Contact forms: 12 months from the last interaction
- User accounts: until the account is deleted by the user or after 3 years of inactivity
- Browsing data and cookies: 13 months maximum (in accordance with CNIL recommendations)
- Newsletter data: until unsubscription or 3 years after the last engagement
- Billing data: 10 years (legal obligation — French Commercial Code)
Upon expiry of these periods, data is permanently deleted or irreversibly anonymized.
6. Recipients and Data Sharing
Your personal data is neither sold, rented, nor transferred to third parties for commercial purposes.
It may be shared, strictly within the scope of their role, with the following service providers:
- Website host:
- Email marketing tools: provider used for newsletter distribution (e.g. Mailchimp, Brevo…)
- Audience analytics tools: provider used for traffic statistics
These providers act as data processors and are contractually bound to respect the confidentiality and security of your data in accordance with the GDPR.
7. Transfers Outside the European Union
Some of our service providers may be established outside the European Union (in particular in the United States). In such cases, data transfers are governed by appropriate safeguards in accordance with Chapter V of the GDPR, in particular through:
- Standard contractual clauses approved by the European Commission
- The provider’s adherence to the EU-US Data Privacy Framework (DPF), where applicable
8. Your Rights
In accordance with Articles 15 to 22 of the GDPR and the French Data Protection Act, you have the following rights over your personal data:
- Right of access (Art. 15): obtain a copy of the data held about you
- Right to rectification (Art. 16): correct inaccurate or incomplete data
- Right to erasure / right to be forgotten (Art. 17): request deletion of your data
- Right to restriction (Art. 18): temporarily restrict processing
- Right to data portability (Art. 20): receive your data in a structured, readable format
- Right to object (Art. 21): object to processing based on legitimate interest or for direct marketing purposes
- Right to withdraw consent: revoke consent previously given at any time, without affecting the lawfulness of prior processing
To exercise any of these rights, contact us by email at: contact [at] nederlandse-varenvereniging.nl
We commit to responding within one month of receiving your request (Article 12 GDPR).
If your complaint remains unresolved, you have the right to lodge a complaint with the CNIL:
Commission Nationale de l’Informatique et des Libertés — 3 place de Fontenoy, 75007 Paris — www.cnil.fr
9. Data Security
Frond & Soil implements appropriate technical and organizational measures to protect your data against loss, destruction, alteration, unauthorized access, or accidental disclosure, in accordance with Article 32 of the GDPR.
These measures include: HTTPS connection (SSL/TLS encryption), restricted data access, and regular software and content management system updates.
In the event of a data breach likely to pose a risk to your rights and freedoms, we commit to notifying the CNIL within 72 hours in accordance with Article 33 of the GDPR.
11. Changes to This Policy
Frond & Soil reserves the right to modify this policy at any time, in particular to adapt to legal, regulatory, or technical developments. Any material changes will be notified to you via the site.
We invite you to check this page regularly to stay informed of the current version.
12. Contact
For any questions relating to this policy or the exercise of your rights, you may contact us at:
contact [at] nederlandse-varenvereniging.nl
Privacy and Cookie Policy — Last updated: 2026 — GDPR compliant (EU Regulation 2016/679) and French Data Protection Act (Loi Informatique et Libertés).