Privacy Policy
Plan Organic NL B.V. – planorganic.nl
Last updated: August 2026
Plan Organic NL B.V. ("Plan Organic", "we", "us", or "our") respects the privacy of all visitors and business customers on planorganic.nl. As a business-to-business (B2B) webshop, we process corporate data as well as personal data of company representatives, employees, and sole proprietors. This Privacy Policy outlines how we collect, use, store, and protect your personal data in accordance with the EU General Data Protection Regulation (GDPR / Algemene Verordening Gegevensbescherming - AVG).
1. Identity of the Controller
Plan Organic NL B.V. is the Data Controller responsible for the processing of personal data described in this policy.
Plan Organic NL B.V.
Website: planorganic.nl
Email: info@planorganic.nl
Phone: +31 616144135
Chamber of Commerce (KvK) Number: 92283144
Address: Zwaerdercroonstraat 14B, 3021 WS Rotterdam
2. Personal Data We Collect
We process personal data provided directly by you during registration, order processing, inquiry submission, or account usage on planorganic.nl:
- Company & Contact Information: Contact person name, business email address, direct telephone number, company name, Chamber of Commerce (KvK) number, and VAT (BTW) identification number.
- Billing & Delivery Data: Business delivery address, invoicing address, and payment details.
- Account Credentials: Username and encrypted passwords for your planorganic.nl account.
- Communication & Support: Correspondence, inquiry histories, and customer service requests.
- Technical & Usage Data: IP address, browser type, device information, and interaction data collected via essential and analytical cookies.
3. Legal Grounds and Purposes for Processing
We process personal data based on the following legal grounds under Article 6 of the GDPR:
- Performance of a Contract (Art. 6(1)(b) GDPR):Processing, fulfilling, and delivering wholesale orders placed on planorganic.nl.Managing B2B customer accounts, invoicing, and payment verification.Communicating regarding order updates, stock levels, or operational changes.
- Legal Obligation (Art. 6(1)(c) GDPR):Compliance with Dutch tax laws (Rijksbelastingdienst), requiring sales and financial records to be retained for 7 years.Compliance with organic certification tracking and food safety auditing regulations (e.g., Skal certification audits).
- Legitimate Interest (Art. 6(1)(f) GDPR):Conducting direct B2B marketing, product updates, and relevant commercial communications to existing corporate clients.Ensuring the security, integrity, and optimization of the planorganic.nl platform.Fraud prevention and credit risk assessment.
- Consent (Art. 6(1)(a) GDPR):Sending newsletters or direct commercial emails to prospective clients or individuals who explicitly opt in.Placing non-essential analytical or tracking cookies.
4. Data Sharing with Third Parties
We do not sell personal or commercial data. We only share necessary personal data with third-party processors and partners essential for operating our business:
- Logistics & Freight Partners: To deliver bulk orders to designated business addresses.
- Payment Service Providers: To process online transactions securely.
- IT, Hosting & Web Services: Server hosting providers, database managers, and SaaS platforms powering planorganic.nl.
- Financial & Professional Advisors: Accountants, legal counsel, and auditing bodies (including organic certification authorities).
All third-party processors are bound by Data Processing Agreements (DPAs) ensuring strict data protection, security, and confidentiality standard to GDPR compliance.
5. International Transfers
Your data is primarily processed within the European Economic Area (EEA). If data is transferred outside the EEA to third-party tools or service providers, we ensure appropriate safeguards are implemented, such as EU Standard Contractual Clauses (SCCs) or adequacy decisions.
6. Retention Period
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Transactional & Tax Data: Retained for 7 years to comply with Dutch legal tax obligations.
- Account & Customer Records: Retained for the duration of our active commercial relationship plus 2 years following account inactivity.
- Inquiries & Communication: Retained for up to 2 years after final resolution.
- Cookies: Retention periods vary depending on the specific cookie type (see Cookie Policy below).
7. Data Security
Plan Organic NL B.V. implements technical and organizational measures to protect personal data against accidental loss, unauthorized access, alteration, or disclosure. Measures include SSL/TLS encryption across planorganic.nl, secure server infrastructure, restricted staff access controls, and periodic security evaluations.
8. Your Data Protection Rights
Under the GDPR, individuals whose personal data we process have the following rights:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete personal data.
- Right to Erasure ("Right to be Forgotten"): Request deletion of data, provided retaining it is not legally required.
- Right to Restrict or Object: Limit or object to our processing of your data, including opting out of direct B2B marketing communications at any time.
- Right to Data Portability: Receive your data in a structured, commonly used machine-readable format.
To exercise any of these rights, contact us at [Insert Privacy Email]. We will respond within one calendar month. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
9. Cookies
planorganic.nl uses functional cookies necessary for website operation (e.g., keeping cart items saved). Non-essential analytical or marketing cookies are only placed with your prior consent via our cookie consent banner.
10. Amendments
Plan Organic NL B.V. reserves the right to amend this Privacy Policy at any time. The latest version will always be published on planorganic.nl.