Privacy Policy

At Tip Top Systemen B.V., we attach great importance to the protection of your personal data. This privacy policy explains how we collect, use, store and protect your data in accordance with the General Data Protection Regulation (GDPR) and the Dutch GDPR Implementation Act.

1. Data Controller

Tip Top Systemen B.V. is the data controller for the processing of personal data as described in this privacy policy.

• Company: Tip Top Systemen B.V.
• Address: Robert Peereboomweg 18 E10, 2031 BC Haarlem
• Chamber of Commerce: 70863636
• Email: [email protected]
• Phone: +31 636 009 252

2. What Data Do We Collect?

2.1 Data You Provide Directly

• Name, email address, phone number and address details (when ordering or registering an account)
• Company name and VAT number (for business orders)
• Payment details (processed by our payment provider and not stored by us)
• Communication content (when contacting us via email, phone or contact form)
• Account details (username, password in hashed form)

2.2 Data Collected Automatically

• IP address and browser data
• Device information (type, operating system, screen resolution)
• Browsing behavior on our website (pages visited, clicks, session duration)
• Referral source (how you arrived at our website)
• Cookie data (see our Cookie Policy)

3. Purposes of Processing

We process your personal data for the following purposes:

4. Retention Periods

We do not retain your data longer than necessary:

• Order data: 7 years (statutory retention for fiscal administration)
• Account data: As long as your account is active, plus 12 months after deletion
• Newsletter data: Until you unsubscribe
• Analytics data: Maximum 26 months
• Communication history: Maximum 24 months after last contact

5. Sharing with Third Parties

We only share your data with third parties when necessary for our services or when legally required:

• Payment processors: For secure payment processing
• Shipping and logistics partners: For delivering your order
• IT service providers: For hosting and technical maintenance
• Government authorities: When legally required

We have concluded data processing agreements with all processors that comply with GDPR requirements. We never sell your personal data to third parties.

6. Transfers Outside the EEA

Some of our service providers are located outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards, such as the EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs), to guarantee an adequate level of protection.

7. Your Rights

Under the GDPR, you have the following rights:

• Right of access: You can request which data we process about you
• Right to rectification: You can have incorrect data corrected
• Right to erasure: You can request your data to be deleted
• Right to restriction: You can restrict the processing of your data
• Right to data portability: You can receive your data in a structured format
• Right to object: You can object to processing based on legitimate interest
• Right to withdraw consent: Previously given consent can be withdrawn at any time

Send your request to [email protected]. We will respond within 30 days. You also have the right to file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

8. Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, modification, disclosure or destruction. This includes SSL/TLS encryption, access restrictions, regular security audits and encryption of sensitive data.

9. Artificial Intelligence (AI)

Our website uses AI systems to support customer service. Specifically, we use an AI chatbot that can help you with questions about products, orders and shipping.

• Chat messages are processed to generate relevant answers
• Conversations may be temporarily stored for quality improvement
• The AI does not make automated decisions with legal effects for you
• You can always request human contact instead of the AI chatbot

For full information about our AI usage, see our AI Transparency page, drafted in accordance with the European AI Act.

10. Changes to This Policy

We reserve the right to modify this privacy policy. In the event of significant changes, we will inform you by email or a notification on our website. We recommend that you review this policy regularly.