XD CONNECT’S PRIVACY AND COOKIE STATEMENT

 

This privacy and cookie statement’s most recent update is 1 October 2025.

 

XD Connects B.V. (hereinafter: XD Connects) highly values the protection of your personal data. We provide a web shop and related services for business customers through our website www.xdconnects.com and process personal data for the purpose of these services. This privacy and cookie statement explains which of your personal data are processed by us and how they are handled.

 

Our privacy and cookie statement in brief

As your privacy is of great relevance to us, we comply with the General Data Protection Regulation (GDPR), which means that we:

• Clearly set down our purposes before we process your personal data through this privacy and cookie statement.
• Store as few personal data as possible and only the data that are necessary for our purposes.
• Explicitly request consent for the processing of your personal data, if consent is required.
• Take any required security measures to protect your personal data. We also impose these obligations on parties that process personal data for us.
• Respect your rights, such as the right to access, rectify or delete your personal data that we have processed.

 

What are the purposes for which we use your personal data?

We obtain various personal data from you. For each purpose, we state which data we obtain from you, for what purpose we process these data and how long we retain them. Please contact us if you have any questions or would like to know exactly what data we keep about you. The contact details are included at the bottom of this privacy and cookie statement.

 

Contact and complaint handling

When you contact us, for example by e-mail, telephone, the chat function or the contact form on our website, this implies that you have accepted our offer to enter into contact with us (legitimate interest and/or performance of the agreement).

 

We process the following personal data for this purpose:

• Name
• Company name and/or other business information (if you contact us business related)
• Contact details (e-mail address and telephone number)
• Any information you enter by yourself in a message

 

We store contact moments together with the personal data you provide in order to properly handle your question or complaint. This information is stored as long as necessary for the contact, and for a maximum of 2 years after the last contact moment. This allows us to make sure that your request or complaint has been handled carefully.

 

Account and ordering procedure

An account can be created on our website, for which you can use your account to place an order. When you place an order with us, you will be providing certain information, which we need to be able to process your order properly (performance of the agreement).

 

We process the following personal data for this purpose:

• Company name
• Username
• First and last name
• (Delivery) address details
• Contact details (e-mail address and telephone number)
• Payment details
• Invoice details
• Account details
• IP address
• Other information relevant to the agreement

 

We retain these personal data for up to two years after you last logged into your account or two years after placing your last order. We retain some data longer if this is mandatory for us by law (for example, due to the seven-year tax retention obligation).

 

Visits to our offices

Personal data will be registered when you visit one of our offices (performance of the agreement and/or legitimate interest).

 

We process the following personal data for this purpose:

• Company name
• First and last name
• Contact details (e-mail address and telephone number)
• Appointment details
• Check-in and check-out times

 

These personal data will be stored in the calendar for up to two years. We retain some personal data longer if this is mandatory for us by law (for example, due to the seven-year tax retention obligation).

 

Newsletters

You are welcome to sign up for the XD Connects newsletter (consent) through our website. We disseminate a monthly newsletter by email, which keeps you informed about our products and services. We can moreover send you personalised messages based on your account, if you wish.

 

We process the following personal data for this purpose:

• First and last name
• Email address

 

We will retain your personal data as long as you are subscribed to our newsletter. If you no longer wish to receive the newsletter, you can unsubscribe at any time using the unsubscribe link at the bottom of each newsletter or by sending an email to the contact details listed at the bottom of this privacy and cookie statement.

 

Surveys    

You have the option of completing a survey about our services, which input we use to improve our services.

 

We have a commercial interest in improving our services, pursuant to which we process your data (legitimate interest). Our commercial interest prevails over your privacy interest, as you decide for yourself whether you want to complete a survey and what information you provide. Completion of a survey is therefore not mandatory in order to order products from the online shop.

 

We process the following personal data for this purpose:

• Company name
• First and last name
• Contact details (e-mail address)
• Contents of the survey

 

We store these data for up to 2 years after you have completed the survey or until your consent has been withdrawn.

 

Our suppliers

We purchase our products from various suppliers, for which we require various data (performance of the agreement).

 

We process the following personal data for this purpose:

• Company name
• Business address
• Contact person’s name
• Contact details (e-mail address and telephone number)
• Financial details
• Any other information you share with us

 

We retain these personal data for the agreed contract period. We retain some data longer if this is mandatory for us by law  (e.g. due to the 7-year tax retention obligation).

 

Working at XD Connects

If you responded to one of our job vacancies or submitted an open application, we will process your personal data in order to consider your application and prepare for the possible conclusion of an employment contract. Only authorised HR staff and/or staff involved in the job interview will have access to your data. As a rule, personal data are only stored for the purpose of filling the vacancy for which you have applied.

 

We process the following personal data for this purpose:

• First and last name
• Address details (address, house number and postcode)
• Contact details (e-mail address and telephone number)
• Availability date
• Contents of the Curriculum Vitae
• Contents of the cover letter
• LinkedIn profile (optional)
• How you found us
• Salary indication
• References
• Any other information comprising personal data that you have included with your application

 

We will retain your application details up to six weeks after the position has been filled. We will retain this information to enable us to contact you if the position becomes available again during the probationary period. If we are unable to offer you a position at this time, we may (with your consent) retain your application details for one year after the position was filled. You can withdraw your consent at any time by sending us an email to the contact details included at the bottom of this privacy and cookie statement.

 

A social media and internet search may be part of the application procedure. This is to ensure that our image will be maintained when hiring new staff and we  therefore do this on the basis of our legitimate interest. We will search for your name on Google and look at any profiles on various social media platforms to the extent that these profiles are public; we will not ask you to grant us access to a private social media page or to connect with us. The results of the research will be discussed with you. If you object to this, please let us know at the time of your application.

 

Talent pool

We use a talent pool: a group of interesting candidates for future internal or external vacancies, including apprenticeships and internships. If you sign up for this, we may contact you about positions that could match your profile. We process these personal data on the basis of your consent. You can easily unsubscribe from the talent pool at any time. In some cases, we process limited personal data based on our legitimate interest in order to fill future vacancies quickly. Hereto, we carefully consider our interest against your privacy interests.

 

We process the following personal data for this purpose:

• First and last name
• Address details (address, house number and postcode)
• Contact details (e-mail address and telephone number)
• Availability date
• Curriculum Vitae
• Cover letter
• LinkedIn profile (optional)
• How you found us
• Salary indication
• References
• Any other information comprising personal data that you have included with your application

 

We will retain your personal data as long as you are part of the talent pool, up to 12 months, or until your consent is withdrawn.

 

 

When can we share your personal data with third parties?

XD Connects will only share your data with third parties if so permitted under current legislation. We may provide your personal data to third parties because:

• We have engaged them to process certain data;
• We have a legal basis for doing so;
• We have a legal obligation to do so (for example, at the request of the tax authorities, the public prosecutor’s office and/or the police).

 

The parties that process personal data on our behalf or on your behalf are:

 

IT suppliers and service providers	Netherlands/EEA/US	Data hosting, application management, support and maintenance
Telecom suppliers	Netherlands	Provision of telephony and communication services
Payment service providers and collection agencies	Netherlands/EEA	Handling payments and debt collection procedures
Shipping and delivery services	Netherlands/EEA	Shipping orders or documents
Marketing companies	Netherlands/EEA	Sending marketing messages and conducting marketing campaigns
Review parties	EEA/US	Enabling customers to post product or service reviews
Partners and group companies (sister and subsidiary companies)	Netherlands/EEA/US	Cooperation for the purpose of our services
External consultants and intermediaries	Netherlands/EEA	Advice, agency or specialist support
Government services (including the Tax Authorities and local authorities)	The Netherlands	Legal obligations such as tax returns, reporting requirements and supervision

 

 

International transfer of personal data

We process your personal data within the European Economic Area (EEA) as a rule. We only transfer personal data to recipients outside the EEA if necessary for our services or business operations. If that is the case, we take appropriate safeguards to protect your privacy.

 

The European Commission has adopted an adequacy decision for 15 countries. Based on an adequacy decision, personal data can be transferred securely from the EEA to companies in any of those 15 countries without the need for additional data protection safeguards.

 

If we share data with companies in other countries without an adequacy decision (or US companies that are not covered by the EU-US Data Privacy Framework), we take additional protective measures under the name of appropriate safeguards. This means that we take additional action to protect your personal data. In such cases, we use standard contractual clauses (“SCCs”).

 

When we transfer your personal data to parties outside the EEA on the basis of SCCs, you shall have the following rights:

• You can request information about the transfer, including a copy of the SCCs (in which confidential business information may be anonymised).
• You can contact us to exercise your privacy rights or ask questions about international transfers.
• You have the right to lodge a complaint with the receiving party, the Data Protection Authority or to initiate legal proceedings before a competent court in the EEA.
• If your rights have been violated, you may claim compensation in accordance with Article 82 of the GDPR.

 

These rights are effective besides your general privacy rights under the GDPR.

 

Social media buttons

We use social media buttons on our website, which redirect you to the relevant social media platforms. This gives you the option to follow us and share content within the network. You will also see advertisements on your social media page. The buttons are effective through pieces of code that originate from the social media networks. If you should want to know what the social media platforms do with your personal data, please read the relevant privacy statement:

 

• Facebook (privacy statement)
• Instagram (privacy statement)
• LinkedIn (privacy statement)
• Pinterest (privacy statement)
• Vimeo (privacy statement)
• YouTube (privacy statement)

 

 

Cookies

We use cookies on our website. Cookies are information files that are placed on your device (such as a PC, tablet or smartphone) or read by your browser when you visit our website.

 

We use our own cookies and those of third parties for various purposes. Some cookies are necessary for website performance, while others are only used with your consent.

 

We display a cookie banner when you visit our website for the first time. Here you can indicate whether and for which type of cookies you give your consent. You can still use our website if you do not give your consent for certain cookies: only the necessary cookies will then be placed. You can always change or withdraw your cookie preferences using the icon at the bottom left of each page.

 

The following cookies are used:

 

Essential cookies

These cookies are essential for the website to perform properly. Without these cookies, the website will not perform as required. These cookies ensure, for example, that:

• your login details will be remembered
• products in your shopping basket will be tracked
• the website will be effectively displayed on your screen

 

No consent is required for these cookies. They do not collect personal data unless strictly necessary for the requested service (e.g. login functionality).

 

Preference cookies

Preference cookies remember settings and choices you make on our website. Although these cookies improve your user experience, they are not necessary for website performance. For example, preference cookies ensure that:

• your language preferences is stored
• the region where you are located is recorded

 

We ask your consent for these cookies. Without your consent, these cookies will not be placed.

 

Statistical cookies 

We use statistical cookies to collect information about the use of our website. This helps us make the website more user-friendly and tailor it to visitors. These cookies provide information about, for example:

• the number of visitors
• the pages that are visited most frequently
• the average duration of a visit
• the devices and browsers used

 

We process these data anonymously as much as possible. If personal data is processed, we will ask for your consent.

 

Marketing cookies

Marketing cookies are used to track your browsing behaviour across multiple websites. Based on this, advertisements can be displayed that are more relevant to your interests.

 

These cookies may collect the following data from you, among other things:

• Name
• Login information
• Screen display options
• IP address
• Cookie ID
• Website and click behaviour
• Referrer URL
• Behaviour within the application

 

We will request your consent for these cookies. These cookies will not be placed without your consent.

 

Deleting cookies

Most cookies have an expiry date. If an expiry date has been set, the cookie will be automatically deleted when the expiry date passes. Or you may choose to delete cookies manually before the expiry date has passed. Please consult your browser’s manual for this. Below you will find a link to the website of common browsers, which describes step by step how you can block or delete cookies.

 

• Google Chrome
• Firefox
• Edge
• Safari

 

Enabling and disabling cookies

A setting can be made in your web browser to make sure that cookies are only accepted if you agree to this. For more information, please consult your browser’s manual. Please note: many websites do not perform effectively if cookies are disabled.

 

How is your personal data protected?

The security of personal data is essential to us. We therefore take appropriate technical and organisational measures with regard to the processing of personal data, against loss or any form of unlawful processing (such as unauthorised access, damage, alteration or disclosure of personal data). We continuously adapt our security measures and pay close attention to anything that could go wrong.

 

We take security measures including the following:

• Encryption of digital files
• Security of network connections using Transport Layer Security (TLS) technology
• Secure backup environment for recovery in the event of physical or technical incidents
• Regular testing and evaluation of our security measures
• Maintaining confidentiality of personal data is imposed on all persons who work with us
• Only authorised persons have access to our laptops and systems, using passwords
• Physical access security measures, including access chips in our office building

 

What privacy rights do you have?

• Right of access: you have the right to access the personal data we process about you.
• Right to rectification: you have the right to rectify or supplement the personal data we process about you if it is inaccurate or incomplete.
• Right to object: you may object to the processing of your personal data, including direct marketing.
• Right to erasure: you can request us to erase your personal data.
• Right to withdraw your consent: if you have given us consent to process personal data, you can withdraw your consent at any time.
• Right to data portability: if technically possible, you have the right to have the personal data we process  about you transferred to a third party.
• Right to restriction of processing: in some cases, you may request us to restrict the processing of your personal data (temporarily or otherwise).

 

When you make any such request, we may ask you to identify yourself. We do this to verify that you are indeed the person to whom the personal data is related. In principle, we will comply with your request within 30 days. However, this period may be extended for reasons related to specific privacy rights or the complexity of the request. If we extend this period, we will notify you in a timely manner.

 

The rights mentioned above are not unlimited. In some cases, XD Connects may reject a request in whole or in part. In such cases, we will inform you of the reasons why the request cannot be granted or cannot be granted in full. This is the case, for example, when:

• It is mandatory for us by law to retain certain personal data, such as payroll records (7-year tax retention obligation);
• The interest of protecting the rights and freedoms of others overrides your request;
• The request is manifestly unfounded or excessive (e.g. in the case of repeated, unreasonable requests).

 

If you wish to exercise any of your rights, please let us know at gdpr@xdconnects.com.

 

Changes to the privacy and cookie statement

If our services change, we may also need to amend the privacy and cookie statement. We recommend that you check this statement regularly.

 

 

Questions or complaints

If you have any questions or wish to submit a complaint about the processing of your personal data, please send an email togdpr@xdconnects.com. We will handle every question and complaint within our organisation and keep you updated about the outcome. If you believe that we have not helped you properly, you have the right to lodge a complaint with the Data Protection Authority (or, if you live or are based outside the Netherlands, with another competent supervisory authority within the European Union).

 

Contact details

XD Connects B.V.

Lange Kleiweg 6-28

2288 GK Rijswijk, Netherlands

 

Email address: gdpr@xdconnects.com

Telephone: +31 (0) 70 319 99 00

 

Chamber of Commerce number: 27115697