Legal
Privacy Notice
Last updated: 27 May 2026.
This Privacy Notice explains how Bizon Agro B.V. (“Bizon Agro”, “we”, “us”) collects and uses personal data when you visit bizonagro.nl or contact us through the website. We are committed to processing your personal data in accordance with the EU General Data Protection Regulation 2016/679 (GDPR) and the Dutch GDPR Implementation Act (UAVG).
1. Who is the controller?
The data controller for the processing described in this notice is:
- Bizon Agro B.V. (a Dutch private company with limited liability, in incorporation)
- Registered office: Staverdenplein 23, 1107 LE, Amsterdam, the Netherlands
- Chamber of Commerce (KVK) number: 42068935
- VAT (BTW) number: NL869564389B01
- General contact: info@bizonagro.eu
Privacy contact: For any question about this notice or about your personal data, write to g.buza@bizonagro.eu with the subject line “Privacy request”. We are not required to appoint a Data Protection Officer under Article 37 GDPR; the privacy contact above is your single point of contact for privacy matters.
2. What personal data do we collect?
We only collect personal data that you actively provide to us. We do not collect data passively (we do not run analytics, advertising trackers, or social-media pixels).
A. Through the contact form on bizonagro.nl, we collect:
- Your name;
- Your company name;
- Your email address;
- The content of your message.
B. Through direct correspondence by email (for example, if you write to info@bizonagro.eu or g.buza@bizonagro.eu), we receive whatever personal data you choose to include — typically the same categories as above, plus any further information you share in our exchange.
C. Technical data automatically transmitted by your browser when you visit any website (for example, your IP address). On our site this data is processed only as a transient step in delivering the page to your device and for basic security; it is not used for analytics or profiling.
Special-category data (Article 9 GDPR). We do not knowingly collect special-category personal data (e.g. health, religion, political opinion, biometric data). Please do not include such data in your message.
3. Why do we use your personal data, and on what legal basis?
Purpose 1 — Responding to your enquiry and assessing a potential business relationship.
- Legal basis: Article 6(1)(b) GDPR — performance of a contract or pre-contractual steps taken at your request; and, in parallel, Article 6(1)(f) GDPR — our legitimate interest in operating a B2B commercial enquiry channel and following up on opportunities, balanced against your rights and freedoms.
Purpose 2 — Maintaining records and complying with legal obligations.
- Legal basis: Article 6(1)(c) GDPR — compliance with a legal obligation to which we are subject (in particular Dutch commercial and tax record-keeping obligations under Article 2:10 of the Dutch Civil Code and Article 52 of the Algemene wet inzake rijksbelastingen).
Purpose 3 — Defending legal claims, where this becomes necessary.
- Legal basis: Article 6(1)(f) GDPR — our legitimate interest in establishing, exercising or defending legal claims.
Why we do not ask for your consent. We do not rely on consent (Article 6(1)(a) GDPR) for the processing described above. Consent would not be “freely given” within the meaning of Article 4(11) GDPR because we need your contact details and message in order to respond to you; using consent here would be misleading. If we later launch a separate processing activity for which consent is the correct basis (for example, an email newsletter), we will collect a separate, granular consent for that activity.
4. Who has access to your personal data?
Within Bizon Agro, your personal data is accessible only to the Managing Director and to staff or contractors who need it to respond to your enquiry. We do not sell personal data, and we do not share it with third parties for their own marketing.
We use the following processors, who act on our instructions under a written data processing agreement as required by Article 28 GDPR:
| Processor | Role | Location | Transfer basis |
|---|---|---|---|
| Netlify, Inc. | Hosts the static website and receives contact-form submissions (“Netlify Forms”). | United States | EU-US Data Privacy Framework (Article 45 GDPR adequacy decision), supplemented by EU Standard Contractual Clauses (Article 46(2)(c) GDPR) where applicable. |
| Google Ireland Ltd / Google LLC (Google Workspace) | Provides our business email (info@bizonagro.eu, g.buza@bizonagro.eu) and associated productivity services. | EU and United States | EU-US Data Privacy Framework (Article 45 GDPR adequacy decision), supplemented by EU Standard Contractual Clauses (Article 46(2)(c) GDPR) for non-EU transfers. |
We may also share your personal data with professional advisers (accountant, legal counsel) when strictly necessary, and with competent authorities where we are required to do so by law.
5. Transfers of personal data outside the European Economic Area
Some of our processors are located in the United States. We rely primarily on the EU-US Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795) as our transfer mechanism under Article 45 GDPR. Where the processor is not certified under the framework, or for parts of the processing not covered by it, we rely on the European Commission’s Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914) under Article 46(2)(c) GDPR, together with any supplementary measures required by the relevant case law.
You can request a copy of the safeguards in place by emailing g.buza@bizonagro.eu.
6. How long do we keep your personal data?
- Contact-form submissions and email enquiries that do not lead to a business relationship: retained for a maximum of 24 months from the date of last meaningful contact, after which they are deleted or anonymised.
- Records that form part of a commercial transaction or accounting record: retained for 7 years from the end of the relevant financial year, in accordance with Article 2:10 of the Dutch Civil Code and Article 52(4) of the Algemene wet inzake rijksbelastingen.
- Data needed to establish, exercise or defend legal claims: retained for the duration of the applicable statutory limitation period, generally up to 5 years under Article 3:307 of the Dutch Civil Code (or longer where a specific longer period applies).
7. Your rights
Under Articles 15 to 22 GDPR you have the right to:
- request access to the personal data we hold about you (Article 15);
- request rectification of inaccurate or incomplete data (Article 16);
- request erasure of your data (“right to be forgotten”) where one of the grounds in Article 17 applies;
- request restriction of processing in the situations listed in Article 18;
- receive your data in a structured, commonly used, machine-readable format and to transmit it to another controller (data portability, Article 20), where the processing is based on Article 6(1)(b) and is carried out by automated means;
- object to processing based on our legitimate interests under Article 6(1)(f), including profiling (Article 21);
- not be subject to a decision based solely on automated processing that produces legal or similarly significant effects (Article 22) — we do not carry out such automated decision-making.
To exercise any of these rights, write to g.buza@bizonagro.eu. We will respond within one month, as required by Article 12(3) GDPR. We may ask you for information necessary to confirm your identity before acting on the request.
Right to complain to the supervisory authority. You have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (AP), Postbus 93374, 2509 AJ Den Haag, autoriteitpersoonsgegevens.nl. You may also complain to the supervisory authority of your habitual residence, place of work, or place of the alleged infringement.
8. Cookies and similar technologies
Our website uses only strictly-necessary technical mechanisms required to deliver the site and process your contact-form submission (for example, anti-spam protection on the form). These do not require your consent under Article 11.7a, paragraph 3, of the Dutch Telecommunicatiewet.
We do not use analytics cookies, advertising cookies, social-media pixels or any other tracking technologies. We do not load third-party fonts, embedded videos or social widgets that would set cookies on your device.
If we change this in the future and add any non-essential cookies, we will first present you with a consent banner and will not place such cookies before you have agreed.
9. Security
We apply technical and organisational measures appropriate to the risk, as required by Article 32 GDPR, including access controls on our email and hosting environments, two-factor authentication on administrator accounts, and processor agreements that require equivalent safeguards from our service providers.
10. Children
Our website and services are aimed exclusively at business contacts and not at children. We do not knowingly process personal data of persons under the age of 16.
11. Changes to this notice
We may update this notice from time to time. The current version is identified by the “Last updated” date at the top. Material changes will be communicated through a prominent notice on bizonagro.nl. We recommend that you review this notice periodically.
12. Provision of personal data is voluntary
Providing your personal data through the contact form is voluntary. If you choose not to provide it, we will simply not be able to respond to an enquiry submitted through the form. There is no statutory or contractual requirement to provide the data; the only consequence of not providing it is that the form cannot be sent.