Privacy Policy

01Who is responsible

The controller for personal data processed on this website is Urban Ponics B.V., Sint Jansweg 15, 5928 RC Venlo, The Netherlands (Chamber of Commerce 64289400). For any data-protection question, or to exercise the rights listed below, write to info@urbanponics.nl. We are not required to appoint a Data Protection Officer and have not done so.

02What this policy covers

This website (urbanponics.nl), the enquiry forms on it, and the e-mails we send in reply. It explains what we collect, why, on what legal basis, who else handles it, and how long we keep it.

03When you simply read the site

Our hosting provider records a server log entry for each request: your IP address, the time, the page requested, the referring page and your browser user agent. This is necessary to serve the site and to detect abuse — legal basis Article 6(1)(f), our legitimate interest in a working, secure website. We do not use these logs to build a profile of you.

No analytics runs and no optional storage is written until you choose it in the cookie banner. If you choose nothing, nothing optional loads.

04When you send an enquiry

The enquiry forms ask for your name and e-mail, and optionally a phone number and a message. We also record which page you sent it from, so we know what you were reading. We use this to answer you and to prepare the information you asked for — Article 6(1)(b), steps before a contract, and 6(1)(f) for our interest in responding to business enquiries. Submitting a form also triggers an automatic reply containing the crop catalogue and the savings-model one-pager.

05Embedded video

Some films are hosted on Vimeo (Vimeo.com, Inc., United States). A Vimeo player is only loaded if you allow it — either by accepting “Marketing & embedded video” in the cookie banner, or by clicking to load a particular film. Until then we show a still image and send nothing to Vimeo. When a player does load, Vimeo receives your IP address and browser information. We request Vimeo’s Do Not Track mode, which suppresses its own analytics. Transfers to the United States rely on the EU–US Data Privacy Framework and, where applicable, Standard Contractual Clauses.

06Analytics

We use Google Analytics (Google Ireland Limited) through Google Consent Mode, and it runs only if you accept analytics in the cookie banner. Nothing loads and nothing is written to your device before you choose. Legal basis: your consent, Article 6(1)(a), which you can withdraw at any time from “Cookie settings” in the footer, with immediate effect.

07Who processes data on our behalf

Hostinger (application hosting, and the outgoing mail server that sends our replies) — EU. Cloudflare (content delivery and protection against attacks, including Turnstile, which checks that an enquiry comes from a person and not a bot; it reads technical signals from your browser and sets no advertising cookies); Cloudflare sets strictly necessary cookies such as __cf_bm to distinguish people from bots. Vimeo (video hosting) — United States, and only once you allow it. Google (analytics) — only once you allow it.

Each of these acts on our instructions under a data-processing agreement. We do not sell personal data and we do not share it for anyone else’s marketing.

08How long we keep things

Server logs: up to 30 days. Enquiries and the contact details in them: this website keeps no database, so your enquiry reaches us only as an e-mail in our own mailbox. We keep it up to 24 months after our last contact, so we can pick up a conversation where it left off, unless you ask us to delete it sooner. Anything that becomes part of a signed contract is kept for as long as Dutch commercial and tax law requires, normally seven years.

09Your rights

You can ask for a copy of your data (Article 15), correction (16), deletion (17), restriction (18), portability (20), and you can object to processing based on our legitimate interests (21). Where we rely on consent, you can withdraw it at any time without affecting what was lawful before. Write to info@urbanponics.nl; we answer within one month. If you are not satisfied, you can complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or to the authority where you live.

10Security

Traffic is encrypted in transit (TLS). This website has no database, no visitor accounts and no administrative login, so there is nothing stored here to break into. Your enquiry exists only as an e-mail in our mailbox, which is reached over an authenticated, encrypted connection and is available to named Urban Ponics staff.

11Children

This is a business-to-business website and is not directed at children. We do not knowingly collect data from anyone under 16.

12Changes

If we change how we handle personal data we update this page and, where the change affects what you consented to, ask again through the cookie banner.