Privacy Policy

lowbacetkc B.V. ("we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us.

Data Controller

lowbacetkc B.V. is the data controller responsible for your personal data. Our registered office is located at Nieuwstraat 64, 4848 TP Breda, North Brabant, Netherlands. Our company registration number is B69232563, and our VAT number is NL45963252B02.

Data Collection

The data we collect includes personal information such as your name, email address, phone number, and any other information you voluntarily provide when contacting us, placing orders, or subscribing to our newsletter. We also collect technical information such as your IP address, browser type, and website usage patterns through cookies and similar technologies.

Information We Collect Automatically

• IP address and location information
• Browser type and version
• Operating system
• Pages visited and time spent on our website
• Referring website addresses
• Device information and screen resolution

Information You Provide

• Contact information (name, email, phone number)
• Communication preferences
• Messages and inquiries sent through our contact forms
• Newsletter subscription preferences
• Order information and preferences

How We Use Your Information

We explain how we use your information to provide and improve our services, communicate with you, and fulfil our legal obligations. The use of your data is always based on a valid legal basis as required by GDPR.

Legal Basis for Processing

• Legitimate Interest: To operate our business, improve our services, and communicate about our products
• Consent: For marketing communications and non-essential cookies
• Contract Performance: To process orders and provide customer service
• Legal Obligation: To comply with tax, accounting, and other legal requirements

Purposes of Data Processing

• Processing and fulfilling coffee orders
• Providing customer support and responding to inquiries
• Sending newsletters and marketing communications (with consent)
• Improving our website and services
• Complying with legal and regulatory requirements
• Preventing fraud and ensuring security

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy or as required by law. Customer information is typically retained for 7 years for tax and accounting purposes. Marketing consent and newsletter subscriptions are retained until you withdraw consent. Website analytics data is retained for 26 months.

Data Sharing and Disclosure

lowbacetkc does not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• With service providers who assist in operating our website and business
• When required by law or to protect our rights and safety
• In connection with a business transfer or merger
• With your explicit consent

Your Rights

Under GDPR, you have several rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data under certain circumstances
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for marketing communications

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyse website traffic. For detailed information about our cookie usage, please refer to our Cookie Policy.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption, secure data transmission, regular security assessments, and staff training on data protection.

International Data Transfers

Your data is primarily processed within the European Union. If we need to transfer data outside the EU, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission.

Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Last Updated" date.

Contact Information

If you have any questions about this Privacy Policy, want to exercise your rights, or have concerns about how we handle your personal data, please contact us:

Supervisory Authority

If you believe we have not handled your personal data in accordance with this policy or applicable law, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):