Privacy Policy & Information Governance

1. Data Controller Identification

The data controller responsible for the processing of personal data on this website is:

Sortbench Tonic Trailies Operations B.V.
Company Registration (Chamber of Commerce / KvK): 84920194
VAT ID: NL-84920194B01
Registered Office: Keizersgracht 482, 1016 GD Amsterdam, Netherlands
Contact Email: [email protected]

2. Categories of Information Collected

We believe in strict data minimization. We only collect personal information when you voluntarily submit it to us, or through automated server interactions necessary for the delivery of web assets.

A. Contact Form Data

When you complete an operational inquiry through our contact form, we collect your full name, business email address, company name, primary operating region, fleet size category, and the contents of your message. We process this information exclusively under Article 6(1)(b) of the GDPR (performance of pre-contractual measures) and Article 6(1)(f) (legitimate interests in answering business-to-business operational inquiries).

B. Technical Server Logging

When you access our static website, our hosting infrastructure records standard HTTP server request logs. These logs include your public IP address (anonymized at the subnet level where technically possible), browser user agent string, requested URI path, timestamp of access, and HTTP response code. These logs are processed under Article 6(1)(f) of the GDPR to maintain network security, diagnose routing faults, and defend against denial-of-service attempts.

3. Cookies and Local Browser Storage

We do not embed third-party advertising cookies, retargeting pixels, or behavioral cross-site trackers. Our site utilizes HTML5 Local Storage (localStorage) to maintain your explicit interface preferences, including:

• cookie_consent_status: Records whether you accepted, rejected, or customized storage settings.
• maintenance_checklist_state: Saves the checked/unchecked state of items in our depot maintenance tool so you can resume your audit without losing progress.

Because localStorage is executed entirely inside your client browser, this state data is not transmitted back to our web server on subsequent HTTP requests. You can inspect or clear these values at any time using your browser developer settings.

4. Third-Party Data Processors

We do not sell, rent, or monetize your contact information. We engage only reputable European infrastructure and email routing providers bound by stringent Data Processing Agreements (DPAs) compliant with Article 28 of the GDPR. Where data is processed, it remains within the European Economic Area (EEA) under European data sovereignty regulations.

5. Data Retention Horizons

Contact form inquiries and associated operational correspondence are retained in our active customer relationship ledger for a maximum period of twenty-four (24) months from the date of last contact, after which records are permanently expunged unless a commercial service contract has been formally executed. Server connection logs are automatically purged on a rolling fourteen (14) day cycle.

6. Your Rights Under European Law (GDPR)

Under Chapter III of the GDPR (and comparable regulations such as CCPA/CPRA where applicable), you possess well-defined statutory rights regarding your personal data:

• Right of Access (Art. 15): You have the right to obtain confirmation as to whether personal data concerning you is processed and request a structured copy.
• Right to Rectification (Art. 16): You may request immediate correction of inaccurate or incomplete contact records.
• Right to Erasure (Art. 17): Commonly known as the right to be forgotten; you can demand the permanent deletion of your inquiry dossier.
• Right to Restriction of Processing (Art. 18): You can request that we freeze processing under specific disputed circumstances.
• Right to Data Portability (Art. 20): You may request your submitted business data in a structured, machine-readable format.
• Right to Object (Art. 21): You may object at any time to the processing of personal data based on legitimate interests.

To exercise any of these rights, transmit a written request to our Data Protection Officer at [email protected]. We respond to all verified statutory requests within thirty (30) calendar days without charge.

7. Supervisory Authority Oversight

If you believe that our processing of your personal data infringes applicable data protection statutes, you retain the right to lodge a formal complaint with the competent supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority), located at Bezuidenhoutseweg 30, 2594 AV The Hague.