Privacy statement
We're open about what data we collect, why we use it and which rights you have.
This is a courtesy translation. The Dutch version is legally authoritative.
1. Who processes your data
Catalina Trading VOF, trading as Catalina Group, is the data controller under the General Data Protection Regulation (GDPR).
Our contact details for privacy matters are listed at the bottom of this page.
2. Which personal data we process
We only process data you provide to us, plus a limited set of technical data needed to keep the site running.
Through the contact form we process: your name, email address, phone number, optional company name, the selected service and the content of your message.
Through your use of the website we process: IP address and standard server logs (handled by our hosting provider), and, only with your consent, anonymised visitor statistics (see the cookie statement).
3. Purposes and lawful bases
Contact form data is used to respond to your enquiry. Lawful basis: performance of a precontractual or contractual agreement (GDPR art. 6(1)(b)).
Server logs are used to prevent abuse and outages. Lawful basis: legitimate interest (GDPR art. 6(1)(f)).
Analytics cookies are used to improve the site. Lawful basis: your consent (GDPR art. 6(1)(a)).
4. Retention periods
Contact enquiries are retained for up to 24 months after the last contact moment, unless an engagement is signed. In that case we retain data as long as required for administrative or fiscal purposes (up to 7 years for the Dutch tax authority).
Server logs are rotated and deleted automatically within 30 days.
Analytics data is processed in anonymised form and retained no longer than 14 months.
5. Processors and third parties
We use a limited number of trusted processors to operate the site and email communication. With each we have a data processing agreement in place.
Vercel Inc., hosting and (after consent) anonymised analytics.
Scaleway SAS, processes contact form content to deliver emails.
We don't sell your data and we don't share it with third parties for commercial purposes.
6. Transfers outside the EEA
Vercel may process data on servers in the United States. Those transfers are made under the EU Standard Contractual Clauses and, where applicable, the EU/US Data Privacy Framework.
Scaleway is a European company and processes data within the EU.
7. Security
We take appropriate technical and organisational measures to protect your data. The site runs on HTTPS, form submissions are transmitted encrypted, and only Liam and David have access to incoming messages.
Should an incident occur, we report data breaches to the Dutch DPA within 72 hours and, where required, to the affected individuals.
8. Your rights
You have the right to access, rectify or erase your personal data. You also have the right to restrict or object to processing and the right to data portability.
To exercise any of these rights, email administratie@catalinatrading.nl. To prevent misuse we may ask you to verify your identity. We respond within four weeks.
You also always have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl.
9. Cookies
This site only sets cookies and similar technologies after your consent, except for strictly necessary functionality. See the cookie statement for details and to change your preference.
10. Changes
We may update this statement from time to time. The most current version is always on this page; the date of last revision is shown at the top.
11. Contact
Questions about privacy or a rights request? Email administratie@catalinatrading.nl or write to Catalina Trading VOF, Jan van Foreeststraat 32, 3521 TX Utrecht, the Netherlands.