Privacy policy

Wisman Group (Ernst Technische Handelsonderneming B.V.), De Vente 10, 7261 ST Ruurlo (Netherlands), is the controller for data collected through this website.

Privacy questions can be sent to sales@wisman-group.com. We have not appointed a data protection officer; your request goes straight to management.

We only collect data you provide yourself or that is technically required to run the webshop.

• Contact and quotation forms: name, company name, email address, phone number, country, VAT number and the content of your message.
• Account: sign-in details, role within the company account, billing and delivery addresses and your language preference.
• Orders: selected articles, quantities, PO reference, order history, invoices and payment status.
• Payments: payment status and transaction reference via our payment provider. We never see or store full card details.
• Technical: IP address, browser type and pages visited, solely for security and correct operation of the webshop.

• Preparing quotations, processing orders and delivering articles.
• Technical advice, customer service and warranty and returns handling.
• Invoicing, credit assessment of company accounts and fraud prevention.
• Sending transactional email: account confirmation, order confirmation, shipping and tracking updates.
• Complying with legal obligations such as statutory retention of financial records.

Performance of a contract: everything needed for quotation, order, delivery and invoicing.

Legal obligation: bookkeeping, VAT returns and statutory retention.

Legitimate interest: securing the webshop, preventing fraud and business communication with existing customers.

Consent: only when you explicitly sign up for a newsletter or other optional communication. You can withdraw consent at any time.

• Order, invoice and VAT data: seven years, as required by Dutch tax law.
• Quotation and contact requests: a maximum of 24 months after the last contact.
• Account data: as long as the account is active, then twelve months before deletion.
• Technical log files: a maximum of twelve months.

We only share data with parties needed to fulfil your order, and record this in data processing agreements.

• Carriers and parcel services, for delivery and tracking information.
• Suppliers in case of direct shipments from the factory.
• Our payment provider, hosting and IT partners and email service provider.
• Our accountant and, where necessary, a debt collection partner or supervisory authority.

Our systems run within the European Economic Area as a rule. Where a provider does process data outside the EEA, this is based on the European Commission's standard contractual clauses or an adequacy decision.

The webshop runs entirely over an encrypted connection (TLS). Passwords are stored hashed and accounts can be protected with two-factor authentication.

Access to customer data is limited to staff who need it for their work. In the event of a data breach with risk, we notify the Dutch Data Protection Authority within 72 hours and you where required.

You have the right to access, rectify, erase, restrict and transfer your data, and to object to processing.

Send your request to sales@wisman-group.com. We respond within 30 days and may ask for additional identification. You may also file a complaint with the Dutch Data Protection Authority.

We may update this privacy policy when legislation or our services change. The date at the top of this page shows the latest version; significant changes are emailed to account holders.