Privacy Policy

1. Data controller

We are J. van Walraven Holding B.V. («Walraven»), located at Industrieweg 5, 3641 RK, Mijdrecht, The Netherlands, registered in the Dutch Chamber of Commerce under number 30065779 (“we”, “us” or “our”). For privacy related questions you can reach us via e-mail at [email protected] and by phone at +31 297 233 000.

When you visit our website (“www.walraven.com”), when you are a (potential) customer, supplier or other business relationship, register for training or events, or contact us, we process your personal data. We are the «data controller» for the processing of your personal data as further described in this Privacy Statement («Privacy Statement»). In this Privacy Statement, we explain why and how we process your personal data.

Our Website uses cookies. You can find more information about the use of cookies in our Cookie Statement.

2. Categories of personal data being processed

2.1 When you visit our Website, subscribe to a newsletter, are a (potential) customer, supplier or other business relationship, participate in training or visit our showroom or premises, submit an enquiry, use our online tools and digital services, or apply to a job opening, we process your personal data. Below we inform you about the categories of personal data we process for each category of data subjects.

2.2 Website visitors

When you visit our Website, we may process the following personal data:

  • IP address;
  • Most visited pages and searches within the Website;
  • Website usage and browser data;
  • Data about the device with which you visit our Website;
  • Automatically collected personal data through the use of cookies and/or similar technologies (see our Cookie Statement). Any items in your basket;
  • Interactions with our Website (including chat, contact form, phone).

2.3 Account holders

If you create an account via our Website, we may process the following personal data:

  • First and last name;
  • E-mail address;
  • Business contact information, including business name, address, phone number and email address;
  • Password (in pseudonymized form).

2.4 Customers

Walraven is only active in the B2B market. When your organisation becomes a customer by acquiring our solutions, products and/or services, we may process the following personal data of contact person(s):

  • First and last name, company name;
  • Business address;
  • Business e-mail address and phone number;
  • Billing address (where applicable to the contractual relationship);
  • Bank account information (where applicable to the contractual relationship);
  • Order notes (optional).

2.5 Suppliers and other business relationships

If you are a contact person of a supplier, business partner or other business relationship (such as an accountancy, payroll or IT service provider), we may collect:

  • Contact person’s first and last name, company name;
  • Business address;
  • Business e-mail address and phone number.

2.6 Newsletters, marketing, and other communications

For newsletters, commercial relationship management, training, showroom visits, webinars, online events and other marketing communications, we may collect:

  • First and last name;
  • E-mail address, phone number, job title and company name;
  • Any other information you provide to us when you contact us, for instance with an enquiry.

2.7 Job applicants

If you apply for a position with us, we may collect:

  • Name, address and contact details (email and phone number);
  • Job application and CV, employment history, qualifications;
  • Interview notes, if applicable.

2.8 Visitors

When you visit our premises, we may collect:

  • Name and contact details;
  • Your image, captured via CCTV for security purposes (retained for a maximum of 72 hours, unless a longer period is required, for example for a police investigation).

3. Source of personal data

We collect and receive the personal data under 2 primarily directly from you or the organization you represent. In addition, we may receive personal data from analytics providers, providers of technical, payment and delivery services, data brokers or aggregators, credit and fraud prevention agencies, and publicly available sources, as described in more detail below.

4. Purposes of the processing

Personal data as mentioned under 2 will be processed for the following purposes:

  • To offer you our Website, to measure your use thereof and to improve them (see 2.2);
  • To offer and promote our products and services to you, or those of our group companies, to the extent you provided consent or where based on an existing business relationship (see 2.4 and 2.6);
  • To inform you about new items which may be of interest to you based on your previous use of our Website, and to invite you to participate in customer satisfaction surveys (see 2.4 and 2.6);
  • To receive services from you or to collaborate with you (see 2.5);
  • To execute any other agreement between us and you (see 2.3 through 2.6);
  • For internal administrative purposes (see 2.2 through 2.8;
  • To fulfill our obligations under statutory law, such as the fiscal retention obligation (see 2.2 through 2.8);
  • To assess and review your job application, if applicable (see 2.7);
  • To secure our employees, visitors and our assets (see 2.8);
  • To handle any requests you may have submitted to us (see 2.2).

5. Lawful bases of the processing

The lawful bases for processing personal data as listed under 2 are:

  • The necessity of the processing for the performance of an agreement to which you are a party or to take measures at your request prior to the conclusion of an agreement;
  • To comply with any statutory provisions applicable to us;
  • The necessity of the processing to serve a legitimate interest of ours that outweighs your privacy interest, which is our interest in measuring website usage, to secure our personnel and assets, to improve our products and services and to promote our products and services to you;
  • Your express consent to the processing of your personal data, to the extent no other lawful basis applies.

6. Retention periods

In principle, your personal data will not be kept longer than necessary for the purpose for which your data was collected, unless a legal obligation obliges us to keep the data for a longer period, such as the seven-year fiscal retention period, or unless we need to retain the data because it may be relevant to ongoing or prospective legal proceedings or to establish, exercise or defend our legal rights.

7. Automated decision-making and profiling

We do not take decisions about you based solely on automated processing and do not engage in profiling.

8. Recipients of personal data

To the extent necessary for any of the aforementioned purposes of processing, we share your personal data with third parties («recipients«). The following categories of recipients may have access to your personal data:

  • Affiliated Walraven Group companies, if necessary for compliance, internal reporting, audit or security purposes, or for the performance of an agreement with data subjects;
  • Our auditor, legal advisors and other professional service providers engaged by us for compliance reasons;
  • Government agencies, courts, supervisory authorities, law enforcement or intelligence agencies, if we have a legal obligation to provide personal data to them;
  • IT service providers we use for our systems or for our Website, such as our providers for data analytics services, hosting and customer engagement;
  • Service providers we use to send you e-mails about our products and services;
  • Service providers assisting us in executing the agreement with you;
  • Third parties buying or interested in buying (a stake in) our company, and any professional service providers involved.

When transferring personal data to the categories of recipients listed above, we always strive to transfer as little personal data as possible.

The recipients who receive or have access to your data may be located outside the European Economic Area (EEA), as Walraven operates internationally and shares data within the Walraven Group across the countries in which it operates. When we transfer data for which we are responsible to countries outside the EEA (so-called «third countries«), we provide appropriate safeguards. More specifically, we impose contractual obligations on the recipients of personal data to protect your personal data using the Standard Contractual Clauses (SCCs) as approved by the European Commission. We will assess in advance (where necessary with the assistance of third-country recipients) on a case-by-case basis whether the legislation or practice of the third country compromises the effectiveness of the SCCs. In such cases, we will take additional measures to fill the protection gaps and bring them up to the level required by EU law. You may consult the SCCs we have concluded with recipients by sending an e-mail to [email protected].

9. Security

We are committed to secure the processing of your personal data by maintaining relevant administrative, technical and physical controls designed to protect your personal data against loss or theft, as well as against any unauthorized access, risk of loss, disclosure, copying, misuse or modification. We have implemented an Information Security Management System based on ISO/IEC 27001:2013 and require our data processors to implement equivalent appropriate technical and organizational measures. Our security measures include, but are not limited to:

  • using a reliable SSL Certificate to ensure the safety of your personal data;
  • Pseudonymization and encryption of personal data;
  • The ability to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services;
  • The ability to restore the availability of and access to personal data in a timely manner in the event of a physical or technical incident; and
  • A process for regularly testing, assessing and evaluating the effectiveness of technical and organizational measures to ensure security of processing.

10. Your right to object

You have the right to object to the processing of personal data because of your specific situation, but only insofar as this processing is carried out on the basis of one of our legitimate interests. We will then cease processing your personal data unless our interest in processing your data outweighs your interests or when our interest is related to the establishment, exercise or enforcement of a legal claim. Furthermore, you have the right to object to the processing of your personal data for direct marketing purposes, for example the promotion of our products and services.

You can object to the processing of your personal data by sending an e-mail to [email protected] clearly describing your request. Please note that we need to establish your identity before we can respond to your request. The manner in which we do this depends on your specific situation.

11. Other rights regarding the processing of your personal data

11.1 Right of access

You have the right to request access to the personal data we process about you, more specifically about the purposes, the categories of personal data concerned, the (categories of) recipients, the retention periods or the criteria for establishing them, the source of the personal data and the appropriate safeguards in case of transfer of the data outside the EEA.

11.2 Right to rectification of data and restriction of processing

You have the right to have incorrect data that we process about you rectified and to have incomplete data completed by us. Furthermore, you have the right, at your request, to restrict data processing in the following cases:

  • If you dispute the accuracy of the data, you may ask us to restrict the data processing for the period during which we verify the accuracy of the data;
  • If the processing is unlawful and you request us, instead of deleting the data, to restrict the use of the data;
  • In case we no longer need your personal data for the processing purposes, but you still need them for the establishment, exercise or substantiation of a legal claim;
  • If you have objected to the processing of your data, and you are awaiting our response as to whether our legitimate interests outweigh your interests.

11.3 Right to the deletion of data

In the following cases, you may have the right to have personal data deleted by us at your request:

  • If we no longer need the data for the purposes for which it was collected or obtained;
  • If you have withdrawn your consent, insofar as your data are processed on the basis of consent, and we also have no other legal basis for processing your data;
  • If you have objected to the processing of your data and we have no overriding interest, or if you have objected to the processing of your data for direct marketing purposes;
  • If we need to delete personal data in order to comply with a statutory obligation.
  • Please note that the above does not apply in all cases. We do not have to delete your personal data if we need it for, for example, the establishment, exercise or substantiation of a legal claim.

11.4 Right to data transfer

If we process your personal data pursuant to your consent or in execution of an agreement with you and the processing is automated, you have the right to obtain your data from us or have us transfer it to a third party in a commonly used file format.

If your personal data is processed on the basis of consent, you have the right to withdraw your consent. Please note that withdrawing consent does not affect data processing that took place before you withdrew your consent.

You can exercise all of the aforementioned rights by sending an e-mail to [email protected] clearly describing your request. Please note that we need to establish your identity before we can respond to your request. How we do this depends on your specific situation.

11.6 Right to file a complaint

If you disagree with the way we process your personal data, you have the right to file a complaint with the competent Data Protection Authority, being the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

12. Third party websites

This Privacy Statement does not apply to third-party websites that are connected to our Website by hyperlinks. We cannot guarantee that these third parties will handle your personal data in a reliable or secure manner. We advise you to read the privacy statement of these websites before using them.

13. Changes in this Privacy Statement

From time to time, we may amend or adjust this Privacy Statement. We encourage you to check this page regularly to ensure that you are aware of any changes to this Privacy Statement.

This Privacy Statement has last been updated on 19-10-2026.