Privacy Policy
Last updated: April 4, 2026
1. Introduction
KMI Impex B.V. ("KMI Impex", "we", "us", or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or purchase our products and services.
This policy is in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and the Dutch Implementation Act (Uitvoeringswet AVG).
2. Controller Information
The controller responsible for the processing of your personal data is:
KMI Impex B.V.
Herastraat 49
5047 TX Tilburg
The Netherlands
KvK (Chamber of Commerce): 18049519
Email: office@kmiimpex.com
Phone: +31 642 803 045
3. Personal Data We Collect
We may collect the following categories of personal data:
3.1 Data you provide directly
- Name and surname
- Company name and VAT/KvK number (for business customers)
- Email address
- Phone number
- Billing and shipping address
- Payment information (processed securely by our payment providers)
- Account credentials (username, encrypted password)
- Communications and correspondence with us
3.2 Data collected automatically
- IP address and browser type
- Pages visited and time spent on pages
- Referring website
- Device type and operating system
- Cookie data (see our Cookie Policy)
4. Purposes and Legal Bases for Processing
We process your personal data for the following purposes:
| Purpose | Legal Basis (GDPR Art. 6) |
|---|---|
| Processing and fulfilling your orders | Performance of a contract (Art. 6(1)(b)) |
| Creating and managing your customer account | Performance of a contract (Art. 6(1)(b)) |
| Sending order confirmations and shipping updates | Performance of a contract (Art. 6(1)(b)) |
| Customer support and handling complaints | Performance of a contract / Legitimate interest (Art. 6(1)(b)(f)) |
| Compliance with legal obligations (invoicing, tax) | Legal obligation (Art. 6(1)(c)) |
| Sending marketing and promotional emails (newsletter) | Consent (Art. 6(1)(a)) |
| Improving our website and services | Legitimate interest (Art. 6(1)(f)) |
| Fraud prevention and security | Legitimate interest (Art. 6(1)(f)) |
5. Data Sharing and Third Parties
We do not sell your personal data. We may share your data with trusted third parties only where necessary:
- Payment processors — to securely process your payment transactions (e.g., Mollie, PayPal)
- Shipping and logistics partners — to deliver your orders (e.g., PostNL, DHL, DPD)
- IT and hosting providers — to operate and maintain our website infrastructure
- Email service providers — to send transactional and marketing emails
- Accounting and tax advisors — to fulfil our legal financial obligations
- Public authorities — where required by law or court order
All third-party processors are bound by data processing agreements and are required to handle your data in accordance with GDPR.
6. International Data Transfers
Where we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or we transfer only to countries recognised as providing an adequate level of data protection.
7. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes described in this policy, or as required by law:
- Customer account data: retained for the duration of your account and up to 2 years after the last activity
- Order and invoice records: retained for 7 years in accordance with Dutch fiscal law (Belastingdienst)
- Marketing data: retained until you withdraw your consent or unsubscribe
- Website analytics data: retained for up to 13 months
8. Your Rights Under GDPR
As a data subject, you have the following rights:
- Right of access (Art. 15) — you may request a copy of the personal data we hold about you
- Right to rectification (Art. 16) — you may request correction of inaccurate or incomplete data
- Right to erasure (Art. 17) — you may request deletion of your data, subject to legal retention obligations
- Right to restriction of processing (Art. 18) — you may request that we limit how we use your data
- Right to data portability (Art. 20) — you may request your data in a structured, machine-readable format
- Right to object (Art. 21) — you may object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent (Art. 7(3)) — where processing is based on consent, you may withdraw it at any time
- Right not to be subject to automated decision-making (Art. 22) — we do not use solely automated decision-making that significantly affects you
To exercise any of these rights, please contact us at: office@kmiimpex.com
We will respond to your request within 30 days. We may ask you to verify your identity before processing your request.
9. Right to Lodge a Complaint
If you believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the Dutch Data Protection Authority:
Autoriteit Persoonsgegevens (AP)
Postbus 93374
2509 AJ Den Haag
Website: www.autoriteitpersoonsgegevens.nl
10. Cookies
Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse site usage, and support our marketing activities. We use the following types of cookies:
- Strictly necessary cookies — required for the website to function (no consent needed)
- Functional cookies — remember your preferences and settings
- Analytical cookies — help us understand how visitors use our site
- Marketing cookies — used to deliver relevant advertisements
You can manage your cookie preferences at any time through our cookie consent tool or your browser settings.
11. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include SSL/TLS encryption, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure.
12. Children's Privacy
Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately at office@kmiimpex.com.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically.
For significant changes, we will notify you by email or via a prominent notice on our website.
14. Contact Us
For any questions, requests, or concerns regarding this Privacy Policy or our data processing practices, please contact us:
KMI Impex B.V.
Herastraat 49
5047 TX Tilburg
The Netherlands
Email: office@kmiimpex.com
Phone: +31 642 803 045