Red & Bundle B.V. ("Red & Bundle", "we", "us") respects your privacy. This policy explains what personal data we process, why, and what rights you have under the EU General Data Protection Regulation (GDPR).
1. Who is responsible
Red & Bundle B.V., established in the Netherlands, is the controller for the personal data described in this policy. For any privacy question or request, contact us at info@redandbundle.com.
2. What data we collect
- Contact information — your name, email address, company name, phone number and the content of your message when you email or call us.
- Business relationship data — contact details of people at our customers, partners and suppliers, and information needed to deliver our services, licences, support and invoices.
- Technical data — when you visit this website, our hosting provider automatically processes technical data such as your IP address, browser type and the pages requested, in order to deliver the site and keep it secure.
We do not intentionally collect special categories of personal data or data about children.
3. Why we use your data and on what legal basis
- To answer your questions and requests — based on our legitimate interest in responding to people who contact us, or on taking steps at your request before entering into a contract.
- To deliver our services and products — necessary for the performance of a contract with you or the company you work for.
- To meet legal obligations — such as tax and accounting record-keeping.
- To operate and secure this website — based on our legitimate interest in a reliable and secure website.
- To keep business contacts informed about relevant products and updates — based on our legitimate interest. You can object to this at any time.
4. Cookies and tracking
This website does not use tracking cookies, analytics or advertising tools. If that changes, we will update this policy and ask for your consent where required.
5. Who we share data with
We do not sell your personal data. We share it only with service providers that help us run our business, and only as far as needed for that service. These are:
- Microsoft Azure (Static Web Apps and Azure Storage) — website hosting and file storage;
- Microsoft 365 — email and office tools;
- Microsoft Dynamics 365 Business Central — customer administration, invoicing and accounting.
These providers act as processors under a data processing agreement. We may also disclose data where required by law.
6. International transfers
We aim to store data within the European Economic Area. Where a service provider processes data outside the EEA, we make sure appropriate safeguards are in place, such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
7. How long we keep data
We keep personal data only as long as needed for the purposes above. Correspondence is kept for as long as the conversation or business relationship requires. Financial records are kept for seven years, as required by Dutch tax law. Technical web server logs are kept for a limited period by our hosting provider.
8. Security
We take appropriate technical and organisational measures to protect personal data against loss and unauthorised access, including encrypted connections and access controls.
9. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to our processing, including for direct marketing;
- receive your data in a portable format;
- withdraw consent at any time, where processing is based on consent.
To exercise these rights, email info@redandbundle.com. We will respond within one month. You also have the right to lodge a complaint with a supervisory authority. In the Netherlands this is the Autoriteit Persoonsgegevens.
10. Changes to this policy
We may update this policy from time to time. The latest version is always available on this page, with the date of the last update shown at the top.