Privacy policy
Last updated:
This policy explains how Dhow BV processes personal data collected through this website, in accordance with the General Data Protection Regulation (GDPR) and Belgian law. This website is intended exclusively for businesses: the data we process relates to contact persons at client, supplier and partner companies.
1. Data controller
Dhow BV, Papiermolenstraat 51/306, 1160 Auderghem, Belgium. Company / VAT number: BE 1015.583.664. Contact: info@dhow.group.
2. Data we collect
Through our forms (request a quote, supplier application, general enquiry) we collect:
- professional identity data: name, job title;
- company data: company name, country, website;
- business contact data: business email address, phone / WhatsApp number;
- request details: products, quantities, destination, message.
We do not knowingly collect data about private individuals acting as consumers, nor any sensitive data.
3. Security and bot protection
To protect our forms against automated submissions and abuse, we use a hidden anti-bot field, a limit on the number of submissions per connection, and a one-way encrypted fingerprint of your IP address stored with your browser type. These measures rely on our legitimate interest in keeping the website secure (Art. 6(1)(f) GDPR). Data is transmitted over an encrypted connection (HTTPS) and access is restricted to authorised staff.
4. Purposes and legal bases
- answering your requests and sending you an offer: pre-contractual steps taken at your request (Art. 6(1)(b) GDPR);
- performing a contract with you (Art. 6(1)(b));
- business-to-business (B2B) relationships, professional prospecting and website security: our legitimate interest (Art. 6(1)(f));
- audience measurement: only with your consent (Art. 6(1)(a)).
5. Processors
We use service providers that process data on our behalf under contract: OVH (hosting, France / European Union), Google Workspace (email and collaboration tools, Google Ireland Ltd) and, only after your consent, an audience measurement tool. Where data is transferred outside the European Economic Area, the transfer is protected by appropriate safeguards such as the European Commission's standard contractual clauses.
6. Retention
We keep your data for 3 years after our last contact, unless a contract applies. In that case, data is kept for the duration of the contract and the resulting statutory retention periods.
7. Your rights
You have the right to access, rectification, erasure, restriction of processing, objection and data portability. Where processing is based on consent, you may withdraw it at any time. To exercise your rights, write to info@dhow.group. We reply within one month.
8. Complaints
You may lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), Rue de la Presse 35, 1000 Brussels: www.dataprotectionauthority.be.