Latest update: 02-02-2026

1) Who we are

This website (www.sovatrading.com) and related online services are provided by Sova Trading B.V. (“we”, “us”, “our”).
Registered office: Slobbengorsweg 78, 3351 LH Papendrecht, The Netherlands
Chamber of Commerce (KvK): 91299292

Privacy contact
Email: gdpr@sovatrading.com
Privacy correspondence address: Slobbengorsweg 78, 3351 LH Papendrecht, The Netherlands

2) What personal data we process

Depending on how you interact with us, we may process:

• Name and contact details: first and last name, email address, telephone number, company name, job title
• Customer and transaction data: quotations, orders, delivery details, correspondence, and service history
• Technical and usage data: IP address, browser/device information, pages visited and interactions (only where cookies/analytics are enabled based on your preferences)
• Marketing preferences: opt-in/opt-out status (where applicable)

We do not intentionally collect special categories of personal data (such as health data).

3) Why we process your personal data and our legal bases

We process personal data only when we have a lawful basis under the GDPR:

A) Enquiries and quotations
To respond to enquiries and prepare quotations.
Legal basis: legitimate interests and/or steps prior to entering into a contract.

B) Contracts and delivery
To process orders, deliver products/services, and provide customer support.
Legal basis: performance of a contract.

C) Legal and administrative obligations
To meet legal obligations (e.g., invoicing, warranty, accounting, and tax requirements).
Legal basis: legal obligation.

D) Security and continuity
To keep our website, systems, and users secure (e.g., logging, abuse prevention, troubleshooting).
Legal basis: legitimate interests.

E) Marketing (where used)
To send marketing communications where permitted.
Legal basis: consent where required and/or legitimate interests for limited relationship communications (depending on the context and applicable rules). You can opt out at any time.

4) Retention periods

We keep your personal data no longer than necessary for the purposes above, unless we must retain it longer by law.

Typical retention periods:

• Enquiries/quotations (no contract concluded): up to 24 months after last contact
• Customer/order/invoice administration: at least 7 years (statutory retention)
• Website security logs: typically 30–180 days (unless needed longer for incident investigation)
• Marketing preferences: as long as necessary to respect and document your preference

5) Sharing data with third parties (processors)

We may share personal data with trusted service providers that process data on our behalf under data processing agreements, such as:

• WP Engine (website hosting/management)
• Amazon Web Services (infrastructure and/or backups)
• Google Analytics (website analytics, where enabled via cookie preferences)
• Google Tag Manager (tag management; used to load scripts in line with cookie preferences)

We do not sell personal data.

6) International transfers (outside the EEA)

Some providers may process personal data outside the European Economic Area (for example, in the United States). Where this happens, we use appropriate safeguards such as:

• an adequacy mechanism where applicable, and/or
• Standard Contractual Clauses (SCCs) and supplementary measures where required.

7) Cookies and analytics

We use cookies and similar technologies. Where required, we ask for your consent via our cookie banner before placing non-essential cookies (including analytics and marketing cookies). You can change your preferences at any time via our cookie settings.
For more information, please see our Cookie Policy.

8) Your rights

You have the right to:

• access your personal data
• rectification (correction)
• erasure (deletion), in certain cases
• restriction of processing, in certain cases
• objection to processing based on legitimate interests
• data portability, where applicable
• withdraw consent at any time (where processing is based on consent)

To exercise your rights, email gdpr@sovatrading.com. We may request additional information to verify your identity.

We will respond within one month. If a request is complex, this period may be extended as permitted by law.

9) Complaints

If you believe we are not processing your personal data correctly, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with the Autoriteit Persoonsgegevens.

10) Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, and destruction (e.g., access controls, secure transport where applicable, backups, and monitoring).

11) Links to third-party websites

Our website may contain links to third-party sites. We are not responsible for their privacy practices. Please review the privacy policies of those third parties.

12) Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be published on our website with the “Latest update” date.