Privacy notice.

Who is responsible

EBXL Group, based in the Netherlands, is the controller for the data described here. Contact: procurement@ebxl.eu.

What we collect

Through the supplier form: company name, country, website, product category and description, minimum order quantity, certifications, contact name, email address, optional phone number, optional message and an optional catalogue file.

Technical data: a salted, one-way hash of your IP address (not the address itself) and your browser’s user-agent string, used to spot abuse and duplicates.

Why we use it

To assess and answer your introduction and, where it leads to cooperation, to manage the relationship. The legal basis is our legitimate interest in sourcing products and, once you ask us to take steps towards an agreement, that agreement itself.

How long we keep it

Introductions that do not lead to cooperation are deleted 24 months after submission. If cooperation starts, the data is kept for as long as the relationship and legal retention duties require.

Who processes it

Service providers that host this site, protect the form against abuse and store submissions and uploaded files (currently Cloudflare and Supabase). We do not sell personal data and do not use it for advertising.

Cookies and tracking

This site sets no cookies and uses no analytics. The supplier form page loads Cloudflare Turnstile, which runs a short browser challenge to keep automated submissions out.

Your rights and deletion requests

You can ask for access, correction, deletion, restriction or portability of your data, and object to its use. To request deletion, email procurement@ebxl.eu with the subject “Deletion request” from the address you used; we confirm once it is done.

You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).