Privacy notice

Who we are

Resin Mill Europe BV is the data controller for personal data processed through this website. StoneHold is a Resin Mill brand.

Registered office: Diebeke(Sch) 1A, 9500 Geraardsbergen, Belgium. VAT BE 1038.772.901. You can reach us about any privacy matter at hello@resinmill.eu.

What information we collect

We collect information in two ways.

• Information you give us. When you submit the application to stock StoneHold, we collect your country, the way you want to work with us (reseller or distributor), your company name, VAT number, website, business type and number of outlets, your name, role, email address and phone number, and any message you add. If you apply as a distributor, we also collect your warehouse and storage, the lines you stock now and the regions you cover. When you use the contact form, we collect your name, email address, the subject and your message.
• Information collected automatically. Our server keeps standard technical logs, including your IP address, for security, abuse prevention and rate limiting. Your IP address is stored with your application or message for the same purpose, and may be matched to a country using a database held on our own server. If you reach the site through a campaign link, the campaign parameters (utm_source, utm_medium, utm_campaign) are stored with your application. We do not use advertising or cross-site tracking.

How and why we use your data

We process your personal data for the following purposes and on the following legal bases.

• To review your application to stock StoneHold, to reply to it and to take steps at your request before entering into an agreement (Article 6(1)(b) GDPR), and our legitimate interest in building a network of stockists (Article 6(1)(f)).
• To send you a confirmation and to contact you about your application or message, on the basis of the consent you give when submitting the form (Article 6(1)(a)) and our legitimate interest (Article 6(1)(f)).
• To keep the site secure and prevent abuse, including the automatic spam check in your browser, rate limiting and logging, on the basis of our legitimate interest (Article 6(1)(f)).
• To comply with legal and accounting obligations (Article 6(1)(c)).

Who we share it with

We do not sell your personal data. We share it only with service providers who process it on our behalf under written agreements, and only as needed:

• our customer relationship management system (Odoo), where applications are recorded;
• our email service provider, to send and receive correspondence;
• our hosting and infrastructure providers, who run the website and store the secure application queue;
• if your country is supplied by a Resin Mill distributor, that distributor, once we have reviewed your application, so that it can supply you.

Where your data is processed

We aim to keep personal data within the European Union and European Economic Area. Where a provider processes data outside the EEA, we rely on appropriate safeguards such as the European Commission Standard Contractual Clauses.

How long we keep it

We keep application data for as long as needed to review the application and manage the relationship, and for up to 24 months after our last contact where an application does not proceed, unless a longer period is required by law. Contact messages are kept for up to 24 months. Technical logs are kept for a short period for security purposes.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to our processing;
• receive your data in a portable format;
• withdraw any consent you have given, at any time, without affecting prior processing.

Exercising your rights and complaints

To exercise any of these rights, contact us at hello@resinmill.eu. We will respond within the time limits set by the GDPR.

If you believe we have not handled your data properly, you may lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussels, www.gegevensbeschermingsautoriteit.be.

Security

We use appropriate technical and organisational measures to protect personal data, including access controls and encryption in transit. No method of transmission or storage is completely secure, but we work to protect your data and keep our measures under review.

Children

This website is aimed at businesses and is not directed at children. We do not knowingly collect data from children.

Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last revised.