What we hold, why, and for how long.

Chemtive is the controller for personal data processed through this website, our customer portal and our commercial relationships. Privacy questions and requests are handled at info@chemtive.com.

We process personal data on four lawful bases only: performance of a contract, compliance with a legal obligation, our legitimate interest in operating and securing the business, and consent where we ask for it. We never sell personal data, and we do not use it for automated decision-making or profiling.

This statement covers website visitors, customers and suppliers, job applicants and newsletter subscribers. Where a specific process needs a narrower notice (recruitment, or the whistleblowing channel) that notice is given at the point of collection and takes precedence.

We collect what a process needs and nothing more. Enquiry and quotation forms collect your name, company, contact details and the technical content of your request, used to answer the enquiry and to meet our screening obligations. Portal accounts additionally hold a user record and an audit trail of document downloads.

Website analytics are aggregate and first-party. We do not operate third-party advertising tags, cross-site trackers or social plug-ins that transmit data on page load. Documentation downloads from the product finder require no account and no identification.

Transfers outside the EEA happen only where a supply chain requires it: a shipment to an importer, or an export control declaration to an authority. Those transfers rely on adequacy decisions or the EU standard contractual clauses, with a transfer impact assessment on file. Processors are contracted under Article 28 terms and may not use your data for their own purposes.

We share data with: freight forwarders and customs brokers to fulfil a delivery; banks to process payment; auditors and legal counsel under confidentiality; and authorities where the law requires. That is the complete list.

Data is encrypted in transit and at rest, held in EU data centres in the Netherlands and Ireland. Access is role-based, reviewed twice a year, and every portal document download is logged against a named user. Two-factor authentication is mandatory on all internal and portal accounts.

Retention is set per process, not indefinite: enquiries twelve months from last contact; customer transaction records seven years for tax and customs law; recruitment applications twelve months unless you ask us to keep them; newsletter subscriptions until you unsubscribe; safety and batch traceability records ten years, as chemical regulation requires.

A personal data breach is assessed immediately and notified to the Dutch Data Protection Authority within seventy-two hours where the threshold is met, and to affected individuals without undue delay. We maintain an incident register and report it to the audit and compliance committee quarterly.

You have the right to access a copy of your personal data, to have inaccurate data corrected, to have data erased where we have no overriding obligation to keep it, to restrict or object to processing, and to receive your data in a portable format. Where processing relies on consent, you may withdraw it at any time without giving a reason.

Send requests to info@chemtive.com. We respond within thirty days, and will tell you within five working days if a request needs identity verification before we can act. There is no charge, and exercising a right never affects your commercial relationship with us.

If you are not satisfied with our response, you may complain to the Autoriteit Persoonsgegevens in the Netherlands or to the supervisory authority in your country of residence. We would rather you came to us first, but the route is yours to choose.