Privacy Policy | EP Biomass B.V.

Last updated: 8 December 2025

EP Biomass B.V. (“we”, “our”, “us”) is committed to protecting your personal data and handling it with care, transparency and in compliance with the General Data Protection Regulation (GDPR).
This Privacy Policy explains what personal data we collect, how we use it, how long we store it, and what your rights are.

This policy applies to the website www.epbiomass.com and all related domains operated by EP Biomass B.V.

1. Who we are

EP Biomass B.V.
Registered in the Netherlands
Chamber of Commerce (KvK): 98304542
Address: Vogelshemweg 2, 9514 BT Gasselternijveen, The Netherlands
Email: info@epbiomass.com

EP Biomass B.V. is the data controller responsible for processing your personal data.

2. Personal data we collect

We only collect personal data that you provide voluntarily or that is collected automatically through the basic functioning of our website.

2.1 Data you provide

This includes:

  • Contact form data

    • Name

    • Email address

    • Company name (optional)

    • Phone number (optional)

    • Message content

We only use this information to respond to your request or inquiry.

2.2 Automatically collected data

When you visit our website, certain technical information is collected automatically, such as:

  • IP address (anonymised where possible)

  • Browser type and version

  • Device information

  • Pages visited

  • Time and date of your visit

This is collected to ensure the website works properly and to improve user experience.

All cookie-related data is described separately in our Cookie Policy.

3. How we use your personal data

We use your data only for the following purposes:

3.1 To respond to your inquiry

If you contact us through our contact form or by email, we use your data to:

  • Communicate with you

  • Answer your question

  • Provide requested information

3.2 To operate and improve our website

Technical data is used to:

  • Ensure the website functions correctly

  • Improve website performance and security

  • Analyse anonymous visitor statistics (only if you have consented to statistical cookies)

3.3 To comply with legal obligations

We may process or retain certain data when required by Dutch or EU law.

We do not:

  • Sell your data

  • Use your data for automated decision-making

  • Use your data for marketing without consent

4. Legal bases for processing (GDPR)

We process personal data based on the following legal grounds:

  • Legitimate interest — responding to your inquiry and ensuring the proper functioning of the website.

  • Consent — for optional cookies or analytics (as covered in the Cookie Policy).

  • Legal obligation — if data must be stored for compliance reasons.

5. How long we keep your data

We store personal data only as long as needed for the purpose it was collected.

  • Contact form submissions: up to 12 months after the last communication, unless a longer period is required for legitimate business reasons (e.g., ongoing correspondence).

  • Technical and analytics data: according to the retention periods defined by the tools used, and only if you have given consent.

When data is no longer needed, it is securely deleted.

6. Sharing your personal data

We only share your personal data when necessary and with trusted parties, such as:

6.1 Service providers

For example:

  • Hosting providers

  • Email services

  • Security or analytics tools (only with your consent)

These parties process data on our behalf and under strict data-processing agreements.

6.2 Legal authorities

Only when required to comply with Dutch or EU law.

We do not transfer personal data outside the EEA unless adequate safeguards (such as SCCs) are in place.

7. Your rights under the GDPR

You have the following rights:

  • Right of access – to know what personal data we hold about you

  • Right to rectification – to correct inaccurate or incomplete data

  • Right to erasure – to request deletion of your data

  • Right to restrict processing – to limit how your data is used

  • Right to data portability – to request a copy for transfer to another party

  • Right to object – to object to processing based on legitimate interest

  • Right to withdraw consent – for any processing based on your consent

To exercise any of these rights, please contact us using the details below.

If you believe your data is not handled correctly, you may file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8. Security measures

We take appropriate technical and organisational measures to protect your personal data, including:

  • Secure servers

  • SSL encryption

  • Access controls

  • Regular security updates

While we take great care, no online system is 100% secure. If you suspect misuse of your data, please contact us immediately.

9. Links to third-party websites

Our website may contain links to external websites. We are not responsible for the privacy practices or content of these sites.
We recommend reviewing their privacy policies before sharing personal data.

10. Changes to this Privacy Policy

We may update this Privacy Policy when necessary.
The latest version is always available on our website, and the “Last Updated” date will reflect any changes.

11. Contact details

For questions about this Privacy Policy or to exercise your GDPR rights, please contact:

EP Biomass B.V.
Attn: Data Protection
Email: info@epbiomass.com
Address: Vogelshemweg 2, 9514 BT Gasselternijveen
The Netherlands