PRIVACY POLICY — CleanAqua

CleanAqua (“we”, “our”, “us”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your information when you visit our website, contact us, or purchase our products. CleanAqua is located in Amsterdam, Netherlands, and processes personal data in accordance with the General Data Protection Regulation (GDPR) and applicable European and Dutch privacy laws.

By using our website or providing your information, you agree to the practices described in this Privacy Policy.

1. Data Controller

CleanAqua
Amsterdam, Netherlands
Email: info@cleanaqua.nl

CleanAqua determines the purpose and means of processing the collected personal data.

2. Personal Data We Collect

We collect the following categories of personal data:

A. Data Automatically Collected (Visitors)

When you browse our website, we collect certain technical data:

• IP address (anonymized where possible)
• Browser type and version
• Device type, operating system
• Country/region
• Pages visited, time spent on pages
• Referring URLs (how you arrived on our site)

This information is collected via cookies and analytics services such as Google Analytics.

B. Data Provided Through Contact Forms

If you fill out the contact form, we collect:

• Name
• Email address
• Phone number (if provided)
• Message content
• Any attachments you choose to upload

This information is used solely to respond to your inquiry.

C. Data Collected During Purchases

If you purchase a system or service, we may collect:

• Full name
• Billing address
• Shipping address
• Email address
• Phone number
• Payment details (processed securely by third-party payment providers; we do not store full credit card data)

3. How We Use Your Personal Data

We use your data for the following lawful purposes:

A. Website Functionality & Improvement

• Ensuring the website operates correctly
• Monitoring usage and performance
• Improving user experience

B. Contact & Communication

• Responding to inquiries
• Providing customer support
• Sending requested information

C. Order Processing

• Managing purchases
• Delivering products
• Sending order confirmations, updates, or billing information

D. Legal & Compliance

• Meeting our legal obligations
• Preventing fraud
• Securing our systems

4. Legal Basis for Processing (GDPR)

We process personal data based on the following lawful grounds:

• Consent – for analytics cookies and contact form submissions
• Contractual necessity – when processing orders and delivering products
• Legitimate interests – ensuring website security, improving performance
• Legal obligation – record-keeping, accounting, fraud prevention

5. Data Retention

We keep your data only as long as necessary:

• Visitor analytics data: 14–38 months (Google Analytics default ranges)
• Contact form submissions: up to 24 months
• Order and billing records: 7 years, per Dutch accounting law
• Cookies: See Cookie Policy

After these periods, your data is securely deleted or anonymized.

6. Sharing & Third-Party Services

We do not sell or rent your personal data.
We may share data with trusted third parties only when necessary:

• Website hosting providers
• Analytics tools (Google Analytics)
• Payment processors
• Delivery and logistics partners
• IT and security providers

All third parties are GDPR-compliant and only receive the minimum data required to provide their services.

7. International Data Transfers

Some third-party providers may be located outside the European Economic Area (EEA).
Whenever data is transferred internationally, we ensure GDPR compliance through:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions
• Secure transfer mechanisms

8. Data Security

We take appropriate technical and organizational measures to protect personal data, including:

• Encrypted connections (HTTPS)
• Access controls
• Secure servers
• Regular security monitoring

However, no online system is completely risk-free, and users should take care with personal data online.

9. Your GDPR Rights

You have the following rights:

• Right to access – request a copy of your personal data
• Right to rectification – correct inaccurate information
• Right to erasure – request deletion (where legally possible)
• Right to restrict processing – limit how your data is used
• Right to data portability – request data in a structured format
• Right to object – object to certain processing activities
• Right to withdraw consent – at any time
• Right to lodge a complaint – with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)

To exercise any rights, contact: info@cleanaqua.nl

10. Children’s Privacy

Our website is not intended for children under 16, and we do not knowingly collect their data.

11. Updates to This Policy

We may update this Privacy Policy as needed. Changes will be posted with a revised “Last Updated” date.

Last Updated : 20.11.2025