Effective Date: June 1, 2026
1. Who We Are
Netchem B.V. (“Netchem”, “we”, “our”, or “us”) is a company registered in the Netherlands (KvK No. 98251864), with business operations conducted through Netchem B.V. and its Italian branch office.
For purposes of data protection law, Netchem B.V. is responsible for deciding why and how the personal data described in this Privacy Notice is processed.
Questions regarding privacy or personal data may be directed to: privacy@netchem.nl
The Company has not appointed a formal Data Protection Officer (DPO). Any questions, requests, or concerns regarding personal data may be directed to the contact above.
2. Who This Notice Applies To
This Privacy Notice applies to personal data collected by Netchem relating to customers and prospective customers, suppliers and service providers, business contacts and professional advisors, website visitors, and individuals who contact Netchem by email, telephone, website forms, meetings, conferences, trade shows, social media, or other business channels.
This Notice does not apply to employee personal data, which is addressed separately in the Netchem Employee Privacy Notice.
3. Personal Data We Collect
Depending on the nature of our relationship, we may collect and process the following types of personal data:
- Contact information: name, employer, job title, business address, email address, and telephone number.
- Business relationship information: customer and supplier account information, quotations and commercial discussions, orders and order history, shipping and logistics information, invoice and payment information, credit application information, and business registration, tax, VAT, billing, payment, delivery, and account administration information where it relates to identifiable individuals.
- Communications information: emails, telephone records, meeting notes, technical inquiries, customer service interactions, and marketing or communication preferences.
- Website and technical information: website activity, IP address, browser and device information, cookie and analytics data, and information submitted through online forms.
The Company limits the collection and processing of personal data to what is reasonably necessary for legitimate business purposes.
4. Purposes of Processing
The Company collects and processes personal data for legitimate business purposes, including:
- Customer and supplier management: establishing and maintaining business relationships, managing accounts, providing quotations, technical support, and commercial services, and processing orders, shipments, invoices, and payments.
- Business communications: responding to inquiries, communicating regarding products and services, and managing meetings, events, and business interactions.
- Website management: operating and securing our website, monitoring website performance, and managing user preferences and consent settings.
- Legal and regulatory compliance: complying with applicable laws and regulations, including tax, accounting, customs, sanctions, and trade compliance requirements, and responding to regulatory or legal requests.
- Security and business operations: protecting Company systems and information, preventing fraud or unauthorized access, and supporting audits, insurance, reporting, and risk management activities.
- Legal defense: establishing, exercising, or defending legal rights and claims.
5. Legal Bases for Processing
The Company only processes personal data when permitted by law. Depending on the circumstances, the legal bases for processing include:
- Performance of a contract: processing necessary to enter into or perform a contract or business relationship.
- Compliance with legal obligations: processing necessary to comply with applicable legal, regulatory, tax, customs, accounting, employment, health and safety, or other statutory requirements.
- Legitimate interests: processing necessary for the Company’s legitimate business interests, including customer and supplier relationship management, information security, website administration, internal administration, business operations, business reporting, protection of confidential information, fraud prevention, and legal defense.
- Consent: where required by law, the Company will obtain consent before processing personal data. Individuals may withdraw consent at any time.
When relying on legitimate interests, the Company seeks to ensure that its interests do not override the rights and freedoms of affected individuals.
In general, customer and supplier account administration, quotations, orders, shipments, invoices, payments, and related communications are processed to perform or prepare for a contract. Legal, tax, customs, accounting, sanctions, and regulatory records are processed to comply with legal obligations. Website administration, security, fraud prevention, relationship management, business reporting, internal administration, and legal defense are processed on the basis of legitimate interests. Consent is used where required, including for certain non-essential cookies or optional marketing communications.
6. Recipients of Personal Data
Personal data may be shared with service providers, professional advisors, financial and commercial service providers, government and regulatory authorities, and Netchem group entities where necessary for legitimate business purposes or legal compliance.
These recipients may include IT and cloud service providers, website hosting providers, cybersecurity providers, communication and collaboration platforms, lawyers, auditors, accountants, consultants, banks, insurance providers, payment providers, logistics and transportation providers, tax authorities, customs authorities, regulators, law enforcement agencies, courts, or other governmental bodies.
As an international organization, personal data may be shared between Netchem B.V., its Italian branch office, Netchem Inc. in Canada, and affiliated entities where necessary for operational support, reporting, finance, customer management, supplier management, and business oversight.
The Company does not sell personal data.
7. International Transfers and Data Storage
Personal data may be stored and processed within the European Union, in Canada, and within cloud services and business systems used by the Company and its approved service providers.
As a cross-border organization, Netchem may transfer information between its operations in the European Union and Canada for legitimate business purposes, including customer service, supplier management, finance, administration, regulatory compliance, and operational support.
Where personal data is transferred outside the European Economic Area (EEA), the Company will implement appropriate safeguards as required by applicable data protection laws. For transfers to Canada, Netchem may rely on the European Commission’s adequacy decision for Canadian commercial organizations subject to applicable Canadian privacy law, where applicable. Where an adequacy decision does not apply, Netchem will rely on appropriate safeguards such as standard contractual clauses or another recognized transfer mechanism.
8. Data Retention
The Company retains personal data only as long as necessary for the purposes for which it was collected, to comply with legal obligations, to support legitimate business operations, and to protect the Company’s legal rights.
Retention periods vary depending on the nature of the information, the type of relationship, the type of record, applicable tax, accounting, customs, trade compliance, and other legal retention obligations, contractual requirements, limitation periods for legal claims, and operational needs.
When personal data is no longer required, it will be securely deleted, anonymized, or otherwise disposed of in accordance with Company procedures.
9. Website Cookies and Analytics
Our website may use cookies and similar technologies to ensure proper website functionality, remember user preferences, improve website performance, understand website usage and visitor interactions, and manage consent preferences.
Where required by applicable law, non-essential cookies will only be used following user consent. Additional information regarding cookies and consent management may be made available through our website’s cookie settings or consent banner.
10. Data Security
The Company implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure, or misuse.
These measures include access controls, secure storage, cybersecurity protections, vendor oversight, and confidentiality obligations applicable to personnel and service providers.
11. Providing Personal Data
In some cases, providing personal data is necessary to enter into or perform a contract or business relationship with Netchem, or to comply with legal requirements such as tax, accounting, customs, sanctions, or trade compliance obligations.
If required personal data is not provided, Netchem may be unable to establish or continue the relevant business relationship, process an order, provide services, complete onboarding, issue invoices, arrange shipment, or comply with legal obligations.
12. Your Rights
Subject to applicable law, individuals may have the right to request access to personal data, request correction of inaccurate information, request deletion of personal data, request restriction of processing, object to certain processing activities, request data portability, and withdraw consent where consent is the legal basis for processing.
To exercise any of these rights, please contact privacy@netchem.nl.
13. Automated Decision-Making
Netchem does not use personal data for automated decision-making or profiling that produces legal effects or similarly significant effects concerning individuals.
14. Complaints
If you believe your personal data has been processed improperly, you may contact the Company using the details above.
You may also lodge a complaint with a competent data protection authority, including the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), the Italian Garante per la Protezione dei Dati Personali, or another applicable supervisory authority within the European Union.
15. Changes to This Notice
The Company may update this Privacy Notice from time to time to reflect changes in legal requirements, business operations, or data processing activities.
The current version will be made available through the Company’s website.