Legal
Privacy statement
How we handle personal data under the GDPR (AVG).
- Controller
- JML Group Netherlands B.V.
- Tracking
- None
- Data sold
- Never
- Last updated
- 1 November 2026
This privacy statement explains how JML Group Netherlands B.V. handles personal data when you visit this website or contact us. We comply with the EU General Data Protection Regulation (GDPR / AVG).
1. Who is responsible
The controller for the processing described here is JML Group Netherlands B.V., Waaier 30b, 2451 VV Leimuiden, The Netherlands (KvK 80650678). For privacy questions, contact us at info@jml-group.nl or through our contact page.
2. What data we process and why
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| You visit this website | IP address, browser and device information, requested pages, date and time | Delivering the website, keeping it secure, blocking attacks | Legitimate interest (art. 6(1)(f) GDPR) |
| You use our contact form, email or call us | Name, company, email address, phone number, country, the content of your message | Answering your enquiry and, where relevant, preparing or performing an agreement | Steps prior to / performance of a contract (art. 6(1)(b)) or legitimate interest (art. 6(1)(f)) |
| Business relationship (suppliers, buyers) | Contact details of contact persons, correspondence, order and invoice details | Managing the relationship, orders, invoicing | Performance of a contract (art. 6(1)(b)); legal obligation for financial records (art. 6(1)(c)) |
Contact form messages are sent to our mailbox by email and are not stored on the website. You receive an automatic confirmation at the email address you entered. To prevent abuse, the website keeps a one-way encrypted (hashed) version of your IP address for one hour to limit the number of messages per connection.
We do not use analytics, advertising or tracking tools on this website, we do not sell personal data, and we do not use automated decision-making or profiling.
3. Who receives your data
We use service providers (processors) who process data on our behalf under a data processing agreement:
- Website hosting: SiteGround, which stores the website and server logs.
- Website security: Wordfence (Defiant, Inc., United States), a firewall that processes IP addresses and request data to detect and block attacks.
- Email: our email provider, which stores correspondence.
Where relevant to your enquiry, we may share your details with our partner company JML Co., Ltd. in Fukuoka, Japan. The European Commission has recognised Japan as providing an adequate level of data protection. Transfers to the United States take place under the EU-US Data Privacy Framework or standard contractual clauses.
We also share data where the law requires us to, for example with the tax authorities.
4. How long we keep data
- Enquiries: as long as needed to handle them, and no longer than two years after our last contact unless a business relationship follows.
- Business and financial records: seven years, as required by Dutch tax law.
- Server and security logs: for a limited period, only as long as needed for security purposes.
5. Your rights
You have the right to access, correct or delete your personal data, to restrict or object to its processing, and to data portability. To exercise these rights, contact us using the details above. We respond within one month. We may ask you to verify your identity.
If you are not satisfied with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), autoriteitpersoonsgegevens.nl.
6. Security
We take appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), a web application firewall, two-factor authentication for administrators, and keeping software up to date.
7. Cookies
See our cookie statement.
8. Changes
We may update this statement. The latest version is always published on this page.
Last updated: 1 November 2026