Privacy Policy

This policy explains which personal data Salesupply B.V. processes when you visit salesupply.com, contact us, download our content, receive our emails, are contacted by us, or do business with us. It also explains your rights. Salesupply works with businesses, so most people we deal with act on behalf of a company.

1. Who we are

Salesupply B.V. is the controller for the processing in this policy.

Address	Kerkenbos 1047, 6546 BB Nijmegen, the Netherlands
Chamber of Commerce (KvK)	69807361
Privacy questions and requests	privacy@salesupply.com
Phone	+31 (0)24 711 3370

Other Salesupply group companies may help handle your request or deliver part of a service. Where a group company in another country runs its own website or outreach, that company's privacy policy applies to it.

2. What we process, why, and for how long

We only collect what we need for the purposes below. Providing data is voluntary, but without contact details we cannot answer your request or send what you asked for.

Contact, quote and callback forms

Data	Name, company, job title, email, phone, your message and any volumes you share (orders, parcels, returns, tickets).
Purpose	Answer your request and prepare a proposal.
Legal basis	Steps at your request before a contract (Art. 6(1)(b) GDPR); for company enquiries, our legitimate interest in answering them (Art. 6(1)(f)).
Retention	12 months after our last contact if no cooperation follows.

Downloads and online tools

Data	Name, company, email, phone and the answers you give in a tool such as the Quick Scan or the rates portal.
Purpose	Send you the content or result and follow up on your interest.
Legal basis	Delivering what you asked for (Art. 6(1)(b)); follow-up on our legitimate interest (Art. 6(1)(f)).
Retention	12 months after the download or our last contact.

Newsletter

Data	Email, name, company, and which emails you open and click.
Purpose	Send our newsletter and updates.
Legal basis	Your consent (Art. 6(1)(a)), which you can withdraw through the link in every email.
Retention	Until you unsubscribe. We then delete your data within one month and keep only your email address on a suppression list, so we don't mail you again.

Portal and developer accounts

Data	Name, email, company, login details (including sign-in with Google or Microsoft) and your settings.
Purpose	Give you access and run your account.
Legal basis	Contract (Art. 6(1)(b)).
Retention	As long as the account exists; deleted within 30 days of closure unless the law requires longer.

Business outreach

Data	Name, job title, company and company details, business email, business phone, LinkedIn profile and our correspondence.
Purpose	Introduce our services to companies that may need them (see section 3).
Legal basis	Legitimate interest (Art. 6(1)(f)).
Retention	12 months after our last contact if no cooperation follows. After an objection, only your email address on a suppression list.

Clients, suppliers and partners

Data	Name, job title, business email and phone, and correspondence.
Purpose	Perform the contract with your employer and manage the relationship.
Legal basis	Legitimate interest (Art. 6(1)(f)); contract if you are the contracting party yourself (Art. 6(1)(b)).
Retention	For the duration of the relationship, then until claims expire. Invoices and accounting records: 7 years, as Dutch tax law requires (Art. 6(1)(c)).

Job applications

Data	CV, cover letter, contact details and interview notes.
Purpose	Assess your application.
Legal basis	Steps at your request before a contract (Art. 6(1)(b)).
Retention	4 weeks after the procedure ends, or 1 year with your consent.

Website visits

Data	IP address, browser, device, pages visited and time of visit.
Purpose	Deliver and secure the website; with your consent, measure and improve it (section 4).
Legal basis	Legitimate interest for security (Art. 6(1)(f)); consent for analytics and advertising (Art. 6(1)(a)).
Retention	Security logs as briefly as our host allows; analytics data for at most 14 months.

Our LinkedIn page

Data	Your public profile, comments and messages.
Purpose	Communicate and promote our services.
Legal basis	Legitimate interest (Art. 6(1)(f)). For page statistics we are joint controller with LinkedIn.
Retention	Until the content is removed or you object.

Legal claims

If a dispute arises, we use the data relevant to it to establish, exercise or defend legal claims, on our legitimate interest (Art. 6(1)(f)), until the claim is settled or expires.

We do not make decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects.

3. Business outreach: LinkedIn, email and calls

We sometimes contact people at companies that may benefit from our services, even if they have not contacted us first. We do this mostly on LinkedIn and by email, and sometimes by phone.

• Where the data comes from: public professional sources, such as LinkedIn, company websites and business registers, and B2B data providers.
• What we use: your name, job title, company, business email address, business phone number and the content of our messages. We select companies on business criteria such as industry, size and sales channels.
• Why we may do this: our legitimate interest in reaching companies that may need our services (Art. 6(1)(f) GDPR). We only use business contact details, never private ones.
• Telling you: our first message says who we are and how we got your details, and links to this policy.
• Stopping it: you can object at any time, without giving a reason. Reply "stop" or write to privacy@salesupply.com and we will not contact you again for this purpose. We keep only your email address on a suppression list to make sure of that.
• Where local law requires consent for business email or calls, we ask for it first or do not contact you through that channel.

4. Cookies and similar technologies

Until you make a choice in the cookie banner, we only use what is strictly necessary to run the site. Analytics and advertising tools start only after you click "Accept all". You can change your choice at any time through Cookie settings in the footer, or block cookies in your browser.

Strictly necessary (always on)

sp_cookie_consent (Salesupply)	Remembers your cookie choice. Stored in your browser until you clear it.
sp_emailForSignIn (Salesupply)	Completes your sign-in link on the portal, then removed.
Cloudflare	Protects the site against bots and attacks.
HubSpot forms	Shows and submits our forms when you use one.
Sign in with Google or Microsoft	Lets you sign in to the portal, only when you choose to.

Analytics and advertising (only after consent)

Google Analytics 4 and Google Tag Manager (Google)	Measure visits and how the site is used.
HubSpot tracking code (HubSpot)	Links your visits to forms you submit, so we can follow up relevantly.
LinkedIn Insight Tag (LinkedIn)	Measures our LinkedIn campaigns and builds audiences.

5. Who we share data with

We do not sell personal data. We share it only with the parties below, who process it on our behalf under a data processing agreement, or when the law requires it.

HubSpot Ireland Ltd	CRM, forms, email, newsletter and website tracking. EU data center; support access from the US possible.
Google Ireland Ltd / Google LLC	Analytics, Tag Manager, Firebase (portal accounts and form data), sign-in with Google. EU and US.
Cloudflare	Website hosting, security and delivery. Global network.
LinkedIn Ireland Unlimited Company	Insight Tag and LinkedIn page statistics. EU and US.
Microsoft Ireland Operations Ltd	Email, Microsoft 365 and sign-in with Microsoft. EU and US.
EmailJS	Delivers form notifications to our team. May process data outside the EEA.
B2B data providers	Finding business contact details for outreach.
Salesupply group companies in the EEA	When they handle your request or deliver part of a service.
Accountants, auditors and legal advisers	Bookkeeping, audits and legal claims.
Authorities	When the law requires it.

Transfers outside the European Economic Area. Some of these providers may process data in the United States or the United Kingdom. For the US we rely on the provider's certification under the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses. For the UK we rely on the European Commission's adequacy decision. You can ask for a copy of these safeguards at privacy@salesupply.com.

6. Your rights

You have the right to:

• access your data and get a copy, including where we got it;
• have incorrect data corrected;
• have your data deleted;
• restrict how we use your data;
• receive data you gave us in a machine-readable format, where we process it on the basis of consent or contract;
• object to processing based on our legitimate interest;
• withdraw your consent at any time, without affecting processing before that.

Objecting to direct marketing. You can object to the use of your data for direct marketing and business outreach at any time, without giving a reason. Reply to our message or write to privacy@salesupply.com, and we stop.

Send requests to privacy@salesupply.com. We answer within one month. For complex requests we may extend this by two months and will tell you why. We may ask you to confirm your identity first.

If you are not satisfied with how we handle your data, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or to the supervisory authority where you live or work. We appreciate it if you contact us first.

7. Security

We protect personal data with technical and organizational measures that fit the risk, such as access control, encryption in transit, multi-factor authentication and data processing agreements with our providers. Our Security Policy describes these measures in detail.

8. Changes to this policy

We update this policy when our services, tools or the law change. The current version is always on this page, with its effective date at the top. If a change materially affects you, we will tell you through our website or by email.