Effective Date: June 1, 2025

This GDPR Policy outlines how Specialty Coffee Consultation complies with the General Data Protection Regulation (EU 2016/679).

1. Data Controller

Specialty Coffee Consultation
Boterstraat 17A 1811HP, Alkmaar, the Netherlands
support@specialtycoffeeconsultation.com

2. Personal Data We Process

We process:

Names, emails, phone numbers
Business contact details
Site usage data (IP address, device/browser info)
Cookie preferences and behavioral data (from Meta, Google, LinkedIn)

3. Lawful Basis for Processing

We only process personal data when we have a lawful basis under Article 6 of the GDPR:

Consent: for marketing and non-essential cookies
Contract: for service delivery and responding to inquiries
Legal obligation: for tax, legal, or compliance matters
Legitimate interest: for analytics and improving services (when not overridden by your rights)

4. Use of Third-Party Processors

We use GDPR-compliant third-party tools that may process your data:

Google (Analytics, Ads)
Meta Platforms Ireland (Facebook Pixel)
LinkedIn (Insight Tag)

These services may process data outside the EU. We ensure compliance via appropriate safeguards such as Standard Contractual Clauses (SCCs).

5. Data Subject Rights

You have the right to:

Access: Find out what data we hold
Rectification: Request corrections
Erasure: Request deletion (“right to be forgotten”)
Restrict processing
Object to processing
Data portability: Obtain a copy of your data
Withdraw consent at any time
Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)

To exercise any of these rights, contact us at support@specialtycoffeeconsultation.com.

6. Retention Periods

We retain data only as long as necessary for the purposes for which it was collected, or as required by law (e.g., tax regulations).

7. Security

We implement appropriate technical and organizational measures to protect your data, including secure servers, HTTPS encryption, and restricted access to internal systems.