Privacy Policy

Last updated: 8 September 2025

At SD Heat Exchangers, your privacy is very important to us. This Privacy Policy explains how we collect, process, and protect your personal data when you visit our website or engage with our services.

1. Principles of Data Processing

We adhere to the following principles to ensure proper handling of personal data: processing is lawful, fair, and transparent; data is collected for explicit, legitimate purposes; only necessary data is collected; data is accurate and up-to-date; retention is limited to what is necessary; and data is processed securely.

2. Types of Personal Data Collected

We may collect the following categories of personal data:

  1. Contact details: full name, company, title, business address, email, phone number
  2. Communication data: messages, inquiries, feedback submitted via contact forms or email
  3. Account data (if applicable): username, password
  4. Usage data: IP address, browser details, device information, site navigation patterns via cookies and analytics
  5. No special categories (e.g., racial or health-related data) are processed unless with explicit consent or required by law

3. Purpose & Legal Basis for Processing

We process your personal data based on one or more of the following grounds:

  1. With your consent
  2. Where necessary for performance of a contract
  3. Compliance with a legal obligation
  4. Our legitimate business interests (e.g., website improvement, customer service), provided these do not unduly impact your rights

Purposes include:

  1. Responding to inquiries and providing requested services
  2. Improving website functionality and user experience
  3. Internal analytics and segmentation for tailored services

4. Data Sharing & International Transfers

We do not sell your personal data. However, we may share data with:

  1. Service providers (e.g., hosting, marketing, analytics) under strict GDPR-compliant contracts
  2. Legal authorities, if required by law
  3. In the event of a merger or business transfer, with proper safeguards

If data is transferred outside the EEA to countries without an adequate protection level, we ensure appropriate safeguards such as standard contractual clauses.

5. Automated Processing

We don’t typically engage in automated decision-making unless required for contract performance, provided by law, or with your explicit consent. In such cases, safeguards will be implemented .

6. Consent & Your Rights

You have the right to:

  1. Withdraw consent at any time
  2. Access your personal data
  3. Rectify inaccurate or incomplete data
  4. Request deletion (“right to be forgotten”)
  5. Object to or restrict data processing
  6. Request portability of your data

To exercise any of these rights, contact us at [insert contact email]. We will respond within one month, or let you know if an extension (up to two months) is needed .

7. Data Retention

Personal data is retained only as long as necessary for the purpose it was collected or as required by law. Once no longer needed, data is securely deleted .

8. Data Security & Staff Training

We implement appropriate technical and organizational measures to protect data (e.g., encryption, access controls, secure servers) . Our staff undergo regular privacy training to ensure compliance.

9. Complaints

If you have concerns or wish to file a complaint regarding our handling of your personal data, contact us or your local data protection authority.

10. External Links & Third-Party Policies

Our site may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. Please review their policies independently .

11. Changes to This Policy

We may update this Privacy Policy to reflect legal or operational changes. Revisions will be posted here with an updated effective date .

12. Contact Information

SD Heat Exchangers BV

Netwerk 144, 1446 WR Purmerend, The Netherlands

Email: info@sdheatexchangers.com

Phone: +31 299 674 934