Privacy Policy

Last updated: July 2026

Who is responsible for your data

Lubies Factory B.V., trading as Boksees, is the controller for the processing described in this policy.

Address

Pieter Nuytsstraat 9, 1972 NX IJmuiden, The Netherlands

Chamber of Commerce (KvK)

42004918

VAT number

NL869244139B01

Email

boksees@lubies.nl

We have not appointed a Data Protection Officer, as we are not required to do so under article 37 GDPR. Questions about data protection can be sent to the email address above.

What we collect, why, and on what basis

We only collect personal data that we actually need. The table below lists everything this website processes.

Providing your data is never a statutory obligation. If you choose not to complete the contact form, we simply cannot respond to an enquiry we have not received.

Cookies and analytics

This website sets no analytics cookies until you consent. If you decline, Google Analytics is not loaded at all. Our cookie policy lists every cookie in use, with its purpose and retention, and explains how to withdraw your consent at any time.

Who else processes your data

We use a small number of service providers who process personal data on our instructions, under a data processing agreement. We do not sell personal data, and we do not share it with third parties for their own marketing.

• Hosting — the provider that serves this website and keeps its access logs.
• Form handling — Cloudflare, which receives your contact form submission and passes it on.
• Email delivery — Resend, which delivers form submissions to our inbox.
• Analytics — Google Ireland Limited, only if you have consented.

Transfers outside the European Economic Area

Some of the providers above are established in, or transfer data to, the United States. Those transfers rely on the European Commission’s Standard Contractual Clauses, on the EU–US Data Privacy Framework where the provider is certified under it, or on both. You can ask us for details of the safeguards that apply.

How we keep data secure

This website is served over an encrypted connection, form submissions are transmitted over HTTPS, and access to the mailbox that receives enquiries is limited to the people who need it. No system is perfectly secure, but we take measures appropriate to the limited data we hold.

Your rights

Under the GDPR you have the following rights in relation to your personal data:

• Access — to be told whether we process your data, and to receive a copy of it.
• Rectification — to have inaccurate or incomplete data corrected.
• Erasure — to have your data deleted where we no longer have grounds to keep it.
• Restriction — to have processing paused while a dispute is resolved.
• Portability — to receive data you gave us in a structured, machine-readable format.
• Objection — to object to processing based on our legitimate interests.
• Withdrawal of consent — to withdraw consent at any time, without affecting processing that already took place.

To exercise any of these rights, email us at boksees@lubies.nl. We will respond within one month. We may ask you to confirm your identity before acting on a request, so that we do not disclose someone else’s data.

Making a complaint

If you believe we are handling your data improperly, we would rather hear from you first so we can put it right. You also have the right to lodge a complaint with the Dutch data protection authority:

Autoriteit Persoonsgegevens

Postbus 93374, 2509 AJ Den Haag, The Netherlands — autoriteitpersoonsgegevens.nl

Automated decision-making

We do not use your data for automated decision-making or profiling that produces legal effects for you.

Children

This website is aimed at businesses and is not directed at children. We do not knowingly collect data from anyone under 16.

Changes to this policy

We may update this policy when our processing changes. The date at the top shows when it was last revised. Material changes will be announced on this page.