Privacy Policy

With this privacy statement, we give insight into the personal data that we collect from you and for what purposes we use it. We process all personal data as prescribed by the requirements of the General Data Protection Regulation (GDPR). APH Group only stores personal data that is personally provided by the person concerned. This privacy statement becomes effective when you visit our website or use our services.

Responsible person

The responsible person in terms of data protection law is:

APH Group

Mercurius 18

8448 GX Heerenveen

The Netherlands

Tel: +31 513 481 100

E-mail: info@aphgroup.com

We have appointed as data protection officer:

Data Protection Officer of APH Group

Tel: +31 513 481 100

E-mail: info@aphgroup.com

Server Log Files

Purpose, Legal Basis, and Legitimate Interest

When you visit our website—even without registering or submitting information—certain data of a general nature is automatically collected and stored in server log files. This data includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address, and the date and time of access.

We process this data for the following purposes:

• Technical Optimization: Ensuring a seamless connection and smooth user experience of the website.
• Security: Evaluating system security and stability and detecting/preventing cyberattacks.
• Legal Protection: We reserve the right to review log files retrospectively if there are concrete indications of unlawful use.

Legal Basis: The processing is carried out in accordance with Art. 6 (1) (f) GDPR. Our legitimate interest lies in the secure, stable, and functional operation of our website.

Recipients of Data

For the operation and maintenance of our website, we use specialized IT service providers (hosting providers) who act as our data processors. We have concluded the required Data Processing Agreements (DPA) with these providers to ensure they process your data strictly in accordance with our instructions and GDPR standards.

Storage Period

Data is deleted as soon as it is no longer necessary for the purpose for which it was collected. For data processed for the provision of the website, this is generally the case when the respective session has ended. If data is stored in log files for security reasons (e.g., to investigate misuse), it is typically deleted or anonymized after a maximum of 7 to 30 days, unless required longer for evidence in a specific incident.

Mandatory or Required Provision

The provision of the aforementioned personal data is neither legally nor contractually required. However, the processing of your IP address is technically necessary to deliver the website's content to your device. Without this information, our website and its services cannot be accessed or may be significantly restricted.

Right to Object

You have the right to object to the processing of your data based on legitimate interests. Please refer to the section "Your Rights" below for more information on how to exercise your right to object according to Art. 21 GDPR.

Newsletter

Purpose and Legal Basis

On our website, you can subscribe to our newsletter to receive updates on our services, products, and special offers. To personalize our communication and provide relevant content based on your interests (e.g., Grain Equipment, Irrigation, etc.), we collect your name, e-mail address, country, and the specific interests you select.

Legal Basis: The processing of this data is based solely on your explicit consent in accordance with Art. 6 (1) (a) GDPR.

Recipients of Data

Your data is processed by APH Group and our technical service providers. We use MailChimp (The Rocket Science Group LLC) as our marketing platform. We have entered into a Data Processing Agreement (DPA) with MailChimp to ensure the security of your data.

Note: Since MailChimp is based in the USA, we ensure that appropriate safeguards are in place (such as Standard Contractual Clauses) to maintain a level of protection compliant with GDPR.

Double Opt-in and Provision

To ensure that the registration is actually made by the owner of the e-mail address, we use the "Double Opt-in" procedure. After submitting the form, you will receive a confirmation e-mail. Your data will only be added to our mailing list once you click the confirmation link in that e-mail. The provision of your data is voluntary, but we cannot send the newsletter without at least your e-mail address.

Storage Period

We store your data for as long as your subscription is active. If you do not confirm your registration via the Double Opt-in e-mail, your data will be deleted automatically after a reasonable period (e.g., 30 days). If you unsubscribe, your data will be removed from our active mailing list immediately.

Revocation of Consent (Unsubscribe)

You can revoke your consent and unsubscribe from the newsletter at any time with future effect. You can do this by clicking the "Unsubscribe" link at the bottom of every newsletter or by contacting us directly.

Contact Form

Purpose and Legal Basis

If you wish to contact us, you can use the contact form provided on our website. The data transmitted via this form is encrypted (SSL/TLS) to ensure secure transmission. To process your inquiry, we require the following information:

• Name
• Company Name
• E-mail address
• Your message

We process this data to communicate with you and address your request effectively.

Legal Basis

The processing is based on our legitimate interest (Art. 6 (1) (f) GDPR) in responding to your inquiry. If your contact aims at concluding or fulfilling a contract, the additional legal basis is Art. 6 (1) (b) GDPR.

Recipients of the Data

Your data is accessed by APH Group and, where necessary, by our technical service providers (e.g., hosting and IT support). We have concluded Data Processing Agreements (DPA) with these providers to ensure the security and confidentiality of your personal data.

Storage Period

Personal data provided via the contact form will be deleted as soon as the inquiry has been conclusively processed and no legal or contractual retention obligations (e.g., tax or commercial law) prevent its deletion.

Mandatory or Voluntary Provision

The provision of your personal data is voluntary. However, we can only process and answer your request if you provide us with your name, e-mail address, and the content of your message.

Right to Object

You have the right to object to the processing of your data based on legitimate interests. For more information, please refer to the section on Art. 21 GDPR at the bottom of this policy.

Contact via WhatsApp

On our website, we offer the option to contact us via WhatsApp. When you click the WhatsApp button, a chat window opens. At that moment, we receive your phone number, your WhatsApp profile name, and the content of the messages you send us.

Purpose

We use this data exclusively to answer your questions, provide service, or process your request.

Legal Basis

The processing is necessary to pursue our legitimate interest in providing efficient customer service, or to fulfill a contract (for example, if you place an order or request a quote).

Retention Period

We do not retain the chat history longer than is necessary to fully answer your question, unless there is a legal administrative obligation or if the conversation leads to a customer relationship.

Transfer to Third Parties

By using this feature, data is processed by WhatsApp (Meta Platforms Ireland Ltd.). WhatsApp secures these messages with end-to-end encryption. Please note: Meta may transfer data to the United States. For more information on how WhatsApp handles your privacy, please refer to WhatsApp’s Privacy Policy.

Cookies

What are cookies?

Our website uses cookies. Cookies are small text files that are stored on your device (computer, smartphone, or tablet) via your browser when you visit our website. They do not cause any harm to your device and do not contain viruses.

Categories of Cookies and Legal Basis

We categorize the cookies used on our website into three groups:

• Strictly Necessary Cookies

These cookies are essential for the technical operation of the website. They enable basic functions such as page navigation, security, and the storage of your privacy settings. Without these cookies, the website cannot function properly.

Legal Basis:Art. 6 (1) (f) GDPR (Legitimate Interest).

• Analytical Cookies

These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. This allows us to improve the structure, navigation, and content of our website.

Legal Basis:Art. 6 (1) (a) GDPR (Consent).

• Marketing Cookies

These cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third-party advertisers.

Legal Basis:Art. 6 (1) (a) GDPR (Consent).

Consent and Management

When you first visit our website, a Cookie Banner will appear asking for your explicit consent to place analytical and marketing cookies. You have the right to accept all cookies, reject non-essential cookies, or adjust your preferences per category.

Withdrawing Consent 

You can change or withdraw your consent at any time with future effect by [insert method, e.g., "clicking the 'Cookie Settings' button in our footer" or "adjusting your browser settings"].

Storage Duration

• Session cookies are temporary and are deleted automatically when you close your browser.
• Persistent cookies remain on your device for a specified period or until you delete them manually via your browser settings.

For a detailed list of the specific cookies we use, please refer to our full https://www.aphgroup.com/en/cookie-statement

Google Analytics

Purpose and Legal Basis

APH Group uses Google Analytics, a web analytics service provided by Google Ireland Limited ("Google"). We use this service to gain insight into how visitors interact with our website, which allows us to optimize our content and user experience.

Legal Basis

The use of Google Analytics and the placement of the associated analytical cookies is based on your explicit consent (Art. 6 (1) (a) GDPR). You can grant or withdraw this consent at any time via our cookie settings.

Data Collection and Privacy Measures

Google Analytics collects data such as your operating system, browser type, device type (tablet, mobile, or desktop), pages viewed, referral source, and the duration of your visit. To ensure the highest level of privacy, we have implemented the following measures:

• IP Anonymization: We have activated IP anonymization. This means Google truncates your IP address within member states of the European Union or other parties to the Agreement on the European Economic Area before transmission to the USA. This ensures that your full IP address is not stored and cannot be traced back to you as an individual.
• Data Processing Agreement: We have concluded a Data Processing Agreement with Google to ensure the security and confidentiality of your data.
• Data Sharing: We have disabled the "Data Sharing" option with Google for their own marketing or profiling purposes.

Data Transfer to the USA

Data processed by Google Analytics may be transferred to and stored on servers in the United States. Google is certified under the EU-U.S. Data Privacy Framework, which ensures a level of data protection equivalent to European standards.

Retention and Opt-out

The data collected via Google Analytics is automatically deleted after [insert period, e.g., 14 months]. If you wish to prevent Google Analytics from using your data across all websites, you can install the Google Analytics Opt-out Browser Add-on.

Microsoft Clarity

Purpose and Legal Basis

We use Microsoft Clarity, a web analytics service provided by Microsoft Corporation, to better understand how our website is used. Microsoft Clarity records interactions on our website, such as mouse movements, clicks, scrolls, and heatmaps. This data helps us identify usability issues and optimize the website for a better user experience.

Legal Basis

The processing of this data and the placement of the associated cookies is based solely on your explicit consent (Art. 6 (1) (a) GDPR). You can grant or withdraw this consent at any time via our cookie settings.

Data Collection and Privacy Measures

Microsoft Clarity collects data about your interactions on our website. To protect your privacy, the following measures are in place:

• Data Masking: We have configured Microsoft Clarity to mask sensitive input data (such as information entered into form fields) so that it is not recorded or stored.
• Pseudo-anonymization: The recorded data is stored in a pseudo-anonymized form. While it records a unique session ID, it is not used to identify you personally.
• Data Processing Agreement: We have a Data Processing Agreement in place with Microsoft to ensure the protection and confidentiality of your data.

Data Transfer to the USA

Data collected by Microsoft Clarity may be transferred to and stored on servers in the United States. Microsoft is certified under the EU-U.S. Data Privacy Framework, ensuring a level of data protection that complies with European standards.

Retention and Opt-out The data recorded by Microsoft Clarity is stored for a maximum of 12 months, after which it is automatically deleted. You can prevent the collection of your data by Microsoft Clarity by refusing consent in our cookie banner or by adjusting your browser settings. For more information, please refer to the Microsoft Privacy Statement.

Google reCAPTCHA

Purpose and Responsibility

To protect our website and forms against malicious use, spam, and automated attacks (bots), we use the reCAPTCHA service provided by Google Ireland Limited ("Google").

Data Controller and Processor

APH Group acts as the Data Controller for the data processing that occurs through the implementation of reCAPTCHA on this website. In this capacity, Google acts as a Data Processor, processing data exclusively on our behalf and for our security purposes. To this end, a Data Processing Agreement (DPA) has been concluded with Google that meets the strictest requirements of the GDPR.

Purpose and Legal Basis

reCAPTCHA analyzes the behavior of website visitors based on various characteristics (including IP address, browser and device data, and interaction data such as mouse movements). This check is necessary to determine whether the input is provided by a human or a machine.

The legal basis for this processing is:

• Legitimate Interest (Art. 6 (1) (f) GDPR): For the security of our digital infrastructure and the prevention of fraud.
• Consent (Art. 6 (1) (a) GDPR): To the extent that reCAPTCHA uses analytical or tracking cookies that are not strictly necessary for security. You grant this consent via our cookie banner.

Data Processing and Transfer

The data collected by reCAPTCHA is transmitted to Google for analysis. In this process, data may be transferred to the servers of Google LLC in the United States. This transfer is safeguarded by Google’s certification under the EU-U.S. Data Privacy Framework and the use of Standard Contractual Clauses (SCCs) approved by the European Commission.

Information and Objection

You can find further information regarding the processing of your data in the Google Privacy Policy.

Note on Data Transfer to the United States

Data Transfers and Safeguards

Our website uses services and features from companies based in the United States (such as Google, Microsoft, and MailChimp). When these services are active, personal data (such as your IP address) may be transmitted to and stored on servers located in the USA.

Legal Framework

To ensure an adequate level of data protection in accordance with the GDPR, we rely on the following safeguards for transfers to the USA:

• EU-U.S. Data Privacy Framework (DPF): For companies certified under this framework, the European Commission has issued an adequacy decision. This means that these companies are deemed to provide a level of data protection equivalent to that of the EU.
• Standard Contractual Clauses (SCCs): For providers not (yet) certified under the DPF, we use Standard Contractual Clauses approved by the European Commission to ensure your data remains protected.

Potential Risks While these safeguards are in place, we inform you that US authorities (e.g., intelligence agencies) may, under specific national laws, have the right to access data stored on US servers for monitoring purposes. However, the current EU-U.S. legal framework provides enhanced redress mechanisms for EU citizens to challenge such access through specialized judicial review bodies.

Control You can control or prevent the transfer of data to US-based services by managing your preferences in our Cookie Settings or by not clicking on external links to US-based platforms.

Social Media & Third-Party Plugins

General Principles

Our website integrates plugins and functions from various social media platforms. To protect your privacy, these plugins are deactivated by default and are only activated if you provide your explicit consent via our cookie banner (Art. 6 (1) (a) GDPR). If you are logged into your social media accounts while visiting our website, the respective providers may associate your visit with your user profile.

Meta (Facebook & Instagram)

Our website uses plugins from Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin, Ireland). These include the Facebook "Like" button and Instagram integration.

• Joint Responsibility: For the collection and transmission of data via these plugins, APH Group and Meta act as joint controllers in accordance with Art. 26 GDPR. We have no influence over the further processing of the data by Meta.
• Data Transfer: Data may be transferred to Meta Platforms Inc. in the USA. Meta is certified under the EU-U.S. Data Privacy Framework.

You can find further information Privacy Policy:Meta Privacy Policy.

LinkedIn

We use functions of the LinkedIn network, provided by LinkedIn Ireland Unlimited Company (Wilton Plaza, Wilton Place, Dublin 2, Ireland). When you interact with our LinkedIn content or follow a link, LinkedIn processes your profile data and interaction.

• Legal Basis: Interaction with our LinkedIn page is based on our legitimate interest ( 6 (1) (f) GDPR) in communicating with customers and prospects.

You can find further information Privacy Policy:LinkedIn Privacy Policy.

YouTube

Our website embeds videos from YouTube, a service provided by Google (YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA).

• Privacy-Enhanced Mode: We embed YouTube videos in "Extended Data Protection Mode." This means YouTube does not store information about visitors unless they play the video. However, clicking "Play" constitutes consent to data processing by YouTube.

You can find further information Privacy Policy:Google Privacy Policy.

TikTok Pixel

We use the TikTok Pixel provided by TikTok Technology Limited (Dublin, Ireland). This pixel allows us to track visitor activity and measure the effectiveness of our advertisements.

• Consent Required: The TikTok Pixel and its associated cookies are only activated with your explicit consent (Art. 6 (1) (a) GDPR).

You can find further information Privacy Policy:TikTok Privacy Policy.

Data Protection Rights & Security

Data from Minors (under 16 years)

Our website and services do not intend to collect personal data from visitors under the age of 16 unless they have permission from a parent or guardian. However, we cannot verify a visitor's age. We advise parents to be involved in their children's online activities to prevent data collection without parental consent. If you believe we have collected data from a minor without such consent, please contact us at info@aphgroup.com, and we will delete the information immediately.

Your Data Protection Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access (Art. 15 GDPR): You can request a copy of the data we hold about you.
• Right to Rectification (Art. 16 GDPR): You can ask us to correct inaccurate data.
• Right to Erasure (Art. 17 GDPR): You can request that we delete your data ("Right to be forgotten").
• Right to Restriction (Art. 18 GDPR): You can ask us to temporarily stop processing your data.
• Right to Data Portability (Art. 20 GDPR): You can request to receive your data in a structured, machine-readable format.
• Right to Object (Art. 21 GDPR): See the detailed section below.

Exercising your rights 

To exercise these rights, please contact us. To prevent unauthorized disclosure, we may ask you to provide proof of your identity. We will respond to your request within one month.

Right to Object (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6 (1) (f) GDPR (legitimate interest). This also applies to any profiling based on those provisions.

If you object, we will stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, or for the establishment, exercise, or defense of legal claims.

Right to Complain

You have the right to lodge a complaint with a supervisory authority. Since APH Group is based in the Netherlands, you can contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via: https://autoriteitpersoonsgegevens.nl/en.

How We Protect Your Data

APH Group takes the security of your data seriously and implements appropriate technical and organizational measures to prevent misuse, loss, unauthorized access, and unauthorized disclosure. These measures include:

• Encryption: We use SSL/TLS encryption for secure data transmission.
• Access Control: Only authorized personnel have access to personal data.
• Monitoring: Our security measures are regularly reviewed and updated.

Contact Details

For questions or remarks regarding this Privacy Statement, please contact us:

APH Group

Mercurius 18

8448 GX Heerenveen

The Netherlands

Tel: +31 (0)513 481 100

E-mail: info@aphgroup.com

Website: www.aphgroup.com