Privacy notice.
Last reviewed: 21 May MMXXVI
Nauteda B.V. ("Nauteda", "we", "our") supplies extra virgin olive oil to a curated list of trade partners. This notice describes what personal data we collect through nauteda.com, why we hold it, and what rights you have in respect of it. We have written it to comply with the EU General Data Protection Regulation (GDPR) and the Dutch Telecommunications Act, and to be readable in five minutes.
We are a small house. We hold as little personal data as the work requires and we share none of it for marketing purposes.
1. Who we are
Nauteda B.V., Waaier 32, 2451 VW Leimuiden, The Netherlands. Registered at the Dutch Chamber of Commerce under number 91791448. VAT number NL865772162B01. We are the controller of the personal data described in this notice.
For any privacy question, write to partners@nauteda.com. We answer in person within two business days.
2. What we collect, and why
| Purpose | Data we hold | Legal basis |
|---|---|---|
| Reviewing a partner application | Business name, country, business type, your name, business email, password (hashed), the short note you supply | Pre-contractual interest (GDPR art. 6(1)(b)) |
| Operating an approved partner account | Above, plus organisation profile and the audit trail of your sessions and actions | Contract performance (GDPR art. 6(1)(b)) |
| Quote correspondence and order history | Quote terms, messages exchanged in the portal thread, attached documents | Contract performance |
| Transactional email | Your business email and the content of the notification | Contract performance |
| Security and fraud prevention | Session metadata, IP address at sign-in | Legitimate interest (GDPR art. 6(1)(f)) |
| Statutory accounting and trade records | Order data, invoices, shipping documents | Legal obligation (GDPR art. 6(1)(c), Dutch tax law, 7 years) |
We do not run analytics trackers. We do not run advertising. We do not sell or share personal data with third parties for their own purposes.
3. Cookies
We set only the cookies the site requires to keep you signed in and to keep the site safe to read. There are no analytics, advertising, or social-media cookies. The cookie notice on the site reflects this. You can clear our cookies at any time via your browser; doing so signs you out.
4. Sub-processors
To run the portal we rely on a small number of vendors. Each is bound by a Data Processing Agreement (GDPR art. 28).
| Vendor | Role | Where data is processed |
|---|---|---|
| Supabase, Inc. | Authentication, database, file storage, real-time messaging | Ireland (eu-west-1) |
| Vercel, Inc. | Site hosting and edge computing | European Union (default region) and global edge cache for static assets only |
| Resend, Inc. | Transactional email delivery | European Union and the United States |
We do not use any other personal-data processor for the operation of nauteda.com. If we add one we will update this notice and tell affected partners by email at least 14 days in advance.
5. International transfers
We operate from the Netherlands and our partners are international, including in the United Arab Emirates. When we send personal data outside the European Economic Area in the course of contract performance, we rely on Standard Contractual Clauses approved by the European Commission, or on the partner's explicit instruction recorded in the portal thread.
6. How long we keep your data
| Category | Retention |
|---|---|
| Declined or unfinished applications | 6 months from the last interaction, then erased |
| Active partner accounts | For the duration of the relationship and 24 months thereafter |
| Quote and order records | 7 years (Dutch tax law) |
| Server logs (security) | 90 days |
You may ask for earlier erasure of any record that is not subject to a legal retention obligation.
7. Your rights
Under GDPR you have the right to access, correct, erase, restrict, and object to our processing of your personal data, and to data portability where it applies. You may exercise any of these rights by writing to partners@nauteda.com. We respond within one month and never charge a fee for a reasonable request.
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl). We would always prefer that you write to us first so that we can put the matter right.
8. Changes to this notice
We will update this notice when our processing or our sub-processors change. The "last reviewed" date at the top is the change marker. Material changes will also be announced by email to active partners.
9. Contact
Nauteda B.V.
Waaier 32, 2451 VW Leimuiden, The Netherlands
partners@nauteda.com