Privacy statement

2Connect

We are 2Connect B.V., a private company with limited liability established under Dutch law, having its statutory seat in Waalwijk, and its registered office at Gompenstraat 17, 5145 RM Waalwijk, the Netherlands, (“2Connect”, “we”, “us” or “our”). You can reach us via e-mail at info@2-connect.com.

When you visit our website (www.2-connect.com), when you are a (potential) customer, when you contact us or provide services to us, we process your personal data. We are the "data controller" for the processing of your personal data as further described in this privacy statement ("Privacy Statement"). In this Privacy Statement, we explain why and how we process your personal data.

Our website uses cookies. You can find more information about the use of cookies in our Cookie Policy.

Categories of personal data being processed

2Connect processes your personal data because you use our website, our services and/or because you provide this data to us yourself otherwise. Below you will find an overview of the personal data that we may process:

When you visit our website, we may process the following personal data:

• IP address;

• Location data;

• Information about your activities on our website;

• Internet browser and device type.

When you use our services, we may process the following personal data:

• First and last name;

• Phone number;

• E-mail address;

• Shipping address;

• Billing address;

• Bank account information;

• Order notes (if applicable).

When you contact us, we may process the following personal data:

• First and last name;

• Phone number;

• E-mail address;

• Company name;

• Your location (place of residence);

• Any other personal data you provide us in your correspondence.

When you provide services to us, we may process the following personal data:

• Contact person’s name;

• Business e-mail address;

• Phone number.

Special and / or sensitive personal data that we process

Our website and/or service does not intend to collect data about website visitors under the age of 16. Unless they have permission from their parents or guardian. However, we cannot check whether a visitor is older than 16. We therefore advise parents to be involved in the online activities of their children, in order to prevent data about children from being collected without parental consent. If you are convinced that we have collected personal information about a minor without this permission, please contact us via info@2-connect.com and we will delete this information.

Source of personal data

We collect and receive the personal data mentioned above directly from you or the organization you represent. We do not use further or public sources to collect your personal data unless otherwise expressly provided.

For what purpose and on what basis we process personal data

2Connect processes your personal data for the following purposes:

• To be able to call or e-mail you if necessary to perform our services;

• To offer to you our website, to measure your use thereof and to improve it;

• To offer and promote our products and services;

• To receive services from you or to collaborate with you;

• To execute any other agreement between 2Connect and you;

• For internal administrative purposes;

• To fulfill our obligations under statutory law, such as the fiscal retention obligation;

• To secure our employees and our assets;

• To handle any requests you may have submitted to us.

The lawful bases for processing personal data as listed above are:

• The necessity of the processing for the performance of an agreement to which you are a party or to take measures at your request prior to the conclusion of an agreement (article 6(1)(b) GDPR);

• To comply with any legal obligations applicable to us (article 6(1)(c) GDPR);

• The necessity of the processing to serve a legitimate interest of ours that outweighs your privacy interest, which is our interest in measuring website usage, to secure our personnel and assets, to improve our products and services and to promote our products and services to you (article 6(1)(f) GDPR); and

• Your express consent to the processing of your personal data, to the extent no other lawful basis applies (article 6(1)(a) GDPR).

Automated decision making

2Connect does not make decisions based on automated processing on matters that can have (significant) consequences for people. These are decisions taken by computer programs or systems, without involving a person (for example an employee of 2Connect).

How long do we keep personal data

2Connect does not retain your personal data longer than is strictly necessary to achieve the purposes for which your data is collected. We handle the following retention periods for your personal data:
2Connect stores your personal data for an indefinite period. If you object to this, please contact 2Connect at compliance@2-connect.com. Your data will then be deleted immediately.

Sharing of personal data with third parties

2Connect only provides to third parties and only if this is necessary for the execution of our agreement with you or to comply with a legal obligation. The following categories of recipients may have access to your personal data:

• Affiliated group companies, if necessary for compliance, internal reporting, audit or security purposes, or for the performance of an agreement with data subjects;

• Our auditor, legal advisors and other professional service providers engaged by us for compliance reasons;

• Government agencies, courts, supervisory authorities, law enforcement or intelligence agencies, if we have a legal obligation to provide personal data to them;

• IT service providers we use for our systems or for our website, such as our provider for data analytics services and customer engagement;

• Service providers we use to send you e-mails about our products and services;

• Service providers assisting us in executing the agreement with you;

• Third parties buying or interested in buying (a stake in) 2Connect and professional service providers involved.

When transferring personal data to the categories of recipients listed above, we always strive to transfer as little personal data as possible.

The third parties that receive or have access to your personal data may be located outside the European Economic Area (EEA). When transferring Personal Data to countries outside the EEA (so-called 'third countries'), we ensure that appropriate safeguards are in place. In particular, we contractually oblige recipients of personal data to protect your information by using the Standard Contractual Clauses (SCCs) as approved by the European Commission. Prior to such transfers, we will assess on a case-by-case basis – where necessary with the assistance of the recipients in third countries – whether the legislation or practices of the third country undermine the effectiveness of the SCCs. In such cases, we will implement supplementary measures to remedy any gaps in protection and bring it to the level required under EU law.

How we secure personal data

2Connect takes the protection of your data seriously and takes appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. If you feel that your data is not properly secured or there are indications of abuse, please contact our customer service or via info@2-connect.com.

Your rights regarding the processing of your personal data

You have the right to view, correct or delete your personal data. You also have the right to withdraw your consent to the data processing or to object to the processing of your personal data by 2Connect and you have the right to data portability. This means that you can submit a request to us to send the personal data that we have about you in a computer file to you or another organization mentioned by you. You can send a request for access, correction, deletion, data transfer of your personal data or request for cancellation of your consent or objection to the processing of your personal data to compliance@2-connect.com. To ensure that the request for access has been made by you, we ask you to send a copy of your ID with the request. Make your passport photo, MRZ (machine readable zone, the strip with numbers at the bottom of the passport), passport number and Citizen Service Number (BSN) black in this copy. This is to protect your privacy. We will respond to your request as soon as possible, but within four weeks. 2Connect would also like to point out that you have the opportunity to file a complaint with the national supervisory authority, the Dutch Data Protection Authority. This can be done via the following link:

autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons

For processing activities for which a third party, for example one of our partners, is the data controller, you must contact that party directly to exercise your rights in relation to that specific processing activity.

Changes and questions

2Connect may change this Privacy Statement at any time. If this Privacy Statement is changed, the amended Privacy Statement will be made available to you by publishing the amended Privacy Statement on the website.

This Privacy Statement was last updated on October 2025.

If, after reading this Privacy Statement, you have any questions or wish to exercise any right as set out in this Privacy Statement, please do not hesitate to contact us at info@2-connect.com.