ENGLISH / VERSION 1.0 •
Effective from 27 October 2026
1 Controller and scope
Innovynta B.V., with its statutory seat in Bergen op Zoom, Nonnetje 12, 4616 AD Bergen op Zoom, the Netherlands. Dutch Chamber of Commerce number 42183874. Email info@bbqdisq.com. Website www.bbqdisq.com. BBQDISQ is the product brand; Innovynta B.V. is your seller and contracting party.
This policy covers our website, contact and distributor enquiries, direct sales and business relationships. Sections on orders, marketplaces, fulfilment and marketing apply when you use that feature or we actually engage the service. They do not mean every channel is currently active.
2 Website contact and business enquiries
For enquiries we process your name, email address, message and other information you provide voluntarily. Distributor enquiries may also include company name, role, telephone number and commercial correspondence. Website forms request this information directly from you.
We use this data to answer your enquiry and take steps towards a potential contract at your request. For contacts acting for companies, managing the relationship relies on our legitimate interest in communicating with that company. Information needed for an order or answer is necessary to provide that service; marketing is optional.
Visits involve technical connection data, such as IP address, time, requested page and browser information, processed by the relevant web infrastructure to deliver and secure the site. Our legitimate interest is website availability and security, limited to necessary data.
3 Orders shops marketplaces and fulfilment
For direct orders we process name, delivery and billing address, email, any necessary telephone number, items, amount, payment status and service information to perform the sale. Payments may require necessary transaction and refund details. We do not request full card details by email.
For our sales through bol, Amazon or other marketplaces we receive the order and contact information supplied for fulfilment and service. The platform may also process data independently under its own privacy information. A marketplace order is not a newsletter subscription.
We share only necessary delivery information with the carrier or fulfilment provider actually engaged. If you buy from an independent shop or distributor, that seller manages your purchase data. We receive information only where necessary and lawful, for example for a specific service or safety report.
For direct B2B relationships we process business contact, order, invoice and payment information to perform agreements and manage relationships. The basis is contract performance for individual contracting parties or our legitimate business interest for contacts acting for legal entities.
4 Marketing reviews and social media
If we offer a newsletter, we use your address only with consent. Each advertising email provides an easy unsubscribe option. You may also contact info@bbqdisq.com. Withdrawing consent is not retroactive and does not affect purchases.
On social media we process information you send to us or publicly share with us to respond. The platform also processes data under its own policy. We publish your image, testimonial or identifiable contribution in our advertising only with an appropriate legal basis, such as specific consent, within agreed usage rights.
Non-essential analytics, pixels, remarketing and profiling are activated only after required prior information, consent and settings are in place. A general reference to future marketing does not provide consent. New uses are added to this policy and the cookie policy before activation.
5 Cookies and external fonts
The 27 October 2026 review established a Polylang language cookie and CookieYes for privacy preferences. The cookie policy gives names, purposes and lifetimes and distinguishes current from future uses. No specific analytics or advertising tags were identified on the public pages examined; this is not a guarantee covering every page or server process.
The examined site references Google Fonts through fonts.googleapis.com and fonts.gstatic.com for Inter and Outfit. External delivery can disclose technical request data to Google, including IP address and browser information. Google Fonts does not establish advertising tracking, but external delivery remains data processing. See https://developers.google.com/fonts/faq/privacy and https://policies.google.com/privacy. Any switch to locally hosted fonts will be reflected in this policy.
6 Recipients security and international processing
Where needed, hosting and IT administrators, email services, accounting providers and professional advisers process data for our operations. Actual orders may involve payment, marketplace, delivery and fulfilment providers. We disclose only what is necessary and do not sell personal data. Processors act under appropriate contractual instructions; independent controllers have their own duties.
We disclose data to competent authorities where legally required. Tax records and applicable product-safety duties rely on legal obligations. Necessary data may be retained to handle or establish legal claims based on our legitimate interest in legal protection.
We apply security measures appropriate to the data and risks and limit access to authorised people. Processing outside the EEA requires a valid transfer mechanism and any necessary supplementary assessment. Future providers are engaged only after that assessment. Contact info@bbqdisq.com for information about relevant recipients and safeguards and a copy of applicable safeguards, subject to protecting others’ rights.
7 Retention periods
Enquiries and quotations that do not lead to a contract: at most twelve months after the last substantive contact. Ordinary closed service correspondence without an ongoing claim: at most two years after closure. Where a specific warranty claim, safety matter or proceeding requires longer retention, only necessary information is retained until resolution and expiry of relevant claim periods.
Basic tax records: seven years under applicable tax rules on commencement. Where the VAT One Stop Shop is used: ten years for the records it requires. This is not a general retention period for all website data.
Newsletter data: until unsubscribe or the purpose ends. A limited suppression record remains for as long as needed to prevent unwanted advertising. Consent evidence: while relied on and then at most five years for necessary accountability or disputes, limited to relevant evidence.
Ordinary security logs under our control: at most ninety days unless a specific incident justifies longer investigation. Recovery backups under our control are overwritten on a rolling maximum ninety-day basis; legally required archives are protected separately. Shorter service-specific periods prevail. Cookie periods appear in the cookie policy.
8 Your rights and contact
You may request access, correction, deletion, restriction and, where applicable, portability. You may object to processing based on legitimate interests on grounds relating to your situation, and always object to direct marketing. Consent may be withdrawn at any time. Legal exceptions apply, including mandatory tax retention.
Send requests to info@bbqdisq.com or our postal address. We verify identity with minimal additional information; do not send a full identity document unsolicited. We normally respond within one month. Complex or multiple requests may justify up to two additional months; we explain any extension within the first month.
You may complain to the Dutch Data Protection Authority at www.autoriteitpersoonsgegevens.nl or another competent authority and use statutory legal remedies.
9 Automated decisions and changes
Our policy is that Innovynta does not make solely automated decisions with legal or similarly significant effects. Payment or marketplace providers may carry out independent assessments for their services and provide the required information themselves. Before Innovynta introduces such decisions, we assess the legal basis and safeguards and inform affected individuals.
This version applies from 27 October 2026 to the described practices. New uses are assessed and transparently added beforehand. Changing text does not replace required consent.