Privacy statement

How SiriusMast, a trade name of Indutrade BV, handles your personal data.

We value the protection of your personal data. Below we explain which personal data we process when you visit our website or place an order, for which purpose and on which legal basis, and what rights you have.

Controller

The controller responsible for processing your personal data is:

Indutrade BV (trading as SiriusMast)
Graaf van Solmsweg 46A
5222 BP 's-Hertogenbosch
The Netherlands
Telephone: +31 73 621 2055
Email: in**@********st.com
Chamber of Commerce (KvK): 17190010
VAT number: NL816169937B01

1. Access data and hosting

You can visit our website without providing any personal data. Each time you visit, the web server automatically stores access data such as the requested file, the date and time of the visit, the volume of data transferred, your browser type and version, your operating system, the referrer URL and your device's IP address. We process these data solely to ensure the secure and uninterrupted operation of the website, on the basis of our legitimate interest (Article 6(1)(f) GDPR). Access data are deleted after 7 days at the latest.

1.1 Hosting

Our website is hosted by Cloud86, based in the Netherlands, which acts on our behalf (processor). Cloud86's servers are located in the Netherlands, within the European Union. We have concluded a data processing agreement with this party. No data is transferred outside the EU/EEA for hosting purposes.

2. Processing for contract handling

When you place an order, we process the data you provide, such as your name, address, email address, telephone number and order details, in order to perform the agreement (Article 6(1)(b) GDPR). Mandatory fields are marked as such because we need those data to process your order. Our webshop runs on WooCommerce (WordPress). After the agreement has been fully performed, we retain these data for as long as required by the applicable tax and commercial retention periods (Article 6(1)(c) GDPR).

3. Customer account

If you choose to create a customer account, we process your data to make future orders easier, on the basis of your consent (Article 6(1)(a) GDPR). You can delete your account at any time. After deletion we erase your data, unless we are legally required to retain it longer.

4. Contact

When you contact us via the contact form, by email or by telephone, we process the data you provide in order to handle your request (Article 6(1)(b) or (f) GDPR). Our contact and quotation forms run through HubSpot, whose data is processed within the data centre in the European Union. After your request has been fully handled, we erase your data unless a statutory retention obligation applies.

5. Shipping

To perform the agreement, we pass the necessary data, such as your name and delivery address, to the carrier responsible for delivery, insofar as this is required to deliver the ordered goods (Article 6(1)(b) GDPR).

6. Payment

To process payments in our webshop we work with payment service providers. Depending on the payment method you choose, we pass the data required for the payment to the selected payment service provider. We use Mollie B.V., based in Amsterdam (the Netherlands). Part of the data is collected directly by the payment service provider, whose own privacy statement then applies.

7. Cookies and other technologies

To make visiting our website attractive and to enable certain functions, we use cookies and other technologies. Cookies are small text files stored automatically on your device. Some are deleted at the end of your browser session (session cookies), others remain stored for longer (persistent cookies). For strictly necessary technologies no consent is required (Article 6(1)(f) GDPR). For technologies that are not strictly necessary we ask for your consent in advance (Article 6(1)(a) GDPR), which you can withdraw at any time with effect for the future.

7.1 Consent management (Cookiebot)

To manage your consent for cookies and other technologies we use Cookiebot, a service of Usercentrics A/S (formerly Cybot A/S), Havnegade 39, 1058 Copenhagen, Denmark. On our behalf, this party records which consent you have or have not given, in order to demonstrate your choice. Processing takes place within the EU/EEA.

7.2 Forms via HubSpot

Our contact and quotation forms are provided via HubSpot. When you complete a form, the data you enter is processed to handle your request. Processing takes place within HubSpot's data centre in the European Union.

7.3 Google services

Subject to your consent (Article 6(1)(a) GDPR), we use Google Analytics and Google Tag Manager from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, to analyse how our website is used. Data may be transferred to Google LLC in the United States, subject to appropriate safeguards such as the European Commission's standard contractual clauses. Your IP address is truncated (anonymised) beforehand.

8. Social media

We are present on social media. When you visit our pages on these platforms, the relevant provider processes your data as an independent controller. For the way in which these platforms process your data and the options to adjust your privacy settings, please refer to the privacy statements of the respective providers.

9. Transfers to countries outside the EU

Some of the services we use may transfer personal data to countries outside the European Union and the European Economic Area, including the United States. This concerns in particular Google (Google Analytics and Google Tag Manager) and the social media platforms mentioned. In such cases we ensure appropriate safeguards, for example through the European Commission's standard contractual clauses or an adequacy decision.

10. Retention periods

We do not retain your personal data longer than necessary for the purposes for which we process it, or for as long as we are legally required to. A statutory retention period of seven years applies to administrative and tax data. After that we erase your data.

11. Your rights

Under the GDPR you have the following rights regarding your personal data:

the right of access (Article 15 GDPR);
the right to rectification (Article 16 GDPR);
the right to erasure (Article 17 GDPR);
the right to restriction of processing (Article 18 GDPR);
the right to data portability (Article 20 GDPR);
the right to object to processing (Article 21 GDPR);
the right to withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal (Article 7(3) GDPR).

Right to object

Where we process your data on the basis of a legitimate interest, you may object to that processing on grounds relating to your particular situation. This does not apply where processing is carried out for direct marketing purposes; in that case we will no longer process your personal data for that purpose.

12. Complaint to the supervisory authority

If you believe that we are not processing your personal data correctly, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl. You may also lodge a complaint with the supervisory authority in your own country.

13. Contact

For questions about the collection, processing or use of your personal data, or to exercise your rights, you can contact us:

14. Changes to this privacy statement

We may amend this privacy statement from time to time, for example when we use new services or when laws or regulations require it. The current version is always available on this page. Last updated: 3 July 2026.