Commerant – Privacy Statement

PRIVACY STATEMENT

www.commerant.com

Version 1.0 | May 2026 | GDPR-compliant

1. Who are we?

Commerant (hereinafter: 'Commerant', 'we' or 'us') is a B2B messaging service provider based in the Netherlands. We facilitate the full flow of transactions and messages between organisations. We are responsible for the processing of personal data as described in this privacy statement.

2. Which personal data do we process?

We process personal data that you provide to us yourself or that we collect through your use of our services and website. This includes:

Identification data: name, job title, company name.
Contact data: e-mail address, telephone number, postal address.
Business data: Chamber of Commerce number, VAT number, invoicing details.
Communication data: content of e-mails, contact forms and support tickets.
Website data: IP address, browser type, page visits, cookies (see article 9).
Contract data: agreements, quotations and SLA documents.

3. Why do we process your data?

Purpose	Legal basis (GDPR)	Retention period
Performance of contract / service delivery	Performance of contract (art. 6(1)(b))	7 years (tax)
Quotations and customer communication	Legitimate interest (art. 6(1)(f))	2 years after last contact
Invoicing and accounting	Legal obligation (art. 6(1)(c))	7 years
Newsletter / marketing	Consent (art. 6(1)(a))	Until consent is withdrawn
Website analytics and security	Legitimate interest (art. 6(1)(f))	13 months

4. Do we share your data?

We only share your personal data in the following situations:

With processors that provide services on our behalf (e.g. cloud providers, e-mail software). We conclude a data processing agreement with these parties.
With government authorities where we are legally required to do so.
With your trading partners solely in the context of the message and transaction traffic (B2B messaging) that you have instructed us to handle.

We never sell your personal data to third parties.

5. Transfers outside the EEA

In principle, we do not transfer your data outside the European Economic Area (EEA). Where this is nevertheless necessary, we ensure appropriate safeguards such as the European Commission's standard contractual clauses.

6. Security

Commerant takes appropriate technical and organisational measures to protect your personal data, including: TLS/SSL encryption, access control with two-factor authentication, regular security audits, and restricted access on a need-to-know basis.

7. Your rights

Under the GDPR you have the following rights:

Right of access (art. 15 GDPR): you can request which data we hold about you.
Right to rectification (art. 16 GDPR): you can have inaccurate data corrected.
Right to erasure (art. 17 GDPR): you can request the deletion of your data.
Right to restriction (art. 18 GDPR): you can have the processing temporarily restricted.
Right to data portability (art. 20 GDPR): you can request your data in a commonly used format.
Right to object (art. 21 GDPR): you can object to processing based on legitimate interest.
Right to withdraw consent: where processing is based on consent.

You can submit requests via [email protected]. We respond within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

8. Retention periods

We do not retain your personal data longer than necessary for the purpose for which it was collected, or for as long as legally required. See the table in article 3 for specific periods.

9. Cookies

Our website uses cookies. A detailed cookie overview is included in our Cookie Policy (see separate document). Functional cookies are necessary for the website to work and do not require consent. We only place analytical and marketing cookies after your consent via our cookie banner.

10. Changes

We may update this privacy statement periodically. The most recent version is always available at www.commerant.com/privacy. In the event of material changes, we will inform you by e-mail or via a notice on our website.

11. Contact

For questions about this privacy statement or your personal data, you can contact us via:

E-mail: [email protected] | Website: www.commerant.com | Address: Oder 20, 2491 DC Den Haag