Version: 5 October 2025
1. Who we are (data controller)
RENUBOX® is a trade name of
Van de Velde Packaging-Dozenhal BV
Harderwijkerweg 140 B
3852 AH Ermelo
The Netherlands
Pick-up location: Kalkoenweg 42, 3851 SC Ermelo
Chamber of Commerce: 08160274 · VAT: NL818038871B01 · IBAN: NL75 INGB 0672 0228 18
Privacy email: privacy@renubox.com
We are responsible for the processing of your personal data within the meaning of the General Data Protection Regulation (GDPR).
2. What data we process and why
We only process personal data that is necessary for the purposes listed below.
The legal basis for each purpose is provided in accordance with Article 6 GDPR:
Orders and delivery
For processing and shipping orders, including customer accounts, address and contact details, order status and payment information.
→ Legal basis: contract performance (b) and legal obligation (c)
Customer service & contact
For answering questions by email, phone or contact form.
→ Legal basis: contract performance or legitimate interest (b/f)
Newsletters & email marketing
Only after registration with double opt-in. You can unsubscribe at any time using the link at the bottom of each email.
→ Legal basis: consent (a)
Website analytics and statistics (GA4)
To improve our website and services. This is only carried out if you have given consent through the cookie banner.
→ Legal basis: consent (a)
Fraud prevention and security
To protect our systems and data.
→ Legal basis: legitimate interest (f)
Credit check
For certain orders, we may carry out a creditworthiness check through an external service provider to reduce payment risks. The results are always reviewed manually; no automated decision-making takes place.
→ Legal basis: legitimate interest (f)
3. Origin of data
We receive data that you provide to us directly (e.g. when placing an order or making contact). Technical usage data (such as IP address and browser settings) are collected automatically when you visit our website.
4. Recipients and processors
We only share data when necessary for our services or where required by law, including with:
• E-commerce platform: BigCommerce (SaaS)
• CRM: Odoo
• Payment providers: Stripe, PayPal
• Credit check: Creditsafe
• Logistics: Routelogic, Odoo
• Carriers: Rabelink, Route7, Pegie trans, HTH Trnasport, DPD
• Email/newsletter software: Mailchimp
• Analytics / Tag management: Google Analytics 4 (Google Ireland Ltd.)
5. Data transfers outside the EU/EEA
Some providers (e.g. Google) use sub-processors outside the EU, such as in the United States. In such cases, we rely on EU Standard Contractual Clauses (SCCs) and additional safeguards where required. More information can be found in the privacy policies of the respective providers and in the cookie banner.
6. Cookies and consent (Cookiebot)
We use cookies and similar technologies.
• Functional cookies are necessary for a properly functioning webshop.
• Analytical and marketing cookies are only used if you give your consent.
We use Cookiebot (Cybot A/S, Denmark) to manage cookie consent.
When you first visit our site, a cookie banner will appear that allows you to select which categories of cookies you accept. You can change or withdraw your consent at any time using the banner at the bottom of the website.
The banner also shows an up-to-date list of all cookies and tracking technologies active on our site, including the provider, purpose, and storage period. Non-essential cookies are only set if you have given consent.
7. Google Analytics 4 (only with consent)
We use Google Analytics 4 with IP anonymisation to collect website usage statistics. Google Ireland Ltd. is our data processor. We have signed a data processing agreement with Google.
Data may be processed outside the EU under SCCs (see §5).
Analytics will only be activated if you have given your consent through Cookiebot. You can change your settings at any time.
8. Retention periods
We do not keep personal data longer than necessary. Indicative periods:
• Order and invoice data: 10 years (statutory tax retention)
• Customer accounts: as long as your account is active (or until you request deletion)
• Contact requests: approx. 12 months after completion
• Newsletter data: until you unsubscribe (and shortly thereafter to record your preference)
• Log and security data: as short as possible, unless required for investigation or legal obligations
9. Security
We implement appropriate technical and organisational measures to protect your data, including TLS/HTTPS encryption, access controls and regular security reviews.
10. Your rights
You have the following rights under the GDPR:
• Access to your personal data
• Rectification of inaccurate data
• Erasure of your data
• Restriction of processing
• Data portability
• Objection to certain processing activities
• Withdrawal of consent (with future effect)
You can exercise your rights by sending a request to privacy@renubox.com. We will respond within the legal timeframe.
If you believe that we are not handling your data correctly, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). We would appreciate it if you contacted us first so we can address your concerns.
11. Mandatory data
Certain personal data (such as name, address and email) are required for placing and delivering orders. Without this data, we cannot process your order.
For other purposes (e.g. newsletters, analytics), providing data is voluntary.
12. Changes
We may amend this privacy policy if our services or legal requirements change. The most recent version is always available on this page.