Privacy Policy
How DANNALAB B.V. collects, uses, and protects your personal data in accordance with the General Data Protection Regulation (GDPR).
Data Controller
DANNALAB B.V.
Wethouder Beversstraat 185
7543 BK Enschede
The Netherlands
Chamber of Commerce: 08215921 (Enschede)
Email: info@dannalab.com
Phone: +31 (0)6 41 434 983
What Personal Data We Collect
We may collect and process the following categories of personal data:
- Contact data: Name, email address, phone number, company name, and address when you contact us, request a quote, or use our services
- Technical data: IP address, browser type, device information, and usage data when you visit our website (subject to your cookie consent)
- Project-related data: Information necessary to perform analytical testing, including sample descriptions, specifications, and project communications
Purposes and Legal Basis
We process personal data for the following purposes and legal bases:
- Performance of a contract: To deliver analytical services, respond to inquiries, and manage client relationships
- Legitimate interests: To improve our website, analyse usage (with consent), and conduct business operations
- Consent: For marketing communications and non-essential cookies (e.g. analytics) where you have given explicit consent
- Legal obligations: To comply with applicable laws, regulations, and quality standards (e.g. cGMP documentation)
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including:
- Project and client data: retained for the duration of the business relationship and as required for regulatory and legal compliance
- Website analytics: aggregated data retained according to our analytics provider's policies; raw data minimised
- Correspondence: retained as needed for business and compliance purposes
Your Rights Under GDPR
Under the General Data Protection Regulation, you have the right to:
- Access: Request a copy of the personal data we hold about you
- Rectification: Request correction of inaccurate or incomplete data
- Erasure: Request deletion of your data where applicable
- Restriction: Request restriction of processing in certain circumstances
- Data portability: Receive your data in a structured, commonly used format where technically feasible
- Object: Object to processing based on legitimate interests or for direct marketing
- Withdraw consent: Withdraw consent at any time where processing is based on consent
- Complain: Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)
To exercise any of these rights, please contact us at info@dannalab.com.
Sharing and Transfers
We do not sell your personal data. We may share data with:
- Service providers (e.g. hosting, analytics) who process data on our behalf under data processing agreements
- Regulatory or legal authorities when required by law
Where data is transferred outside the EEA, we ensure appropriate safeguards (e.g. adequacy decisions or Standard Contractual Clauses) are in place.
Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, in line with industry standards and regulatory requirements.
Changes to This Policy
We may update this privacy policy from time to time. The latest version will always be available on this page, with the date of last update indicated below.
Last updated: March 2026