Privacy policy

This privacy policy explains how personal data is processed in connection with the public MIP6 Clean website and correspondence about the application.

1. Who is responsible?

The controller is Solutions Group Holding B.V., at Burgemeester Roelenweg 11; 8021 EV Zwolle, registration number 99109514. Privacy contact: office@mip6clean.com. Data protection officer details, if one has been appointed: If Solutions Group Holding B.V. has not appointed a Data Protection Officer, you can contact us regarding personal data protection matters at office@mip6clean.com..

2. Data covered by this policy

When you contact us, we may receive your name, business email, company name, optional phone number and message. Infrastructure providers may process IP addresses, request times, browser information and technical logs. Actual logging scope: When using the website, technical data necessary to ensure the security and proper operation of the website may be processed, including in particular the IP address, date and time of the connection, requested URL, server response, browser and device information, and diagnostic data related to errors and security.. Do not send passwords, employee records, bank details or special-category data through the form.

3. Purposes and legal bases

An enquiry from an individual seeking to enter into a contract may rely on Article 6(1)(b) GDPR where it is a step at that individual’s request before entering a contract. Contact with a business representative and ordinary correspondence may rely on the legitimate interest in business communication, Article 6(1)(f). Security and abuse prevention may rely on the same provision following a balancing assessment. Specific legal obligations rely on Article 6(1)(c). The final purposes, bases and legitimate interests: Personal data may be processed for the purpose of responding to enquiries about MIP6 Clean, conducting business communication, preparing a response or offer, taking steps prior to entering into a contract, ensuring the security and proper operation of the website, and establishing, exercising or defending legal claims. Depending on the situation, processing may be based on Article 6(1)(b) GDPR — taking steps prior to entering into or performing a contract, Article 6(1)(f) GDPR — the legitimate interests of the controller, including handling enquiries, system security and protection against legal claims, and, where required by law, Article 6(1)(c) GDPR..

4. Recipients and service providers

Authorised personnel and hosting, email and technical support providers may process data as necessary for their services. Actual providers, roles and categories of data disclosed: Data may be processed by entities providing services necessary for the operation of the website and communication, including hosting providers, email service providers, technical service providers, backup service providers and parties responsible for maintaining WordPress. The scope of data may include contact details provided by the user, the content of correspondence and technical data related to the use of the website. The final list of service providers should reflect the actual technical. Appropriate processor arrangements are required. Sending an enquiry does not by itself permit disclosure of your data to advertisers.

5. Transfers outside the EEA

Specify whether providers or their subcontractors process data outside the European Economic Area. Countries, transfer grounds, safeguards and how to obtain a copy: If any service provider processes personal data outside the European Economic Area, such transfer will take place only on the basis of a mechanism permitted under the GDPR, for example an adequacy decision or Standard Contractual Clauses approved by the European Commission. The actual scope of any transfers must be confirmed based on the services and providers actually used.. Do not claim all data stays in the EU without checking agreements and subcontractors.

6. Retention

Correspondence: Correspondence relating to enquiries and contact with MIP6 Clean is retained for as long as necessary to handle the relevant matter and, as a rule, for no longer than 24 months after the end of the contact, unless longer retention is required by law, a contract, or for the establishment, exercise or defence of legal claims.. Technical logs: Technical logs are retained for as long as necessary for security, diagnostics and the proper operation of the website. The final retention period must be confirmed based on the settings of the hosting and technical infrastructure.. Backups: Backups may be retained for a limited period in accordance with the configuration of the backup system. The exact retention period must be confirmed based on the hosting settings and the backup solution in use.. Data required for legal claims: Data necessary for the establishment, exercise or defence of legal claims may be retained until the expiry of the applicable limitation period or until the final conclusion of proceedings related to the matter concerned.. Where a fixed period is not possible, provide understandable criteria. The supplied plugin uses a short-lived pseudonymised form-attempt counter that expires after 10 minutes. It does not store message content in the WordPress database; messages are passed to the email system. Other plugins or email settings may change this and require separate review.

7. Your rights

Subject to the GDPR’s conditions, you have rights of access, rectification, erasure and restriction. Portability applies in the circumstances provided by law, particularly automated processing based on consent or a contract. You may object to legitimate-interest processing on grounds relating to your particular situation. Where processing is based on consent, you may withdraw it without affecting earlier lawfulness. Send requests to the contact in section 1. We normally respond within one month; any permitted extension and its reasons are communicated in line with the GDPR. Proportionate identity verification may be requested without collecting excessive data.

8. Supervisory authority complaints

You may complain to a supervisory authority, particularly in your habitual residence, place of work or place of the alleged infringement. In the Netherlands this is the Autoriteit Persoonsgegevens; in Poland it is the Prezes Urzędu Ochrony Danych Osobowych. Contacting the controller does not remove your right to complain.

9. Voluntary provision, profiling and marketing

Providing contact data is voluntary, but we cannot handle an enquiry through the form without the required details. Sending a message is not a newsletter subscription or marketing consent. The supplied package contains no advertising system, profiling or solely automated decisions producing legal effects. Final deployed-website position: No automated decision-making producing legal effects for users takes place on the public MIP6 Clean website. If analytical, advertising, remarketing or profiling tools are introduced in the future, the privacy policy and consent mechanism will be updated before such processing begins..

10. Cookies and third-party services

The supplied theme loads no analytics, advertising pixels, external fonts or embedded maps and videos. The full WordPress installation must be reviewed before publication. Cookie details, providers, durations and withdrawal of consent belong on the Cookies page.

11. Website versus application

The website form is not intended for operational client, staff, invoice or bank data. Application use requires separate privacy information. Identify when the customer company is the controller, when the supplier is a processor, and when the supplier acts as a controller itself. Where applicable, a processing agreement and subprocessor list are needed. Application operator and documents: This privacy policy applies to the public MIP6 Clean website. Use of the MIP6 Clean application may involve different data protection roles, including a controller-processor relationship between MIP6 Clean and the company using the platform. The processing of personal data within the application, the terms of use and any data processing agreement are governed by separate documents..

12. Document version

Effective date: 21-09-2029. Significant changes will be communicated as appropriate. Before publication, the controller should check every description against the actual website and supplier arrangements.