Last updated: November 2026
This Privacy Statement explains how New Day Spirits handles personal data collected through this website (newdayspirits.nl). New Day Spirits is a business-to-business trading house for A‑branded spirits, wine and beer, based in Groningen, Netherlands. We process personal data in line with the EU General Data Protection Regulation (GDPR) and Dutch law.
1. Who is responsible
The controller of the personal data described in this statement is New Day Spirits, Groningen, Netherlands. For any question about this statement or about your personal data, please contact us through the contact form on this website.
2. What we collect
When you use the contact form, we receive the information you enter:
- whether you would like to buy or sell;
- your name;
- your company name;
- your country;
- your business email address;
- your message and anything you choose to include in it.
Together with your message we also receive the date and time of sending and the IP address it was sent from. We use these only to protect the form against spam and abuse.
The contact form is intended for business contacts. Please do not include sensitive personal data (such as health data) in your message.
Like every website, our hosting provider keeps standard technical server logs (for example IP address, browser type and the pages requested) to run and secure the website.
3. Why we use it and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Answering your enquiry and following up on a possible business relationship | Legitimate interest (Art. 6(1)(f)) and, where relevant, steps prior to entering into a contract (Art. 6(1)(b)) |
| Keeping a record of business contacts and correspondence | Legitimate interest (Art. 6(1)(f)) |
| Protecting the website and the contact form against spam, fraud and misuse | Legitimate interest (Art. 6(1)(f)) |
| Complying with legal obligations, such as tax and bookkeeping rules once we do business together | Legal obligation (Art. 6(1)(c)) |
Our legitimate interest is to run our trading business and to respond to trade partners who contact us. We do not use your data for automated decision-making or profiling, and we do not sell it.
4. Who receives your data
We do not share your personal data with third parties for their own purposes. We use a small number of service providers who process data on our behalf, under a data processing agreement:
- STRATO (STRATO GmbH, Germany) hosts this website and relays the contact form messages. Data is stored on servers in Germany.
- Microsoft 365 (Microsoft Ireland Operations Ltd) provides our email service. Contact form messages are delivered to our Microsoft 365 mailbox. Microsoft may process data outside the European Economic Area; such transfers are covered by the EU–US Data Privacy Framework and the European Commission’s Standard Contractual Clauses.
We may also share data where the law requires it, for example with authorities that are entitled to request it.
5. How long we keep it
- Contact form messages and related correspondence: up to 2 years after our last contact, unless a business relationship follows.
- If we do business together, data that forms part of our administration is kept for 7 years, as required by Dutch tax law.
- Technical server logs: for a limited period set by our hosting provider, normally no longer than a few weeks.
6. Cookies
This website does not use analytics, advertising or tracking cookies, and it does not load embedded content from social media or video platforms.
- nds_cookie_notice: a functional cookie (also stored in your browser’s local storage) that remembers that you have closed the cookie notice, so it is not shown again. It contains no personal data and is kept for 1 year.
- Only for our own staff who log in to manage the website, the website software sets the necessary login cookies. Visitors who do not log in do not receive these.
You can delete or block cookies in your browser settings at any time. The website keeps working; the cookie notice will simply be shown again.
7. Security
We take appropriate technical and organisational measures to protect your personal data against loss and unauthorised access. The website is only available over an encrypted connection (HTTPS), and access to messages is limited to the people who need it to handle your enquiry.
8. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have incorrect data corrected;
- have your data erased;
- restrict the processing of your data;
- object to processing based on our legitimate interest;
- receive your data in a structured, commonly used format (data portability).
To exercise any of these rights, please send us a request through the contact form on this website. We may ask you to confirm your identity and will respond within one month.
9. Complaints
If you believe we do not handle your personal data correctly, please let us know first so we can try to resolve it. You also have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or with the supervisory authority in the EU country where you live or work.
10. Changes
We may update this Privacy Statement from time to time. The current version is always published on this page, with the date of the last update at the top.