Privacy Policy
1. Introduction
HCPC Brands Europe B.V. ("HCPC Brands", "we", "us", "our"), registered in the Netherlands at Papaverweg 34, 1032 KJ Amsterdam, respects your privacy and is committed to protecting the personal data you share with us. This Policy explains what personal data we collect, why, how we use it, and what rights you have under the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Dutch Implementation Act (UAVG).
2. Data Controller
| Company | HCPC Brands Europe B.V. |
| Address | Papaverweg 34, 1032 KJ Amsterdam, Netherlands |
| privacy@hcpcbrands.com |
3. What Personal Data We Collect
- Name, job title, employer, email, phone, and postal address you provide to us
- Information submitted via our contact form, including product portfolio and regulatory requirements
- Data provided in the context of a Responsible Person mandate, including formulation data and Product Information Files (PIF)
- Automatically collected website data: IP address, browser type, pages visited, and cookies
4. Purposes and Legal Basis
- Performance of a contract — to provide RP, PIF, CPSR, cosmetovigilance, SDS, and UFI/PCN services
- Legitimate interest — to respond to enquiries and maintain business relationships
- Legal obligation — to comply with reporting obligations under Regulation (EC) 1223/2009
- Consent — for non-essential cookies and marketing, withdrawable at any time
5. Data Retention
Regulatory files (PIF, CPSR, cosmetovigilance records) are retained for a minimum of 10 years after the last placement of the product on the EU market, per Regulation (EC) 1223/2009. General enquiry data is retained for up to 2 years unless a contractual relationship is established.
6. Sharing of Personal Data
We do not sell personal data. We may share it with competent authorities (for cosmetovigilance and regulatory reporting), certified toxicologists engaged for CPSR assessments, IT/hosting providers under a Data Processing Agreement, and professional advisors where necessary.
7. Your Rights Under the GDPR
- Right of access, rectification, erasure, restriction, portability, and objection
- Right to withdraw consent at any time
- Right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)
To exercise any of these rights, contact us at privacy@hcpcbrands.com. We respond within one month, as required under the GDPR.
8. Security & Cookies
We implement appropriate technical and organisational measures to protect your data. We do not use tracking, advertising, or analytics cookies on this website. We use one strictly functional cookie to remember your selected language, and load web fonts from Google Fonts. See our Cookie Policy for the complete, transparent overview.
9. Contact
| Data Protection Contact | privacy@hcpcbrands.com |
| Postal Address | HCPC Brands Europe B.V., Papaverweg 34, 1032 KJ Amsterdam, Netherlands |
This Privacy Policy may be updated from time to time. The effective date above indicates the last revision.