Privacy Policy and Cookie Policy
Last updated: March 10th, 2026
1. Introduction
This Privacy Policy explains how CNC Grondstoffen B.V. and its affiliated companies (collectively referred to as “CNC”, “we”, “our”, or “us”) collect, use, store, and protect personal data when users visit the website www.cncsubstrates.com (the “Website”).
CNC respects the privacy of all users and processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the applicable Dutch data protection legislation (Algemene Verordening Gegevensbescherming – AVG).
We are committed to processing personal data in a transparent, secure, and responsible manner.
2. Data Controller
The data controller responsible for processing personal data through this Website is:
CNC Grondstoffen B.V.
Driekronenstraat 6, 6596 MA Milsbeek
The Netherlands
Email: info@cncgrondstoffen.nl
For the purposes of this Privacy Policy, references to CNC include CNC Grondstoffen B.V. and its affiliated companies within the CNC group.
3. Personal Data We May Collect
We may collect and process the following categories of personal data.
Information provided by users
When users contact us through the Website, request information, or submit a form, we may collect:
- name
- company name
- email address
- phone number
- country or location
- any information provided in messages or inquiries
Technical and usage data
When users access the Website, certain technical information may automatically be collected, such as:
- IP address
- browser type and version
- device type
- pages visited
- time and duration of visits
- referring websites
This information is generally collected through cookies and analytics tools.
4. Purposes of Data Processing
Personal data may be processed for the following purposes:
Communication and customer support
To respond to inquiries, technical questions, or commercial requests submitted through the Website.
Business communication
To provide information about our products, cultivation solutions, and services relevant to professional growers or business partners.
Website functionality
To ensure the Website functions correctly and to maintain security and technical performance.
Website improvement and analytics
To analyze how visitors use the Website in order to improve its usability, structure, and content.
Marketing and communication
Where permitted by applicable law, we may use certain data to inform users about relevant products, services, or industry information.
Users may opt out of such communications at any time.
5. Legal Basis for Processing
Under the GDPR, CNC processes personal data on one or more of the following legal bases:
Legitimate interest
To operate and improve the Website, respond to inquiries, and communicate with business contacts.
Consent
Where cookies or marketing communications require explicit consent.
Contractual necessity
Where data processing is required in order to respond to a request for products, services, or information.
Legal obligations
Where processing is required to comply with applicable laws and regulations.
6. Data Sharing and Third Parties
CNC does not sell personal data.
Personal data may be shared only when necessary with:
- IT service providers hosting or maintaining the Website
- analytics providers helping us understand website usage
- marketing or communication service providers
- affiliated companies within the CNC group
- public authorities where legally required
All service providers are required to process data in accordance with GDPR and appropriate data protection safeguards.
7. Data Retention
Personal data is retained only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required by law.
Typical retention periods may include:
- inquiry data: retained for the duration required to respond and manage the request
- technical website data: retained according to analytics or security requirements
- marketing communication data: retained until the user withdraws consent
8. Data Security
CNC takes appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or disclosure.
These measures include:
- secure hosting environments
- restricted access to personal data
- encrypted communications where appropriate
- regular monitoring of systems for security vulnerabilities
While we take reasonable measures to protect personal data, no internet transmission can be guaranteed to be completely secure.
9. User Rights Under GDPR
Users have the following rights under the GDPR:
Right of access
To request information about the personal data we hold.
Right to rectification
To request correction of inaccurate or incomplete personal data.
Right to erasure
To request deletion of personal data where legally permitted.
Right to restriction of processing
Right to data portability
Right to object to processing
Right to withdraw consent
Requests may be submitted to the contact address listed in Section 2.
Users also have the right to lodge a complaint with the relevant supervisory authority, such as the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
10. Cookies Policy
What are cookies
Cookies are small text files stored on a user’s device when visiting a website. They help websites function properly and provide information to website owners.
Types of cookies used on this Website
Functional cookies
Functional cookies are necessary for the proper operation of the Website. These cookies enable basic functionality such as page navigation, security features, and form submission.
Without these cookies, the Website may not function correctly.
Analytics cookies
Analytics cookies help us understand how visitors interact with the Website by collecting anonymized information about page visits, traffic sources, and usage patterns.
This information helps improve the Website structure and user experience.
Marketing cookies
Marketing cookies may be used to understand visitor interests and provide relevant information about our products and services.
These cookies may also be used by third-party marketing tools.
Marketing cookies are placed only where required consent has been obtained.
11. Managing Cookies
Users can manage or disable cookies through:
the cookie consent banner presented when visiting the Website
browser settings that allow cookies to be blocked or deleted
Please note that disabling certain cookies may affect Website functionality.
12. Third-Party Services
The Website may use third-party tools for analytics or marketing purposes. These providers may process certain technical information in accordance with their own privacy policies.
Examples may include analytics or marketing platforms used to measure Website performance.
13. Changes to This Privacy Policy
CNC may update this Privacy Policy from time to time in order to reflect changes in legal requirements, technology, or business practices.
The updated version will be published on the Website with the revised date.
Users are encouraged to review this policy periodically.
14. Contact
For any questions regarding this Privacy Policy or the processing of personal data, please contact:
CNC Grondstoffen B.V.
Driekronenstraat 6, 6596 MA Milsbeek
The Netherlands
Email: info@cncgrondstoffen.nl