Legal

Privacy Policy

How Nexera Trade Europe B.V. collects, uses and protects personal data in connection with Nexera Food Trade, its website, platform and international B2B trade activities.

Effective date: 19 September 2026

Controller

1. Who Is Responsible for Your Data?

Data Controller

Nexera Trade Europe B.V. is the data controller for personal data processed through Nexera Food Trade, unless another party is expressly identified as the controller for a particular processing activity.

Legal entity
Nexera Trade Europe B.V.
Commercial brand
Nexera Food Trade
Country
Netherlands
Email
info@nexerafoodtrade.com
Website
www.nexerafoodtrade.com

If a Data Protection Officer is formally appointed in the future, the relevant contact details will be published here.

Application

2. Scope of This Policy

This Privacy Policy applies when individuals interact with Nexera Food Trade through:

  • the public website, RFQ and contact forms;
  • supplier applications and commercial representative processes;
  • buyer or supplier portals and commercial enquiries;
  • email and other business communications;
  • offers, transaction processes and document uploads; and
  • AI-assisted website or platform functions.

It may apply to prospective and existing customers, suppliers, representatives, business partners, employees or contact persons of business counterparties, and website or portal users.

Although Nexera primarily operates in a B2B environment, information relating to an identifiable individual remains personal data.

This policy is intended to reflect Regulation (EU) 2016/679 (GDPR), the Dutch GDPR Implementation Act (UAVG), applicable Dutch electronic communications and cookie rules, and other applicable Dutch and EU legal obligations.

Data Categories

3. Personal Data We May Process

Contact & Identity Data

Name, job title, employer or company, business email, telephone number, business address, preferred language, and portal or account information.

Business & Trade Data

Product requirements, specifications, quantities, purchasing schedules, destination and delivery information, packaging requirements, commercial communications, RFQs, quotations, LOIs, offers, contracts, deal information, supplier applications, and uploaded commercial documents.

Financial & Transaction Data

Where necessary for a commercial transaction, this may include payment information, bank-related transaction information, invoicing data, trade references, credit or payment-related information, and information required to structure documentary payment arrangements.

Compliance & Due-Diligence Data

Depending on the transaction and applicable requirements, this may include company-registration information, beneficial ownership or authorised representative information where required, supplier and certification information, sanctions or restricted-party screening results where applicable, export or import information, and commercial verification documents.

Technical & Usage Data

Depending on the website and platform configuration, this may include IP address, browser and device information, login or session information, security logs, page interactions, timestamps, and cookie or analytics information.

The separate Cookie Policy explains cookie technologies in greater detail.

Sources

4. Where We Obtain Personal Data

Personal data may be obtained:

  • directly from you or from the company you represent;
  • from buyers, suppliers, commercial counterparties or authorised commercial representatives;
  • from documents submitted through the platform;
  • from publicly available company or professional registers; and
  • from professional service providers where legally permitted.

Where GDPR requires information about indirectly obtained data, Nexera will provide the relevant transparency information.

Purposes & Legal Bases

5. Why We Process Personal Data

Enquiries, RFQs & Commercial Discussions

Purpose: to understand commercial requirements, respond to enquiries, assess supply opportunities, prepare quotations or proposals, and communicate regarding potential transactions.

Legal basis: Article 6(1)(b) GDPR where processing is necessary at an individual's request before entering into a contract or for contract performance; and Article 6(1)(f) GDPR for legitimate B2B commercial interests where the individual acts for a company.

Contract & Transaction Execution

Purpose: to manage commercial agreements, orders, documentation, logistics, payment milestones, transaction communications and records.

Legal basis: contract performance where applicable and/or legitimate interests in conducting and administering B2B trade.

Supplier & Partner Management

Purpose: to assess applications, maintain supplier and commercial-partner relationships, evaluate opportunities, and manage portal access and communications.

Legal basis: legitimate interests and, where applicable, contractual necessity.

Legal, Accounting & Regulatory Requirements

Purpose: to comply with applicable accounting and tax obligations, maintain legally required records, comply with applicable customs, trade or regulatory obligations, and respond to lawful authorities.

Legal basis: Article 6(1)(c) GDPR where an applicable legal obligation exists.

Security, Fraud Prevention & Risk Management

Purpose: to protect accounts and systems, investigate misuse, verify counterparties where appropriate, prevent fraud and protect commercial interests.

Legal basis: primarily Article 6(1)(f) GDPR, subject to the required balancing of interests.

Marketing & Optional Communications

Optional marketing communications rely on consent where legally required, or another lawful basis only where applicable law permits. Individuals may unsubscribe or object to direct marketing at any time. RFQ and supplier applicants are not subscribed to marketing merely because they submit an application or enquiry.

Technology

6. AI-Assisted Features

AI-Assisted Processing

Nexera Food Trade may provide AI-assisted functions that help users structure an RFQ, extract information from uploaded product documents, prepare a supplier application, classify or organise commercial information, or assist internal workflow and review.

Information entered into an AI-assisted feature may be processed by technology service providers acting under applicable contractual arrangements. Users should avoid submitting personal information that is not necessary for the commercial purpose.

Nexera does not use AI alone to make decisions that produce legal or similarly significant effects on individuals. Commercial acceptance, supplier approval and transaction decisions remain subject to human review. If this changes, this notice will be updated.

Recipients

7. Data Sharing

Who May Receive Personal Data?

Nexera does not sell personal data. Where necessary for the relevant purpose, information may be shared with:

  • buyers or suppliers involved in the relevant transaction;
  • logistics and freight providers, customs or trade professionals;
  • inspection or laboratory providers;
  • banks, payment-service providers and insurers where relevant;
  • legal, accounting and professional advisers;
  • hosting, cloud, file-storage and IT service providers;
  • communication, email, AI or software service providers used by the platform; and
  • competent public authorities where legally required.

Information is shared only to the extent reasonably necessary for the applicable purpose.

Confidentiality

8. Commercial Confidentiality

Commercial Information

Nexera treats commercial information such as specifications, pricing, volumes, counterparties and transaction intentions as confidential business information where appropriate.

Information may need to be disclosed to relevant counterparties or professional service providers where necessary to assess, structure or execute the requested transaction.

Nexera seeks to limit such disclosure to information reasonably necessary for the commercial purpose and subject to applicable contractual and confidentiality arrangements.

Retention

9. Data Retention

How Long We Keep Data

Nexera retains personal data only for as long as necessary for the purpose for which it was collected, or longer where applicable law requires it.

Statutory Business & Accounting Records

Records forming part of the statutory Dutch business administration may be retained for the legally required period, generally at least seven years, and longer where a specific statutory requirement applies.

Active Commercial Relationships

Relevant commercial data may be retained for the relationship and afterwards where necessary for legal, accounting, contractual, claims or compliance purposes.

Enquiries & Uncompleted RFQs

Data from enquiries that do not lead to a transaction is retained only for a reasonable follow-up period according to Nexera's documented retention schedule.

Supplier / Partner Applications

Application information is retained only as long as reasonably necessary to evaluate the application and relevant future opportunities, unless a continuing relationship or legal requirement justifies longer retention.

Technical / Security Data

Technical and security data are retained according to the applicable security and platform retention schedule. When personal data are no longer necessary and no legal retention obligation applies, they are deleted or anonymised.

Transfers

10. International Data Transfers

Processing Outside the EEA

Nexera Trade Europe B.V. is established in the Netherlands. Some technology, communications, cloud or professional-service providers may process personal data outside the European Economic Area.

Where personal data are transferred outside the EEA, Nexera must apply an appropriate GDPR transfer mechanism where required, such as a European Commission adequacy decision, Standard Contractual Clauses, or another appropriate safeguard under Article 46 GDPR.

Protection

11. Security

Data Security

Nexera applies appropriate technical and organisational measures intended to protect personal data against unauthorised access, loss, alteration or disclosure. No method of transmission or storage can guarantee absolute security.

Online Technologies

12. Cookies & Analytics

Cookies

The website may use functional, analytics or other cookies and similar technologies. Functional cookies may be used where necessary for website operation.

Where Dutch law requires prior consent, particularly for tracking or similar non-essential technologies, those technologies must not be activated before valid consent is obtained. Users must be able to refuse non-essential cookies without losing normal access to the website.

Current details and controls are provided in the Cookie Policy and through the cookie-consent interface.

Data Subjects

13. Your GDPR Rights

Your Rights

Subject to the conditions of the GDPR, individuals may have the right to:

  • access their personal data;
  • rectify inaccurate or incomplete data;
  • erase personal data where applicable;
  • restrict processing;
  • data portability where applicable;
  • object to processing based on legitimate interests;
  • object at any time to direct marketing;
  • withdraw consent at any time where processing relies on consent; and
  • lodge a complaint with a competent supervisory authority.

Individuals may lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens.

Requests may be sent to info@nexerafoodtrade.com. Nexera will respond without undue delay and normally within one month. Where GDPR permits because of complexity or the number of requests, this may be extended by up to two additional months, with notice to the individual.

Nexera may request reasonable information to verify the requester's identity where necessary.

Article 22

14. Automated Decision-Making

Automated Decisions

Nexera may use automation and AI-assisted tools to support internal workflow, classification and commercial analysis.

Nexera does not currently make decisions based solely on automated processing that produce legal effects or similarly significantly affect an individual within the meaning of Article 22 GDPR.

Audience

15. Children

Children

Nexera Food Trade provides B2B services and is not directed at children. We do not intentionally seek to collect personal data from children through our commercial services.

Changes

16. Changes to This Policy

Updates

Nexera may update this Privacy Policy where processing activities, service providers, technologies or legal requirements change. The current version and effective date will be published on this page. For material changes, additional notice may be provided where appropriate.