Skip to content

Privacy policy

Last updated 10 October 2026.

This privacy policy covers plastilose.nl and the emails you send us. Plastilose Operations B.V. is the controller of your data. Our address is Alexander Fleminglaan 1, 2613 AX Delft (KvK 99101149, btw-nummer NL868797212B01). Questions? Email info@plastilose.nl.

Forms on the site

For each form, you can read below what data we ask for, why and on what legal basis. We need the fields marked (required) to be able to reply. You may leave the other fields empty. What you send through the waitlist, the contact form, the deck request or the application form is also stored in WordPress, the system behind this site (as an Elementor form submission). We keep those submissions in WordPress for 6 months, and applications for 4 weeks. Then we delete them. With every submission, Elementor also stores your IP address and your browser. We do not need them. We delete them straight after you send the form, at the latest within a day.

Waitlist

  • What data. Your name, your email address, your organisation and roughly how many medicine cups you use a year. You may add your job title and a message.
  • Why. To put you on the waitlist, send you welcome emails and contact you about sample cups and pilots.
  • The newsletter. Below the form there is a separate tick box: Also send me the newsletter. It is unticked by default. Only if you tick it do we also send you the newsletter. The legal basis for that is consent, as for the newsletter below. Without the tick you only receive emails about the waitlist.
  • Legal basis. Legitimate interest. You ask us to get in touch, and we want to talk to hospitals and care organisations that are interested.
  • Where it goes. Our mailbox (Google Workspace), WordPress, Mailchimp and Brevo. Brevo sends the welcome emails.
  • How long. Up to 2 years after the last contact.

Founding Partners

There is no separate form for Founding Partners. You sign up through the waitlist or the contact form, and the data, purpose and legal basis of that form apply. We then also use your data to talk to you about joining as a Founding Partner. We keep it for up to 2 years after the last contact.

Contact form

  • What data. Your email address. You may add your name and a message. This form is on the contact page and on the homepage.
  • Why. To answer your question. The form on the homepage also sends you a thank-you email.
  • Legal basis. Legitimate interest. We want to be able to answer the questions you ask us.
  • Where it goes. Our mailbox (Google Workspace) and WordPress.
  • How long. 1 year after your question has been handled.

Deck request

  • What data. Your email address. You may add your name and a message about who you are.
  • Why. To contact you for a short personal conversation. We do not send the deck automatically. We only share it after that conversation.
  • Legal basis. Legitimate interest. We want to know who we share our plan with.
  • Where it goes. Our mailbox (Google Workspace) and WordPress.
  • How long. Up to 2 years after the last contact.

Job application

  • What data. Your email address. You may add your name, a message and your CV.
  • Why. To assess your application and contact you. You receive a confirmation email.
  • Legal basis. Legitimate interest.
  • Where it goes. Our mailbox and documents (Google Workspace) and WordPress.
  • How long. 4 weeks after the application procedure ends. In WordPress we delete your application and your CV 4 weeks after we receive them. If you give us permission, we keep your data for 1 year, for a possible future vacancy.

Newsletter

  • What data. Your email address.
  • Why. To send you the newsletter. You sign up with the form at the bottom of every page, or with the tick box on the waitlist.
  • Legal basis. Consent. You confirm your sign-up by email. You can unsubscribe at any time, using the link in every newsletter.
  • Where it goes. Mailchimp.
  • How long. Until you unsubscribe.

When you email us

  • What data. Your name, your email address and your message, for example when you write to info@plastilose.nl or careers@plastilose.nl.
  • Why. To answer your question.
  • Legal basis. Legitimate interest.
  • Where it goes. Our mailbox (Google Workspace).
  • How long. 1 year after your question has been handled.

Spam protection (reCAPTCHA)

  • Where. Only with the waitlist, the contact form, the deck request and the job application form. reCAPTCHA only loads when you click or type in one of those forms, not when the page opens. Not on the newsletter, which we protect with a hidden field and Mailchimp's confirmation email.
  • What data. Information about your browser and device and how you use the page, including your IP address.
  • Why. To prevent spam and misuse of the forms.
  • Legal basis. Legitimate interest. We want to tell real messages apart from spam.
  • Recipient. Google. Google may process the data in the United States, under the EU-US Data Privacy Framework.

Statistics and LinkedIn

Google Analytics and LinkedIn only load after you consent in the cookie notice. You can change that choice at any time via Cookie settings at the bottom of every page. See our cookie policy.

Google Analytics

  • What data. How you use the site, for example which pages you view.
  • Why. To see how the site is used.
  • Legal basis. Consent.
  • How long. 14 months.

LinkedIn Insight Tag

  • What data. Your visit to the site, for example which pages you view. If you are logged in to LinkedIn, LinkedIn can link this to your account.
  • Why. Only to measure conversions and the reach of our posts on LinkedIn. We do not use the tag for retargeting or for demographic reports.
  • Legal basis. Consent.
  • How long. LinkedIn decides this itself. See LinkedIn's cookie policy (opens in a new tab).

For the LinkedIn Insight Tag, we and LinkedIn are jointly responsible for the processing (joint controllers). We make sure the tag only loads after you consent, and we inform you about the processing here. LinkedIn is responsible for what it does with the data after that. You can exercise your rights with us and also with LinkedIn. LinkedIn's privacy policy tells you more.

Who we share data with

We do not sell data. These services process data for us. We have agreements with them on security and confidentiality.

  • Hostinger, which hosts the website. WordPress, with the form submissions, also runs there.
  • Google Workspace, for our email and documents.
  • Mailchimp, for the newsletter and the waitlist.
  • Brevo, for the welcome emails to people who join the waitlist. Only the waitlist form goes to Brevo.
  • Google, for statistics (Google Analytics) and to protect four forms against spam (reCAPTCHA).

Data outside the European Union

Google, LinkedIn and Mailchimp may process data in the United States. Those transfers are based on the EU-US Data Privacy Framework. The European Commission has decided that your data is adequately protected at companies that have joined it. Where the framework does not apply, they use the European Commission's standard contractual clauses.

Your rights

You may access, correct or delete your data. You can also object, restrict processing or take your data with you. If you have given consent, you can withdraw it at any time. To do any of this, email info@plastilose.nl. We respond within a month. If you disagree with how we handle your data, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Security

The site uses an encrypted connection (https). Only people who need the data for their work can access it.