Privacy statement

This privacy statement explains how Sher Holland B.V., also trading as Afriflora (hereafter: ‘Afriflora’), processes personal data of users of the website connected to the domain name www.afriflora.nl (hereafter: ‘the Website’) and of visitors to its business location at Legmeerdijk 313, 1431 GB Aalsmeer (hereafter: ‘the Business location’).

Introduction

Afriflora (hereafter also: ‘we’, ‘us’ or ‘our’) collects personal data of visitors to our Website and Business location, as described above. Afriflora processes your data in accordance with the General Data Protection Regulation (GDPR).

Through this privacy statement we inform you about what happens to your personal data. It sets out which personal data we process, what we use it for, who uses it, with whom we share it and how long we keep it. This privacy statement also sets out which rights you have and how you can exercise them.

Which data do we process about you?

‘Personal data’ means all information about you by which you can be identified. This includes your first and last name, date of birth, address and telephone number, and also a photo, camera images or email address. We receive the personal data from you, except for camera images that we make ourselves.

When you visit our Website, we do not use analytics or marketing scripts and we do not collect data about how you use the site.

We do not place tracking cookies and we do not ask for cookie consent. This is explained in the cookie statement.

When you contact us, or when you visit our Business location, Afriflora processes the following personal data, among other things:

Contact details and data you share with us in connection with your visit, such as: first and last name, address details, email address, telephone number, communication (such as emails and via social media channels) and any other contact details you share with us, billing details and payment information.

Please do not provide us with special categories of personal data, such as medical data or allergies, unless this is strictly necessary for your request or visit. If you do provide us with special categories of personal data, we will use them only where there is a valid legal basis (such as your consent).

Afriflora also uses camera surveillance in and around the Business location. We process the camera images, the date and time of the recording and the location of the camera. Cameras are installed only in the following places:

Production and logistics areas
Cold stores
Loading docks
Access doors and traffic routes

There are no cameras in canteens, break rooms, changing rooms or toilets.

For information about how we carry out camera surveillance, how we process camera images, and your rights and options to object, you can request and consult our Camera policy and our Objection and rights policy for camera surveillance.

For which purposes do we process your data?

Afriflora processes personal data for various purposes, including:

Camera surveillance

As stated, Afriflora uses camera surveillance in and around our Business location. The camera surveillance is intended to screen you safely as a visitor. The surveillance also serves to protect products and property and to investigate incidents when that is necessary.

Contact about visits, invoicing and administration

Afriflora processes your personal data in order to respond to questions or requests, for contact about your visit, such as making an appointment, to carry out invoicing and administration, to inform you about new developments (for example by newsletter) and for possible collaborations.

Complaints and disputes

Afriflora has various arrangements for complaints and disputes, for example the Objection and rights policy for camera surveillance. If there is a complaint or dispute in which you are involved, Afriflora may process your data in order to handle it.

Quality improvement

Afriflora always aims to improve quality. For that we need your input. Receiving that input sometimes requires us to process your data, for example when carrying out a customer satisfaction survey.

Collaborations

Some personal data is necessary to enter into or perform an agreement with you, for example a collaboration for purchasing or sales. We then need certain contact and payment details, for example. In such cases, refusing to provide the requested data may mean that the agreement cannot be concluded.

Legal obligations

Sometimes Afriflora is legally obliged to process your data. These obligations arise among other things from the Dutch Working Conditions Act (in particular the rules for preventing danger to third parties).

On which basis is your data processed?

Afriflora processes the personal data on the following bases:

To perform the agreement we have made with you.
On the basis of a legitimate interest that is consistent with, or follows from, the purposes set out above.
To comply with a legal obligation.
The processing is necessary to protect your vital interests or those of other natural persons.
In limited cases: with your consent, where this is possible. Consent can be withdrawn at any time, without affecting the lawfulness of processing based on consent before the withdrawal.

How is your data secured?

To protect your privacy as well as possible, we limit the (internal) use of your personal data as much as possible. Afriflora has taken appropriate technical and organisational measures to secure your personal data against unauthorised or unlawful processing and against loss, destruction, damage, alteration or disclosure. Afriflora uses access management and user rights (authorisation) for access to systems and files, so that personal data is accessible only to employees who need and are allowed to use the data for their role. Personal data is also stored in our own server environments, and appropriate IT security measures are applied.

With whom is your data shared?

Afriflora treats your data confidentially. In principle we use your personal data only for ourselves (our own business operations) and for performing any agreements we have concluded with you. We use this data only for the purposes for which we obtained it.

If we ask third parties to process your personal data (so-called ‘processors’), this is done only for and on the instructions of Afriflora, and only insofar as it is necessary for the purposes mentioned above. We then conclude data processing agreements with these parties. In these agreements we agree, among other things, that they secure this data properly and that they must notify us in time of a (suspected) data breach. We have also agreed that the data is processed only within the European Economic Area, or within countries or organisations for which the European Commission has adopted an adequacy decision. Parties engaged by Afriflora that are themselves responsible for the processing of personal data are also themselves responsible for complying with the GDPR and liable for any damage.

Personal data may also pass to a third party in the event of an acquisition, merger or other reorganisation in which Afriflora is involved. Personal data may also be shared internally (between the different entities) where that is needed for proper business operations. Finally, we may have to provide personal data where that is necessary or legally required to the competent authority, to the police in the event of (suspected) criminal offences, and to our insurer in the event of claims or incidents.

How long do we keep your data?

Afriflora does not keep personal data for longer than necessary for the purposes specified in this statement.

Contact details and data you share with us in connection with your visit are kept for up to 1 year after the visit. Camera images are deleted after 30 days. In the event of incidents we may keep these camera images for longer in order to deal with them. If there is an incident, the camera images are kept until the incident has been dealt with.

In certain cases Afriflora is legally obliged to keep personal data for a statutory (longer) period. Under tax legislation, for example, we are expected to keep data relating to business administration (invoicing and so on) for 7 years.

We may also keep data for longer where we have a legitimate interest in doing so. This can be the case, for example, when legal proceedings are pending or have been announced and we need to defend ourselves.

After the relevant retention period has expired we destroy all individual personal data. After that we can use data only for statistical purposes, and that data can no longer be traced back to persons.

What are your rights?

The GDPR gives you, as a person, extensive rights to see which data Afriflora processes about you, to have your data corrected if it is inaccurate, or to have your data transferred to other persons or organisations. You also have the right to request that your data be deleted, or to object to the processing of data. If you have given consent for the processing of certain personal data, you have the right to withdraw that consent at any time.

Questions or complaints?

The information above is a summary of how Afriflora processes your data and with whom we share it. Do you have further questions about this privacy statement or about how Afriflora handles your data? Please contact us at gegevensbescherming@afriflora.nl or by telephone at +316 44 87 94 42.

If you have a complaint, you can submit it to us. You can also submit a complaint to the Dutch Data Protection Authority via www.autoriteitpersoonsgegevens.nl.

The controller is Sher Holland B.V./ Afriflora. Our contact details are:

Sher Holland B.V./ Afriflora

Postal address: Postbus 1134, 1430 BC Aalsmeer

Visiting address: Legmeerdijk 313, Exportstraat 07 box 15, 1431 GB Aalsmeer

Telephone: +31 (0)85 043 6800

Email: info@afriflora.nl

Afriflora reserves the right to change this privacy statement at any time without prior notice. The most recent version can be consulted on our Website and via a link in our email signatures.

This privacy statement was last updated on 9 November 2026.