Legal & Privacy Notice

Privacy Policy

Last revised: January 15, 2026

1. Introduction & Data Controller

Welcome to toptllypureripple.yachts, operated by Pure Ripple Automotive Logistics B.V. (Company Registration: NL-84920194), having its registered office at Herengracht 481, 1017 BT Amsterdam, Netherlands ("we", "us", or "our").

We are committed to maintaining the utmost confidentiality, data integrity, and privacy of our website visitors, clients, and automotive correspondents. This Privacy Policy details how we collect, handle, store, and protect personal information when you browse this website or communicate with our logistics atelier.

2. Information We Collect

We process personal data only when strictly necessary for legitimate educational, operational, or communication purposes:

• Contact Form Information: When you submit an enquiry through our contact form, we collect your full name, email address, chosen subject matter, and the message content you provide.
• Technical & Log Data: When accessing our static site, server logs automatically capture pseudo-anonymized IP addresses, browser user-agent strings, HTTP referring URLs, and timestamps. This technical information is used purely for server diagnostics, security monitoring, and distributed denial-of-service mitigation.
• Client Preference Data: We utilize localized storage mechanisms in your browser (specifically localStorage) to record whether you have accepted, rejected, or customized cookie choices. This data resides on your machine and is never sold.

3. Legal Basis for Processing (GDPR)

Under the EU General Data Protection Regulation (Regulation (EU) 2016/679) and UK GDPR, our processing of personal data is anchored on:

• Consent (Art. 6(1)(a) GDPR): For any non-essential analytics or direct electronic messages initiated by you.
• Performance of a Contract or Pre-contractual Inquiries (Art. 6(1)(b) GDPR): When responding to route quotes, logistics consulting, or handover coordination requests.
• Legitimate Interests (Art. 6(1)(f) GDPR): For safeguarding server infrastructure against intrusion, maintaining uptime, and optimizing content delivery.

4. Third-Party Processors & Hosting Infrastructure

We deploy this informational resource using trusted European hosting infrastructure. We do not use third-party behavioral advertising trackers, invasive session-recording pixels, or automated profiling algorithms. Any third-party hosting partners we work with are bound by formal Data Processing Agreements (DPAs) enforcing strict confidentiality and GDPR compliance.

5. Data Retention Periods

We keep personal information only for the timeframe necessary to satisfy the purposes for which it was originally gathered:

• Enquiry correspondence submitted via our contact portal is retained for up to 24 months to support ongoing consultation, after which it is securely deleted unless an active contract or statutory tax duty requires continued archiving.
• Server security logs are automatically overwritten or purged within 30 to 90 days.
• Local browser preferences remain stored on your browser until manually cleared by you.

6. Your Statutory Rights (GDPR & UK Data Protection)

As a data subject, you hold clear, enforceable statutory rights under European privacy law:

• Right to Access (Art. 15 GDPR): You may request a verified copy of all personal records we hold about you.
• Right to Rectification (Art. 16 GDPR): You have the right to demand correction of inaccurate or incomplete personal details.
• Right to Erasure ("Right to be Forgotten", Art. 17 GDPR): You may request the deletion of your personal records where no overriding legal obligation exists.
• Right to Restriction of Processing (Art. 18 GDPR): You may restrict processing while an objection is evaluated.
• Right to Data Portability (Art. 20 GDPR): You can request your structured digital information in a standard format.
• Right to Object (Art. 21 GDPR): You may object at any time to processing based on legitimate interests.

7. Rights of California Residents (CCPA / CPRA Notice)

Under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), California residents are entitled to specific disclosures. We confirm that:

• We do not sell personal data, nor do we share personal data for cross-context behavioral advertising.
• We do not collect sensitive personal information for the purpose of inferring characteristics about consumers.
• You have the right to request deletion, correction, and knowledge of your personal information without facing discriminatory treatment.

8. International Transfers

Because we operate primarily within the European Union, our core data storage resides within the European Economic Area (EEA). If technical support or cloud routing requires data transit outside the EEA to jurisdictions without an adequacy decision, transfers are shielded by European Commission Standard Contractual Clauses (SCCs).

9. Data Security Measures

We implement technical and organizational safeguards including modern TLS 1.3 encryption in transit, strict access control principles, and regular vulnerability scanning. However, please remember that transmission of data over the public Internet can never be 100% immune from compromise.

10. Submitting a Privacy Request / DPO Contact

If you wish to exercise any statutory privacy rights, lodge an inquiry, or update your communication preferences, please direct your correspondence to our Data Privacy Officer:

You also retain the right to lodge a formal complaint with a competent supervisory authority, such as the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your national regulator.