Privacy Policy

Legendary Nutrition – A trading name of Hoeft Niet B.V.

Website operator and data controller

Hoeft Niet B.V.

Contact requests

When you email us, we receive your email address, your message and any information you choose to include. We use these to respond and follow up on your request. You may choose not to provide them, but we may then be unable to answer.

Technical data and security

Your browser sends an IP address, requested URL and technical connection information to the web server to load a page. Server access and error logs may record these details. We use HTTPS for transport security; no online transmission is entirely risk-free.

Purposes and legal bases

Responding to ordinary enquiries and operating a secure website serve our legitimate interests in customer communication and reliable service. Where a request concerns entering into or performing a contract, that contract is the relevant basis. Applicable legal duties may require processing. These bases must be assessed for the actual request.

Hosting and processing agreements

Our documented hosting setup uses a TransIP VPS. We have accepted TransIP's processing agreement version 8, with our company as controller and TransIP as processor. The contractual framework covers security, confidentiality and breach notification. The connection between the specific services used for this website and the accepted agreement is still being verified.

Hosting providers process connection data to deliver the website. Email providers process correspondence when you contact us. The service chain for our contact mailbox, actual processing countries, applicable subprocessors and any safeguards for transfers outside the EEA have not yet been fully verified. We do not claim that all processing takes place within the EEA.

Retention and backups

Correspondence should be kept only as long as needed to answer and follow up on your request, or to meet an applicable legal duty or handle a dispute. Technical logs should be limited to what is needed for operation, fault investigation and security. A privacy request may require a limited record of its receipt, handling and outcome. The actual deletion schedules for these categories are still being confirmed; no fixed retention period is promised here.

Website release backups exist for recovery. They do not by themselves establish a backup or deletion policy for email, access logs or provider snapshots. Whether additional provider copies exist, their maximum retention, deletion after termination and recovery after complete VPS loss remain to be verified. Deletion from an active system does not necessarily remove every backup copy immediately.

Your privacy rights

You may request access, correction, erasure, restriction or portability of your personal data where applicable, and object to processing based on legitimate interests. If processing relies on consent, you may withdraw it without affecting earlier lawful processing. Contact us using the email above. We may need proportionate information to verify your identity. You can also complain to the Dutch supervisory authority or the authority in your country of residence.

We normally respond to privacy requests within one month. If a lawful extension is needed, we will inform you within that month and explain why. Please send only the information needed to identify your request; do not routinely email a copy of an identity document.

Browser storage and external links

This website has no accounts, checkout, contact forms, advertising scripts or analytics. It does not perform profiling or automated decisions. External links load another website only when you follow them; the destination receives connection data and applies its own privacy and cookie policies.

Cookie Policy