Last Updated: June 23, 2026

Tjoapack Netherlands B.V., with its registered office at Nieuwe Donk 9, 4879 AC Etten-Leur, The Netherlands (“Tjoapack,” “we,” “us,” and “our,”) is the data controller responsible for the processing of your personal data as described in this Privacy Policy. Our subsidiaries and affiliates may also process personal data as joint controllers or as processors on our behalf, as applicable. We respect your privacy and are committed to protecting the personal data we hold about you. We provide this Privacy Policy (the “Policy”) to explain how we collect, use, disclose, store and otherwise process personal data. Unless otherwise expressly indicated inthe Policy, the Policy applies only to personal data that we collect through our website at ww.tjoapack.com, and through any other websites, and online products and services that we operate and that include a link to the Policy, as well as any other communications you may have with us such as via email (collectively, the “Services”).

Personal Data We Collect and How We Collect It

The personal data we collect depends on the context of your interactions with us, the choices you make, and the Services you use. We may collect this data when you provide it to us directly or automatically when you use the Services, as further described below.

Data You Provide to Us Directly

We collect personal data when you provide it to us, including, for example, when you fill out forms on our website. This personal data may include:

• Contact information, such as your first and last name and email address.
• Employer or other business information, such as your company name, title and business contact information.
• Information you provide about your interest in our products and services, such as the Tjoapack offerings in which you are interested.
• Any other information you submit when you contact us, including any information you provide through our website “Contact Us” form, or through other contact methods.
• If you seek employment with us through the “Careers” section of our website, professional and employment related information such as your resume, employment history, and anyother information you choose to provide in your employment inquiries orapplications.
• In connection with recruitment and employment, we may process data that constitutes special category data under GDPR Article 9, such as information revealing racial or ethnic origin, health information, or trade union membership, where you voluntarily provide such information in your application materials. We process such data only with your explicit consent or where necessary for the purposes of carrying out our obligations with respect to employment.

Data We Collect Automatically

We may also collect certain data automatically when you use our Services, such as the following:

• Information about the browser and device you use to access the Services, such as device identifiers like IP addresses or MAC addresses, operating system information, browser information (such as browser type and browser language), usage information including the date and time of your request, and other information about your interaction with the Services.
• Information stored in web-based technologies like cookies, pixel tags, log files, or  web beacons, including browser type, portions of the online services visited, time spent on the online services, pages visited, referring URLs, links you click on, video browsing, download and purchase activity and  data, and other traffic and usage data.
• Information that indicates your approximate location, including as derived from your IP address.

Cookies and Similar Technologies: When you visit our website, we and third parties may use cookies and similar tracking technologies to collect information about your online activities. We categorize cookies as follows: (a) Strictly Necessary Cookies, which are essential for the website to function and cannot be disabled; (b) Analytics/Performance Cookies, which help us understand how visitors use our website (e.g., Google Analytics); and (c) Marketing/Targeting Cookies, which are used to deliver relevant advertisements. For Analytics and Marketing cookies, we will request your consent before placing them on your device. You can manage your cookie preferences at any time through our cookie consent tool displayed when you first visit our website. You may also configure your browser to reject cookies, though this may affect website functionality. For more information about how Google Analytics uses and processes data, please visit https://policies.google.com/technologies/partner-sites.

How We Use Personal Data

Depending on the context of your interactions with us, we may use the personal data we collect for a variety of purposes that include:

• Communicating with you, including by fulfilling your requests and responding to your inquiries.
• Providing and administering the Services.
• Preparing and performing our contracts and agreements with you.
• For our internal business operations, suchas evaluating, updating, and modifying our operations, conducting research andanalysis like industry benchmarking, developing new services, and performing other internal business operations, including as described elsewhere in the Policy.
• Understanding how you and other users usethe Services and determining what features and services may interest you and other users.
• Debugging, identifying and repairing errors, effectuating similar functional enhancements, and improving the Services.
• Storing information about your preferences, recognizing you when you use the Services, correcting or supplementing our records, and customizing your experience, including personalizing our service offerings, websites, mobile services, marketing offers and advertising.
• Complying with applicable laws and regulations, other legal requirements, and industry standards.
• For our recruitment and hiring purposes,including evaluating and processing your resume and employment application.
• For system administration purposes, such as maintaining the safety, security, and integrity of the Services, including our website, mobile applications, technology assets, services, and our business.
• Protecting against malicious, deceptive,fraudulent, illegal, or other unauthorized activity, and participating in anyprosecution or enforcement of laws or agreements meant to prevent or punish such activity.
• Legal and safety purposes, such as maintaining the safety, security, and integrity of our technology assets, services, and our organization, preserving or enforcing our legal rights andproperty; protecting our users, our employees, and others; and complying with industry standards.
• Enforcing our policies, terms of use, orrights arising from contracts.
• Evaluating or participating in an actualor potential merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, including as part of bankruptcy, liquidation, or similar proceedings.
• For such other purposes as you may authorize from time to time.

We may also aggregate or de-identify personal data by removing any details that identify you personally. Aggregated or de-identified informationwill not be subject to this Policy and will be used to the extent permissibleunder applicable law.

How We Disclose Personal Data

We may disclose the personal data wecollect or receive about you:

• To you or those acting on your behalf.
• To our affiliates and subsidiaries.
• To our business partners, such as partners involved in joint business transactions.
• To our third-party vendors and service providers to process your information on our behalf, including payment processors, software and web developers, consultants, and other vendors we engage to help provide products and the Services. These parties are bound by contractual obligations to keep your information confidential and use it only for the purposes for which we disclose it to them.
• To third parties and networks that provide online tracking technologies that we use to conductinternal analytics and functionality relative to the use and improvement of the Services, as well as for advertising and marketing purposes.
• To government agencies and authorities, law enforcement officials, law courts, or to third parties: (a) if we believe disclosure is required by applicable law, regulation or legal process (such as pursuant to a subpoena or judicial order); or (b) to protect and defend our rights, or the rights, health, or safety of third parties, including to establish, make, or defend against legal claims; or (c) in the interest ofpublic health and safety, including in the event of an emergency that threatens an individual’s life, health, or security.
• To enforce our policies, terms of use, and agreements and to protect our rights, property, or safety, and the rights, property, and safety of our users and other third parties.
• To protect and secure the Services, including against fraud and other misuse, and our partners’ rights, property,or safety, and the rights, property, and safety of our users and other third parties.
• To an actual or potential buyer or other successor or organization in the event of an actual or potential merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, including as part of bankruptcy, liquidation, or similar proceedings.
• To operate, evaluate, debug, identify andrepair errors, effectuate similar functional enhancements, and improve the Services.
• For such other purposes, and to such other third parties, as you may authorize or direct from time to time.

Legal Bases for Processing Personal Data

Under the GDPR and applicable data protection laws, we must have a valid legal basis to process your personal data. The legal basis we rely on depends on the specific processing activity. We may process the datawe collect from you for the following purposes.

• Our legitimate interests, consistent withyour rights and appropriate to the context, such as for the uses discussed in the section titled “How We Use Personal Data,” above. For example, when we respond to your inquiries and communications, we process your contact information and inquiry content based on our legitimate interest to respond toyour requests and maintain a business relationship.
• To provide services that are subject to contractual terms you have accepted, such as our licenses, service agreements, and terms of use. For example, when we provide and administer the Services, we may process your contact or account information and usage data based on the performance of a contract to fulfill our contractual obligations to you.
• To the extent you provide your consent. For example, when we provide marketing communications, we may process your contact information on the basis of your consent. You may withdraw your consent at any time.
• To comply with the law and our legal obligations, as well as to protect you and other individuals from certain harms.

Retention of Personal Data

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected unless a longer retention period is required or permitted by law. The criteria we use to determine appropriate retention periods include: (a) the duration of our relationship with you; (b) whether there is a legal obligation to retain the data; (c) whether retention is advisable in light of our legal position (such as applicable statutes of limitations, litigation, or regulatory investigations); and (d) whether you have requested deletion of your data. When personal data is no longer required, we will securely delete or anonymize it.

Your Choices

You have choices about how we use your personal data.

• You may choose not to provide the personal data we request. However, not providing information we request may restrict your ability to use certain features of the Services. For example, if you choose not to provide personal data that is necessary to provide any aspect of our Services, you may not be able to use the Services.
• Youmay opt out of receiving marketing or other communications from us by email at any time by using the opt-out mechanism provided with those messages.  Note that if you do business with us in the future, you may still receive some email communications from us, such as order confirmations, that relate to your transactions with us.  
• If you want to limit or prevent our ability to receive location information fromyou, you can deny or remove the permission for certain Services to access location information or deactivate location services on your device. Please refer to your device manufacturer or operating system instructions for instructions on how to do this.
• You may be able to restrict the collection of personal data or functionality through your device's operating system or by disabling cookies but doing so may prevent you from using the functionality of the Services.
• Some Internet browsers have a “do-not-track” feature that lets you tell websites that you do not want to have your online activities tracked. The Services do not currently respond to browser “do not track” signals or similar mechanisms.

Depending on your place of residence, you may have certain rights related to your personal data, including:

• Access and Data Portability. You may confirm whether we process your personal data and access a copy of the personal data we process. To the extent feasible and required by law, data will be provided in aportable format.
• Correction. You may request that we correct inaccuracies in your personal data that we maintain, taking into account the information’s nature and processing purpose.
• Deletion. You may request that we delete personal data about you that we maintain, subject to certain exception under applicable law.
• Opt Out of Using Personal Data for Targeted Advertising, Profiling, and Sales. If applicable, you may request that we do not use your personal data for these purposes.
• Restriction of Processing. You may request that we restrict the processing of your personal data in certain circumstances, including: (a)where you contest the accuracy of the data, for a period enabling us to verify its accuracy; (b) where the processing is unlawful and you oppose erasure and request restriction instead; (c) where we no longer need the data but you require it for legal claims; or (d) where you have objected to processing pending verification of whether our legitimate grounds override yours.
• Right to Object. You have the right to object at any time to the processing of your personal data based on our legitimate interests. Upon receiving your objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for the establishment, exercise, or defense of legal claims. You also have the unconditional right to object at anytime to the processing of your personal data for direct marketing purposes, including profiling related to direct marketing. If you object to direct marketing, we will stop processing your data for that purpose.
• Automated Decision-Making and Profiling. We do not currently make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you. If this changes in the future, we will update this Policy to provide you with meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing. You will have the right to obtain human intervention, express your point of view, and contest any such decision.

The exact scope of these rights vary by jurisdiction. There are also several exceptions where we may not have an obligation to fulfill your request. We will not discriminate in response to any privacy requests you make.

In order to ensure that a request is genuine, we may need to take steps to verify your identity or the identity of an agent making a request on your behalf.

To exercise any of these rights, please email us at info@tjoapack.com. Individuals located in the European Economic Area (EEA), Switzerland, and the United Kingdom (UK) may also have the right to lodge a complaint with an EEA, Swiss, or UK supervisory authority, as applicable.

Collection of Personal Data from Children

The Services are not directed towards persons under the age of 18. We do not knowingly collect any personal data from anyone under the age of 18, nor do we knowingly market our web sites to anyone under the age of 18. If we learn we have collected and received personal data from anyone under the age of 18 without verification of parental consent, we will delete that information.

Third-Party Websites and Services

As a convenience, we may reference or provide links to third-party websites and services, such as social media features and other widgets that run on our site, including those of unaffiliated third parties, our affiliates, service providers, and third parties with which we do business. When you access these third-party services, you leave our Services, and we are not responsible for, and do not control, the content, security, or privacy practices employed by any third-party websites and services. You access these third-party services at your own risk. This Privacy Policy does not apply to any third-party services; please refer to the privacy notices or policies for such third-party services for information about how they collect, use, and process personal data.

Security

We use commercially reasonable administrative, physical, and technical measures designed to protect your personal data from accidental loss or destruction and from unauthorized access, use, alteration, and disclosure. However, no website, mobile application, system, electronic storage, or online service is completely secure, and we cannot guarantee the security of your personal data transmitted to, through, using, or in connection with the Services. In particular, email, texts, and chats sent to or from the Services may not be secure, and you should carefully decide what information you send to us via such communications channels. Any transmission of personal data is at your own risk.

Cross Border Transfers

We may transfer personal data to countries outside the EEA, Switzerland, and the UK, including to the United States and other countries where our service providers are located. These countries may not provide the same level of data protection as your home country. When we transfer personal data internationally, we implement appropriate safeguards to protect your data, including: (a)transferring to countries that have been deemed to provide an adequate level of protection by the European Commission; (b) using Standard Contractual Clauses approved by the European Commission; or (c) relying on Binding Corporate Rules where applicable. You may request a copy of the relevant transfer safeguards by contacting us at info@tjoapack.com.

Modifications and Updates to this Privacy Policy

This Privacy Policy replaces all previous disclosures we may have provided to you about our information practices with respect to the Services. We reserve the right to modify, alter, and/or update this Privacy Policy from time to time. We encourage you to review this Policy periodically. Your continued use of the Services following our posting of any revised Privacy Policy will constitute your acknowledgement of the amended Privacy Policy.

How to Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data processing practices, or if you wish to exercise any of your data protection rights, please contact us at:

Tjoapack Netherlands B.V.

Nieuwe Donk 9, 4879 AC Etten-Leur, The Netherlands

Email: info@tjoapack.com

‍