Our privacy statement
Information about how Sowecare handles personal data.
Privacy statement
Last updated: October 2026
1. General information about data protection
Thank you for your interest in our company and website. Protecting your personal data is important to us.
This statement explains which personal data we collect when you visit our website, why we process it and which rights you have.
Personal data is processed in particular under the General Data Protection Regulation (GDPR) and applicable national data protection provisions.
Personal data means information relating to an identified or identifiable individual, such as names, email addresses, telephone numbers and IP addresses.
2. Controller
The controller responsible for processing personal data on this website is:
Sowecare BV
Twentelaan 10
7609 RE Almelo
The Netherlands
Represented by: Iago Santos Lichtenberg
Telephone: +31 (0)546 493145
Email: info@sowecare.com
Contact us using these details with privacy questions or to exercise your data protection rights.
3. Legal bases for processing
We process personal data only where a legal basis exists. Depending on the nature and purpose, the following may apply:
Article 6(1)(a) GDPR: processing based on your consent, for example for optional analytics and marketing technologies.
Article 6(1)(b) GDPR: steps taken before entering into a contract or performance of a contract.
Article 6(1)(c) GDPR: compliance with legal obligations.
Article 6(1)(f) GDPR: our legitimate interests, particularly secure, functional website operation and handling business enquiries.
Where processing relies on consent, you may withdraw it at any time for the future.
Storing information on your device or accessing information already stored is also subject to applicable legal provisions protecting privacy in digital services.
4. Hosting and server log files
Our website is hosted by VDX. According to the provider’s general information, hosting data is processed within the Netherlands or European Union.
Providing and operating the servers may involve processing:
The accessing device’s IP address; access date and time; pages and files requested; data volume transferred; browser and browser version; operating system; referrer URL, if transmitted; HTTP status codes and technical error messages.
This information is processed where necessary to provide the website, maintain system security, analyse errors and prevent abusive access.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is secure, stable and functional website operation.
Retention depends on the time needed for these purposes and our hosting provider’s technical settings and deletion arrangements. The specific retention period for server log files is still being checked.
5. SSL/TLS encryption
Our website uses SSL or TLS encryption to protect the transmission of confidential content. An encrypted connection can generally be recognised by an address beginning with “https://”.
Encryption is intended to prevent unauthorised reading or alteration of transmitted data. Complete protection against every risk of internet communication cannot be guaranteed.
6. Contact by email, telephone and contact form
When you contact us by email, telephone or a contact form, we process the personal data you provide to handle your enquiry. This may include:
First and last name; email address; telephone number; address; interest in particular products; message content; other information provided voluntarily.
Contact form information is forwarded to Sowecare and may also be stored within WordPress.
We use it to handle your enquiry, contact you and, where appropriate, advise you about our products and services.
Article 6(1)(b) GDPR applies where the enquiry concerns an existing contract or pre-contractual steps. For other enquiries, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is responding to enquiries and communicating with prospective customers and business partners.
We generally retain your information only as long as needed to handle the enquiry and any subsequent business communication. Legal retention obligations may require longer storage.
Specific internal deletion periods have yet to be established.
We do not pass contact enquiries to external sales partners or medical supply retailers.
7. Information processed through the product configurator
Our website provides a configurator for selecting products to meet individual requirements.
When you use it, the selected product features and configuration settings are processed. If you send us a configuration, we receive those settings and any contact details provided with the submission.
We use this information only to handle the configuration, provide product advice and, where appropriate, prepare a quotation or contact you.
Article 6(1)(b) GDPR applies where processing is needed for pre-contractual steps at your request. In other cases, Article 6(1)(f) GDPR may apply.
Our legitimate interest is handling product enquiries and providing individual product advice.
The submitted data is deleted when no longer required for these purposes, unless legal retention obligations prevent deletion.
8. Cookies and similar technologies
Our website uses cookies and similar technologies. Cookies are small files stored on your device that may contain information about website use or privacy settings.
We distinguish between technically necessary and optional technologies.
Technically necessary cookies
These provide basic website functions and secure operation. They may include technologies that store privacy settings or maintain website security.
Separate consent is not required where the applicable legal conditions are met. Related personal data processing is based on Article 6(1)(f) GDPR where applicable.
Optional cookies and tracking technologies
We also use technologies to analyse website use and carry out and evaluate marketing activities, including Google Analytics, Google Ads and Meta Pixel.
Where consent is legally required, these technologies are used only after you agree. Processing then relies on Article 6(1)(a) GDPR.
You may reject optional technologies without losing access to the website’s basic functions. Consent may be withdrawn at any time for the future.
9. Google Tag Manager
We use Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
It manages and integrates website tags, for example for analytics and marketing services.
Google Tag Manager does not itself create independent user profiles. However, connection data may be processed as part of its technical provision. Services integrated through it may collect additional personal data.
The relevant sections of this statement describe processing by those services.
Analytics and marketing services requiring consent are activated only after consent is given.
Further information: https://policies.google.com/privacy?hl=de
10. Google Analytics 4
We use Google Analytics 4, a web analytics service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to evaluate website use statistically and improve our online offering.
Processing may include:
Pages and content viewed; visit timing and duration; website interactions; approximate geographical location; browser and device information; visitor sources; events such as clicks or form interactions; online identifiers and cookie information where consent has been given.
Google Analytics 4 uses IP addresses, among other things, to derive geographical information. According to Google, IP addresses of users in the European Union are not logged or stored in Google Analytics.
Use is based on consent under Article 6(1)(a) GDPR. Information is accessed or stored on your device only where legal conditions are met.
Google Analytics is linked to our Google Ads account. Depending on the settings activated, analytics information may also be used to evaluate advertising activities.
Processing follows your consent and applicable privacy settings.
Transfers to Google companies or service providers outside the European Economic Area, particularly the United States, cannot be ruled out.
Google privacy information: https://policies.google.com/privacy?hl=de
Google Analytics information: https://support.google.com/analytics/
11. Google Ads conversion tracking
We use Google Ads, an online advertising service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Conversion tracking helps us understand whether users perform particular actions on our website after clicking an advertisement, such as visiting pages, submitting contact forms or other interactions defined as conversions.
Processing may include cookie information, online identifiers, technical device information and details of website interactions.
We use this information to evaluate and optimise advertising statistically.
Where the technologies require consent, processing is based exclusively on consent under Article 6(1)(a) GDPR.
Further information: https://policies.google.com/privacy?hl=de
12. Google Ads remarketing
Our website uses Google Ads remarketing to show interest-based advertisements to previous visitors on other websites or within Google services.
Information about interactions with our website may be processed and linked to online identifiers.
The aim is to make advertising more relevant and give interested visitors appropriate product information.
Remarketing is used only with prior consent under Article 6(1)(a) GDPR. You may withdraw consent at any time for the future.
Further information: https://policies.google.com/privacy?hl=de
13. Google Consent Mode v2
We use Google Consent Mode v2 to adapt processing by Google services to visitors’ privacy settings.
Consent decisions are sent as signals to the Google services in use. Relevant signals include:
analytics_storage
ad_storage
ad_user_data
ad_personalization
These control the extent to which analytics, advertising and personalisation functions may be used.
Where processing requires consent, it takes place only within the permission given.
The technical implementation determines which processing does not take place when consent is refused.
14. Meta Pixel
Our website uses the Meta Pixel, provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland.
It helps us evaluate the effectiveness of advertisements on Meta platforms, particularly Facebook and Instagram, and optimise advertising.
Processing may include:
Pages visited and website interactions; browser and device information; IP address; cookie information and online identifiers; visit sources; events such as page views and defined conversion actions.
Under certain conditions, Meta may associate this data with an existing account and process it for advertising and analytics.
We generally receive statistical information about advertising effectiveness.
Use of the Meta Pixel is based on consent under Article 6(1)(a) GDPR.
Meta’s privacy provisions apply where it processes personal data for its own purposes.
Further information: https://www.facebook.com/privacy/policy/
15. Google reCAPTCHA v3
We use Google reCAPTCHA v3 to protect our website, particularly contact forms, against automated access, spam and abusive enquiries.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The service uses technical characteristics and usage behaviour to distinguish automated access from ordinary human interactions.
Processing may include:
IP address; browser and device information; technical interaction information; usage signals for automated abuse detection; other information technically necessary to check an enquiry.
Assessment is automated and serves only to protect the website and prevent abusive access.
Personal data processing is based on Article 6(1)(f) GDPR where necessary for legitimate security interests and permissible after balancing interests. Our legitimate interest is protecting the website and contact forms against spam, automated abuse and unwanted access.
Where reCAPTCHA stores or reads information on your device, applicable additional legal requirements also determine whether this is permitted.
The lawfulness of the specific technical integration is being assessed separately.
16. Google Maps
We use Google Maps to display geographical information and help users find locations.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Integration may transmit your IP address, browser and device information, and details of the page visited to Google.
Where integration requires prior consent, use is based on Article 6(1)(a) GDPR and Maps loads only after you agree.
Further information: https://policies.google.com/privacy?hl=de
17. Google Fonts
Our website uses Google Fonts, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Where fonts load directly from Google servers, the visitor’s browser connects to those servers. The IP address and technical browser request information may be sent to Google.
Fonts provide a consistent and attractive website appearance.
The legal basis depends on the technical integration. Where consent is required, external fonts load only after prior consent under Article 6(1)(a) GDPR.
Further information: https://policies.google.com/privacy?hl=de
18. YouTube videos
Videos from YouTube may be embedded on our website. YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Visiting a page containing a video may establish a connection to YouTube or Google servers. Information about the page, your IP address and device data may be transmitted.
If you are signed in to a Google or YouTube account, Google may associate this information with that account.
Where consent is required, integration is based on Article 6(1)(a) GDPR. Videos and related external content then load only after you agree.
Further information: https://policies.google.com/privacy?hl=de
19. Social media links and plugins
Our website may contain links or plugins for social networks.
Ordinary links generally connect to a network only when clicked. Active plugins may connect to a provider’s servers as soon as a page is opened.
Personal data, particularly the IP address and page information, may be transmitted.
Where active plugins process data for analytics or marketing, or access device information, and consent is required, they are activated only after consent.
Platform operators’ own privacy provisions also apply to their processing.
20. Downloading product brochures
We provide product brochures and other information for download. Publicly available information generally does not require personal contact details.
Downloading a file nevertheless involves technically necessary connection data, including the IP address, time and requested file.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is providing product information and maintaining secure website operation.
External file providers may involve additional processing.
21. Recipients of personal data
We may send personal data to service providers supporting website provision and management, analytics and marketing. These include:
Hosting and IT providers; technical security providers; contact form processing providers; analytics and marketing providers; providers of embedded external content.
Where providers process personal data on our behalf, appropriate data processing agreements are used where legally required.
We disclose data for other purposes only where a legal basis exists.
22. Transfers to third countries
External services, particularly Google and Meta, may involve transfers to recipients outside the European Economic Area, including the United States.
Where a transfer takes place, we ensure that applicable GDPR requirements are met.
A transfer may rely on a European Commission adequacy decision where it covers the recipient and processing. Otherwise, appropriate safeguards such as the Commission’s standard contractual clauses may apply.
You can request information about relevant transfer mechanisms using the controller’s contact details.
23. Retention of personal data
We generally retain data only as long as necessary for the relevant processing purposes.
Retention depends particularly on:
The processing purpose; the time needed to handle an enquiry; contractual relationships; legal retention obligations; legitimate interests in documenting business transactions; the validity and withdrawal of consent; technical retention periods set by the services used.
When the purpose ends and no legal obligation or other basis supports further storage, the data is deleted or anonymised.
24. Your rights as a data subject
Under applicable legal provisions, you have the following rights in particular:
Right of access — Article 15 GDPR
You may request information about whether, and which, personal data we process about you.
Right to rectification — Article 16 GDPR
You may request correction of inaccurate data or completion of incomplete data.
Right to erasure — Article 17 GDPR
You may request deletion where the legal conditions are met.
Right to restriction — Article 18 GDPR
In certain circumstances, you may request restricted processing.
Right to data portability — Article 20 GDPR
Where legal conditions are met, you may request your data in a structured, commonly used, machine-readable format or transfer to another controller.
Right to object — Article 21 GDPR
You may object at any time on grounds relating to your particular situation where processing relies on Article 6(1)(e) or (f) GDPR.
You may object to direct marketing processing at any time without giving reasons.
Right to withdraw consent — Article 7(3) GDPR
You may withdraw consent at any time for the future. This does not affect the lawfulness of processing based on consent before withdrawal.
To exercise your rights, contact info@sowecare.com.
25. Right to complain to a supervisory authority
If you believe that processing breaches the GDPR, you may complain to a competent data protection authority.
As our company is based in the Netherlands, you may in particular contact:
Autoriteit Persoonsgegevens
Postbus 93374
2509 AJ Den Haag
The Netherlands
Website: https://autoriteitpersoonsgegevens.nl/
You may also contact another competent authority, particularly in the EU member state of your habitual residence, workplace or the alleged infringement.
26. Providing personal data
Personal data is generally not required for ordinary website use, apart from technically necessary connection data.
Certain information is needed to handle an enquiry when you use a contact form or submit a product configuration.
Optional information is marked or apparent from the input field.
If required information is not provided, we may be unable to handle the enquiry fully or at all.
27. Automated decision-making
Handling contact enquiries and submitted configurations does not involve solely automated decision-making under Article 22 GDPR that produces legal effects or similarly significantly affects you.
Automated technical checks to protect the website, for example through reCAPTCHA, may take place.
28. Changes to this privacy statement
We may update this statement where necessary because of legal changes, technical developments or changes to our processing.
The version published on our website applies.