Privacy Policy

Website: mhpglobal.eu
Controller: MHP Trade B.V.
Last updated: 22.09.2026

1. Who we are

MHP Trade B.V. (“MHP Trade”, “we”, “us”, “our”) is a private limited company (besloten vennootschap met beperkte aansprakelijkheid) with its registered office at Stroombaan 16, 1181 VX Amstelveen, The Netherlands, registered with the Netherlands Chamber of Commerce under number 71930973. MHP Trade is part of the MHP group of companies (the “MHP Group”) and operates the website at mhpglobal.eu (the “Website”).

MHP Trade is the controller of the personal data described in this Policy within the meaning of the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Dutch GDPR Implementation Act (Uitvoeringswet AVG, “UAVG”).

2. Scope of this Policy

This Privacy Policy explains what personal data we collect, why we use it, on what legal basis, who we share it with, how long we keep it and what rights you have.

It applies to:

visitors to the Website;
people who submit the “Become a Partner” form;
people who contact us at sales@mhptrade.nl or on +31 20 226 61 00, or who write to the members of our team listed on the Contacts page;
representatives of buyers and suppliers who submit quality complaints under our General Terms and Conditions;
directors, authorised representatives, shareholders and ultimate beneficial owners of counterparties who go through our compliance and sanctions screening.

This Policy replaces the previous privacy notice published on the Website, which was issued for MHP SE and its affiliates and last updated in May 2018.

It does not apply to the other websites the Website links to, including mhp.com.ua, mhpglobal.ca, mhpglobal.uk and qualikoglobal.com, each of which has its own privacy policy.

3. The personal data we collect

3.1. Data you give us directly.

Through the “Become a Partner” form and in correspondence with us, we may collect your first name and surname, your business email address and telephone number, the name of the company you represent, your job title, the country in which you operate, and details of your company profile: sales channel (retail, foodservice/HoReCa, general trading and wholesale, processing plant), the share of your sales by channel and your sales coverage.

3.2. Quality complaints. If you submit a complaint under section 4 of our General Terms and Conditions — using the complaint form and the address claims@crm.mhptrade.nl, or the Group claims portal at claimsglobal.mhp.com.ua — we collect your name and contact details, the company you act for, the description of the complaint, and any documents, photographs, laboratory results and delivery paperwork you attach.

3.3. Compliance and counterparty screening. Sections 11 and 12 of our General Terms and Conditions require us to verify our counterparties. For that purpose we collect, about directors, authorised representatives, shareholders holding more than 10% and ultimate beneficial owners: full name, date of birth, nationality, country of residence, position or shareholding, identification document details where required, and the results of sanctions, anti-money-laundering, anti-corruption and adverse media screening.

3.4. Data collected automatically.

When you visit the Website, we receive your IP address, browser type and version, operating system, device type, the date, time and length of your visit, the pages you viewed, your approximate location at country or regional level, and the source you arrived from. This data is collected through cookies and server logs. Our Cookie Policy explains this in detail: https://mhpglobal.eu/cookies/.

3.5. Data from other sources. We may receive information about you from other MHP Group companies, from publicly available registers and sources (chambers of commerce, corporate websites, professional networks, sanctions and PEP databases), from trade shows and industry events, and from your colleagues where this is necessary to establish or maintain a business relationship.

3.6. Special categories and criminal offence data. We do not seek special category data within the meaning of Article 9 GDPR. The screening described in 3.3 may, however, reveal information about criminal convictions or offences within the meaning of Article 10 GDPR. We process such information only where Article 10 GDPR and Dutch law permit it, strictly for screening purposes, with restricted access and a defined retention period.

4. Why we use your data and our legal basis

Purpose	Categories of data	Legal basis (GDPR)
Handling “Become a Partner” enquiries and replying to them	Contact and corporate details, content of the enquiry	Steps at your request before entering into a contract (Art. 6(1)(b)); legitimate interests (Art. 6(1)(f))
Entering into and performing sales and purchase contracts under our General Terms and Conditions and General Purchasing Conditions	Contact and corporate details, correspondence, transaction data	Performance of a contract (Art. 6(1)(b)); legitimate interests (Art. 6(1)(f))
Compliance screening of counterparties: due diligence, anti-corruption, anti-money-laundering and sanctions checks	Identification data on directors, representatives, shareholders and beneficial owners; screening results	Legal obligation (Art. 6(1)(c)); legitimate interests (Art. 6(1)(f)); Art. 10 GDPR and Dutch law for offence data
Handling quality complaints and product claims	Contact details, content of the complaint, supporting documents	Performance of a contract (Art. 6(1)(b)); legal obligation under food safety law (Art. 6(1)(c))
Sending business communications about our products	Name, business email address	Legitimate interests for existing customers; your consent otherwise (Art. 6(1)(a); art. 11.7 Dutch Telecommunications Act)
Analysing how the Website is used and improving its content	Technical data, cookies	Your consent (Art. 6(1)(a); art. 11.7a Dutch Telecommunications Act)
Keeping the Website secure and preventing fraud and misuse	IP address, server logs	Legitimate interests (Art. 6(1)(f)); legal obligation (Art. 6(1)(c))
Statutory record-keeping for tax, customs and accounting, and defending legal claims	Transaction and contact data, correspondence	Legal obligation (Art. 6(1)(c)); legitimate interests (Art. 6(1)(f))

Where we rely on legitimate interests, we have balanced those interests against your rights and will provide a summary of that assessment on request.

We do not use your data to make automated decisions producing legal effects for you, and we do not carry out profiling. Sanctions screening results are always reviewed by a person before any decision is taken.

We do not sell your personal data.

5. Who we share personal data with

6.1. MHP Group companies — including MHP SE and affiliates in Ukraine, the European Union, the United Kingdom and Canada — where necessary for the purposes in section 4, in particular for Group-level compliance screening and claims handling.

6.2. Processors acting on our instructions:

hosting and technical support providers for the Website;
the CRM and claims-handling systems used to process complaints;
email and corporate communications providers;
compliance, sanctions and credit screening providers;
logistics, freight forwarding and customs agents, where a shipment requires it;
legal, accounting, audit and tax advisers.
Google (Google Analytics), subject to your cookie consent.

Processors only have access to the data they need for their task, are bound by confidentiality, and act under data processing agreements meeting the requirements of Article 28 GDPR.

6.3. Public authorities — including the Dutch Tax Administration (Belastingdienst), customs, the Netherlands Food and Consumer Product Safety Authority (NVWA), law enforcement and the courts — where required by law or a valid official request.

6.4. Successors in title — in a reorganisation, merger, acquisition or sale of assets, with prior notice where the law requires it.

7. International transfers

MHP Trade is established in the Netherlands, but our Group and some of our service providers are located outside the European Economic Area. Your personal data may therefore be transferred to:

Ukraine — the MHP Group head office and shared functions, and the Group claims portal claimsglobal.mhp.com.ua;
the United Kingdom and Canada — MHP Food UK Limited and MHP Pacific Limited;
the United States — the servers of certain technology providers, including Google.

For the United Kingdom the European Commission renewed its adequacy decision on 19 December 2025, and Canada benefits from an adequacy decision for commercial organisations, so no additional safeguards are needed for those transfers.

Ukraine is not covered by an adequacy decision. For transfers there we use the Standard Contractual Clauses adopted by the European Commission in Implementing Decision (EU) 2021/914, together with a transfer impact assessment and supplementary technical and organisational measures. For transfers to the United States we rely on the EU–US Data Privacy Framework where the recipient is certified under it, and on the Standard Contractual Clauses otherwise.

You can request a copy of the safeguards we have put in place by emailing sales@mhptrade.nl.

8. How long we keep data

We keep personal data only for as long as we need it:

enquiries that did not lead to a business relationship — up to 24 months from our last contact;
contract, invoicing and transaction records — seven years after the end of the financial year, under the Dutch statutory retention obligation for administrative records (article 52 of the General Tax Act);
quality complaints and claims files — for the duration of the applicable limitation period, and longer if a claim has been brought;
compliance and sanctions screening records — 5 years after the business relationship ends, or longer where the law requires it;
marketing contact data — until you object or withdraw consent, after which we keep a minimal record on a suppression list;
Google Analytics data — per the GA4 property settings; 14 months recommended;
server logs — up to 12 months.

Once these periods end, the data is deleted or anonymised.

9. Data security

We apply appropriate technical and organisational measures under Article 32 GDPR: data sent through the Website is encrypted (HTTPS), access is granted on a need-to-know basis, staff are bound by confidentiality, and our systems are protected and monitored.

No transmission over the internet is completely secure. If a personal data breach occurs that poses a risk to your rights and freedoms, we will notify the Dutch Data Protection Authority within 72 hours and, where the risk is high, inform you without undue delay (Articles 33 and 34 GDPR).

10. Your rights

Under the GDPR you have the right to:

access — confirmation of whether we process your data and a copy of it;
rectification — correction of inaccurate or incomplete data;
erasure — deletion where there is no longer a lawful basis for keeping it;
restriction — to have our use of your data paused while a request is assessed;
object — to processing based on legitimate interests; for direct marketing this right is absolute;
data portability — to receive data you provided in a structured, machine-readable format;
withdraw consent — at any time, without affecting processing carried out beforehand;
not be subject to automated decision-making — including profiling, that has a significant effect on you.

To exercise a right, email sales@mhptrade.nl. We will respond within one month of receiving your request, and may extend that period by two further months where a request is complex, telling you within the first month if we do. We may ask you to verify your identity first.

Exercising your rights is free of charge. We may charge a reasonable fee or refuse a request that is manifestly unfounded or excessive, and may refuse part of a request where complying would disclose another person’s data or breach a duty of confidentiality. We will explain any refusal.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), Hoge Nieuwstraat 8, 2514 EL The Hague, PO Box 93374, 2509 AJ The Hague, telephone 088 1805 250, autoriteitpersoonsgegevens.nl. If you live or work in another EU member state, you may also complain to your local supervisory authority.

11. Children

The Website is aimed at a business audience and is not directed at children. We do not knowingly collect data about anyone under 16. If you become aware that a child has given us their data, please contact us and we will delete it.

12. Links to third-party sites

The Website links to other sites, including MHP Group websites, the Qualiko brand site and the Group claims portal. We are not responsible for how those sites handle personal data; please read their own policies.

13. Changes to this Policy

We may update this Policy. The current version is always available at https://mhpglobal.eu/privacy-policy/, with the date it was last updated. We will announce significant changes on the Website and, where the law requires, ask for your consent again.

14. Contact us

MHP Trade B.V. (Chamber of Commerce no. 71930973)
Address: Stroombaan 16, 1181 VX Amstelveen, The Netherlands
Telephone: +31 20 226 61 00
Email: sales@mhptrade.nl