Data used
with purpose.

1. Controller and contact

The provider of Orbitrage, a sole proprietorship established at Rozenheim 36, 7701 NG Dedemsvaart, the Netherlands, is responsible for personal data processed through the service. Chamber of Commerce number: 89345568. Privacy questions can be sent to algemeen@gzfx.nl.

2. Data we may process

Depending on the intake and functions used, Orbitrage may process:

• Company and intake data: registered name, registration and VAT details, country, marketplaces, sourcing interests and operating profile;
• Contact and account data: name, business email, username, account identifiers and authorised-user details;
• Connection data: Discord identifiers and authentication data, plus Telegram user ID and bot token if forwarding is configured;
• Service settings: selected platforms and bundles, shop thresholds, filters, exclusions, price limits, cost inputs and notification preferences;
• Billing data: invoice address, VAT number, agreed access, invoice status and payment records. We do not need full payment-card data for manual invoicing;
• Communications: intake messages, support requests, complaints and related correspondence;
• Security and technical data: IP address, session identifiers, device or browser information, timestamps and limited logs needed to secure and operate the service.

Please do not place unnecessary personal or special-category data in filters, notes or support messages.

The intake form on this public website prepares an email in your browser. This website does not submit the form to a backend or store the entered details. You decide whether to send the message through your own email application.

3. Purposes and legal bases

We use data to review intake requests, verify company eligibility, agree access, issue invoices, provide accounts and intelligence features, save configuration, deliver notifications, answer support questions, secure the service and meet legal obligations.

The applicable legal bases may include steps requested before a business contract, performance of the agreement, legitimate interests in operating and protecting a private B2B service, legal obligations for tax and records, and consent where a voluntary connection specifically requires it. We do not sell personal data or use it to build third-party advertising profiles.

4. Discord, Telegram and other connected services

If you contact us through Discord or connect Discord for authentication, Discord processes information under its own terms and privacy policy. If you configure Telegram forwarding, the identifiers and credentials you provide are used to deliver the requested messages through Telegram.

Retailers, marketplaces and authentication or infrastructure providers may separately receive technical requests when you use their links or services. Only connect accounts and credentials you are authorised to use.

5. Sharing and international processing

Data may be shared with service providers only where needed for hosting, security, communication, authentication, administration and invoicing; with professional advisers under confidentiality; or with authorities where required by law. We do not disclose private Orbitrage data to other members unless the service and community context clearly require it.

Where a provider processes data outside the European Economic Area, we use an available lawful transfer mechanism and appropriate safeguards when required.

6. Retention

We keep data no longer than needed for its purpose. Intake data is retained while an application is evaluated and for a limited period afterwards for follow-up, security and administration. Account and settings data is retained while access is active and for a short recovery or dispute period after it ends. Support communications are generally retained for no more than two years after resolution, security logs generally for no more than 90 days unless an incident requires longer, and invoices and tax records for the applicable statutory period, generally seven years.

7. Security

We use proportionate technical and organisational controls such as encrypted connections, access restrictions, secure sessions, updates and security logging. No system is completely risk-free. Report suspected misuse or a breach promptly to algemeen@gzfx.nl.

8. Your privacy rights

Where applicable, individuals may request access, correction, deletion, restriction or portability, object to processing, or withdraw consent without affecting earlier lawful processing. Requests can be sent to algemeen@gzfx.nl. We may request information needed to verify identity and authority.

You may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). We appreciate the chance to address the issue first.

9. Cookies and tracking

This public website does not use cookies, browser storage, analytics or marketing tracking. At the root URL, the browser language determines whether you enter the English or Dutch version. You can change language manually; the selected language is represented in the URL. The member dashboards may use strictly necessary cookies or local storage to maintain secure sessions, remember interface choices, protect against misuse and complete authentication. Blocking these technologies can prevent signed-in functions from working.

If non-essential analytics or tracking are introduced later, this statement and any consent controls will be updated before they activate where required.

10. Changes and questions

We may update this statement when the service, providers or law changes. Material updates will be communicated to active customers where appropriate. Questions can be sent to algemeen@gzfx.nl or addressed to Orbitrage, Rozenheim 36, 7701 NG Dedemsvaart, the Netherlands.