Legal

Privacy Policy

How Core Solutions handles personal data when you visit this website, sign up for PillenPopper updates, use the store locator or contact us.

Last updated:

1. Who is responsible?

Rik van Wieren, trading as Core Solutions, is responsible for the processing described in this policy. Core Solutions is a Dutch sole proprietorship registered with the Chamber of Commerce under number 78279070. For privacy questions or requests, email contact@coresolutionsglobal.com.

This policy covers coresolutionsglobal.com, including its Dutch pages, and contact arising from this website. Separate shops, marketplaces and retailers have their own privacy notices. If Core Solutions is the seller on another channel, that channel’s notice and the applicable seller information also explain the processing connected with your order.

2. What we process and why

We only use personal data needed for the relevant purpose. The following overview identifies the data, purpose and legal basis under Article 6 GDPR.

2. What we process and why
ActivityPersonal dataPurpose and legal basis
Contact by emailName, email address, business details you provide, message and attachments; telephone number if provided.Answering questions and handling business correspondence: legitimate interest in communicating with customers and partners. Where you request a quote or an agreement in your own name: steps before entering a contract or performing that contract.
Website delivery and securityIP address, request time, requested page, browser/device information and technical error data available to the hosting service.Displaying and protecting the website, troubleshooting and preventing abuse: legitimate interest in a reliable, secure website.
Postcode searchThe Dutch postcode entered, search request and IP address received by Nominatim.Finding nearby retailers at your request: legitimate interest in providing the store locator. A postcode is optional and is not used for advertising.
Optional browser locationLatitude and longitude supplied by your browser after you choose ‘Use my location’ and permit access.Showing your position and sorting retailers by distance: your consent. You can use the website and postcode search without sharing your browser location.
Agreements and legally required records, where relevantContact details, agreed terms and necessary transaction or invoice data.Performing an agreement and complying with legal, including tax, obligations.
PillenPopper development updatesEmail address, submission time, consent response and the language of the form used.Sending emails from Core Solutions about the development of the PillenPopper, based on your consent. You can withdraw consent at any time by emailing contact@coresolutionsglobal.com.

3. The store locator and external links

The map loads tiles from OpenStreetMap. The OpenStreetMap Foundation receives technical request data, including your IP address and requested map tiles. Those tiles can reveal the approximate area displayed on your screen. When you submit a postcode, your browser sends it directly to Nominatim, an OpenStreetMap Foundation service.

Browser coordinates and postcode results are used in the current page’s memory. This website does not save them to a Core Solutions database, cookies or local storage. Refreshing or leaving the page clears that page state. The ‘Clear’ button clears the entered postcode and position. Clearing does not erase requests already received by an external provider. You can also revoke location permission in your browser settings.

A route button opens Google Maps with the selected retailer’s destination. Core Solutions does not add your current coordinates to that route link. Google may obtain location data separately if you allow it. Shop, media and LinkedIn buttons are ordinary links; their services are contacted when you follow them.

4. Who receives personal data?

Website hosting and delivery use GitHub Pages. Our business email uses Google Workspace. These providers may receive the data needed to deliver their services. The OpenStreetMap Foundation receives the map and postcode requests described above. Their own privacy notices explain processing for which they are independently responsible.

Data may also be shared with an adviser, service provider or competent authority when necessary for handling an agreement, a legal obligation or a legal claim. We do not sell your personal data. Where a provider processes personal data on our behalf, the GDPR requires appropriate processor terms and safeguards.

The PillenPopper sign-up form is embedded from Google Forms. When the form loads, your browser contacts Google, which may receive technical information such as your IP address and browser information. Submitted email addresses and consent responses are processed in Google Forms and a linked Google Sheet within our Google Workspace account, with access restricted to authorised people. Google may also process service and account data under its own privacy policy.

5. Processing outside the EEA

Some providers operate internationally, so personal data may be processed outside the European Economic Area. Transfers must meet GDPR requirements: for example, an applicable European Commission adequacy decision, or standard contractual clauses together with any necessary additional safeguards. You can contact us for information about the safeguards applicable to your data and how to obtain a copy. Provider notices linked below explain their international processing.

6. How long data is kept

Routine enquiries and correspondence are kept while they are being handled and for up to 12 months after completion, then deleted unless the following exceptions apply. Correspondence forming part of an ongoing agreement is kept for the duration of that agreement. Relevant evidence for an actual or reasonably anticipated legal dispute is kept until the claim is resolved or the applicable limitation period has expired; unrelated data is not retained for that purpose.

Tax records that must be retained are kept for the statutory period, generally seven years. Where the One Stop Shop VAT scheme applies, the relevant records are kept for ten years. These periods apply only to records covered by the relevant legal duty, not to all correspondence.

The website itself does not retain postcode or browser-location history beyond the current page state. Hosting, email and map providers may keep their own technical logs according to their service, security and statutory retention rules; their privacy notices explain the criteria. Core Solutions does not set those providers’ independent log-retention periods.

We keep your sign-up while you are subscribed to PillenPopper development updates. You can unsubscribe by emailing contact@coresolutionsglobal.com. We then stop sending updates and handle removal of your subscription data from the form responses and linked spreadsheet, except for minimal records needed to respect an opt-out or meet an applicable legal obligation.

7. Security and information you provide

We use appropriate technical and organisational measures for the risks involved, including HTTPS for the website and restricting access to business correspondence to people who need it. No online system is completely risk-free.

Providing a postcode, browser location or contacting us is optional. We need an email address and enough information about your request to reply. Without the relevant data, we may be unable to answer a question or provide the requested location feature. Please do not send medical records, passwords or other sensitive information that is unnecessary for your enquiry.

This website has no customer accounts or checkout and its own code does not use advertising trackers or analytics scripts. The optional PillenPopper sign-up form is provided by Google Forms as described above. We do not use the data described here for profiling or solely automated decisions with legal or similarly significant effects.

8. Your privacy rights

Subject to the GDPR conditions, you may request access, correction, deletion or restriction of your personal data. You may object to processing based on legitimate interests, explaining your particular situation. Where processing is automated and based on consent or a contract, you may also have a right to data portability.

You may withdraw consent at any time. For browser location, use ‘Clear’ and revoke the site’s location permission in your browser. Withdrawal does not affect the lawfulness of processing before withdrawal. Email us to withdraw any other consent or exercise your rights.

Send a request to contact@coresolutionsglobal.com. Requests are normally free. We respond within one month; if a request is complex or there are many requests, the GDPR permits an extension of up to two further months, which we explain within the first month. If identity verification is necessary, we request only proportionate information. Do not send a copy of your ID unsolicited.

You can complain to the Dutch Autoriteit Persoonsgegevens via autoriteitpersoonsgegevens.nl, or to the competent supervisory authority in the EEA country where you live or work. You do not have to contact us first.

9. Updates and further information

This version takes effect on 25 October 2026. We update this policy when relevant processing changes and show the revision date on this page. Where the law requires additional information or consent, we provide it before the new processing begins. For cookies and similar technologies, also read our Cookie Policy.