Privacy notice

1. Who we are (Data Controller)

This website (food.giiava.com) is operated by the GIIAVA Group. The data controller for personal data collected through this site is:

Ville Holding Pte. Ltd.
10 Anson Road, #12-15, Singapore 079903
Privacy contact: privacy@villeholding.com

2. What we collect, and why

We only collect personal data that you submit to us through the contact form on this site (name, email address, company, country, telephone number where provided, and the message content). We use this data solely to:

• respond to your enquiry,
• send you the requested technical documentation or samples,
• follow up on commercial discussions you have initiated.

We do not run analytics scripts, ad pixels, or third-party tracking on this site. We do not set cookies for marketing or analytics purposes. The site uses only essential session-state mechanisms required for the contact form to function.

3. Lawful basis (GDPR Article 6)

For EU/EEA and UK visitors, our processing relies on:

• Article 6(1)(b) — processing necessary to take steps at the request of the data subject prior to entering a contract (when you ask for a sample, a quote, or technical documentation);
• Article 6(1)(f) — our legitimate interest in responding to business enquiries and managing customer relationships, balanced against your interests and fundamental rights.

4. Who has access to your data

Internally: the GIIAVA Group sales, technical, and customer-service teams across our entities in India, Singapore, and the Netherlands. Externally:

• Microsoft Azure — cloud infrastructure provider that hosts the contact-form intake endpoint. Microsoft processes data under its own GDPR-aligned Data Protection Addendum and Standard Contractual Clauses where applicable.
• Our internal CRM, accessed only by authorised GIIAVA Group personnel.

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

5. International transfers

The GIIAVA Group operates from India, Singapore, and the Netherlands. Data submitted by EU/EEA or UK residents may be accessed from those locations to respond to your enquiry. Where personal data is transferred outside the EU/EEA, transfers are protected by the European Commission’s Standard Contractual Clauses (SCCs) and, where applicable, additional safeguards.

6. How long we keep your data

Enquiry data is retained for as long as needed to manage the commercial relationship, and thereafter for up to three years for legitimate business and tax-record purposes (or longer where required by local law). If the enquiry does not progress to a commercial relationship, we delete the data within 24 months.

7. Your rights

If you are in the EU/EEA, UK, or any other jurisdiction with comparable data-protection law, you have the right to:

• access the personal data we hold about you,
• request correction of inaccurate or incomplete data,
• request erasure of your data (right to be forgotten),
• restrict or object to processing,
• request portability of your data in a structured machine-readable format,
• withdraw consent at any time where processing relies on consent.

To exercise any of these rights, contact us at privacy@villeholding.com. We respond within 30 days. You also have the right to lodge a complaint with your local data-protection supervisory authority.

8. Security

Personal data is transmitted over HTTPS. Our cloud and CRM systems use industry-standard access controls, encryption at rest, and audit logging.

9. Children

This site is a business-to-business technical resource for food and nutraceutical industry professionals. It is not directed at children, and we do not knowingly collect personal data from anyone under 18.

10. Changes to this notice

We may update this notice from time to time. Material changes will be flagged on this page with an updated effective date.

11. Cookies

This site does not set marketing, analytics, or third-party tracking cookies. Where any browser storage is used (for example, to remember a language preference if you set one), it is strictly necessary for the site to function and does not require consent under the ePrivacy Directive.