Privacy Policy

Last updated:

1. Data Controller

The data controller responsible for processing your personal data is:

Zolvarenshrel
Grote Markt 1, 9712 HN Groningen, Netherlands
Email: customer@zolvarenshrel.world
Website: https://zolvarenshrel.world

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

  • Identity Data: Full name as provided in the order form.
  • Contact Data: Email address and, optionally, phone number.
  • Communication Data: Messages submitted via the order form.
  • Technical Data: IP address, browser type and version, operating system, time zone setting, device type, and other technology-related identifiers collected through cookies and similar technologies.
  • Usage Data: Information about how you use our website, including pages visited, time spent on pages, and navigation paths.
  • Cookie Data: Data collected through cookies as described in our Cookie Policy.

3. How We Collect Your Data

We collect personal data through the following methods:

  • Direct interactions: When you submit the order form on our website, providing your name, email, phone number (optional), and message.
  • Automated technologies: As you navigate our website, we may automatically collect Technical Data and Usage Data through cookies, server logs, and similar technologies.
  • Consent: When you provide explicit consent through our cookie consent mechanism or the GDPR consent checkbox on our order form.

4. Legal Basis for Processing

We process your personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR):

  • Consent (Article 6(1)(a) GDPR): Where you have given explicit consent for processing your data for specific purposes, such as submitting the order form or accepting analytics/marketing cookies.
  • Contract Performance (Article 6(1)(b) GDPR): Where processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract.
  • Legitimate Interests (Article 6(1)(f) GDPR): Where processing is necessary for our legitimate interests, such as improving our website, ensuring security, and preventing fraud, provided these interests are not overridden by your rights and freedoms.
  • Legal Obligation (Article 6(1)(c) GDPR): Where processing is necessary for compliance with a legal obligation, such as tax or regulatory requirements.

5. Purposes of Processing

We process your personal data for the following purposes:

  • To process and fulfill your orders and requests.
  • To communicate with you regarding your orders, inquiries, and customer support.
  • To operate, maintain, and improve our website functionality and user experience.
  • To analyze website usage patterns and performance through analytics tools.
  • To ensure the security and integrity of our website.
  • To comply with applicable legal and regulatory obligations.
  • To send marketing communications where you have given explicit consent.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Order and contact data: Retained for up to 3 years after your last interaction with us, unless a longer retention period is required by law (e.g., tax records may be retained for up to 7 years as required by Dutch fiscal law).
  • Cookie consent preferences: Stored in your browser's localStorage for up to 12 months, after which you will be asked to renew your preferences.
  • Technical and usage data: Retained for up to 26 months for analytics purposes.
  • Communication records: Retained for up to 3 years for customer support and quality assurance purposes.

When data is no longer needed, it is securely deleted or anonymized.

7. Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

  • Right of Access (Article 15): You have the right to request a copy of the personal data we hold about you.
  • Right to Rectification (Article 16): You have the right to request correction of inaccurate or incomplete personal data.
  • Right to Erasure (Article 17): You have the right to request the deletion of your personal data, subject to certain legal exceptions.
  • Right to Restriction of Processing (Article 18): You have the right to request that we restrict the processing of your data under certain circumstances.
  • Right to Data Portability (Article 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to Object (Article 21): You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
  • Right to Withdraw Consent (Article 7(3)): Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or another relevant supervisory authority in your country of residence.

To exercise any of these rights, please contact us at customer@zolvarenshrel.world. We will respond to your request within 30 days, as required by law.

8. Data Sharing and Third Parties

We do not sell your personal data to third parties. We may share your data with the following categories of service providers who process data on our behalf:

  • Hosting providers: For website hosting and server infrastructure.
  • Analytics providers: For website usage analysis (only when you have consented to analytics cookies).
  • Payment processors: For secure payment processing, if applicable.
  • Email service providers: For sending order confirmations and communications.

All third-party processors are bound by data processing agreements that ensure they process data in compliance with GDPR and provide appropriate security measures.

9. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission.
  • Transfers to countries recognized by the European Commission as providing an adequate level of data protection.
  • Other legally recognized transfer mechanisms as applicable.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • HTTPS encryption for all data transmitted between your browser and our server.
  • Regular security assessments and updates of our systems.
  • Access controls limiting data access to authorized personnel only.
  • Secure data storage with encryption at rest where applicable.
  • Regular backups and disaster recovery procedures.

11. Children's Privacy

Our website and products are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from a minor, we will take steps to delete it promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or regulatory guidance. The updated policy will be posted on this page with a revised "Last updated" date. We encourage you to review this page periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us:

Zolvarenshrel
Grote Markt 1, 9712 HN Groningen, Netherlands
Email: customer@zolvarenshrel.world

You also have the right to lodge a complaint with the Dutch Data Protection Authority:

Autoriteit Persoonsgegevens
Bezuidenhoutseweg 30, 2594 AV Den Haag, Netherlands
Website: https://autoriteitpersoonsgegevens.nl