Privacy Policy

Last Updated: December 2024

At colchijppu B.V. (registration number 63597421), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, process, and safeguard your data when you visit our store, use our website, or interact with our services.

Data Controller

colchijppu B.V. is the data controller responsible for your personal information. We are registered in the Netherlands with company number 63597421 and VAT number NL218635974B171. Our registered address is Vijverweg 77, 5662 RB Eindhoven, North Brabant, Netherlands.

Data Collection

The data we collect includes personal information that you provide to us directly and information that we collect automatically when you interact with our services. This may include:

• Contact information (name, email address, phone number)
• Communication preferences and feedback
• Website usage data and cookies
• Transaction information when you make purchases
• CCTV footage for security purposes in our store

How We Use Your Information

We explain how we use your information to provide and improve our services, communicate with you, and comply with legal obligations. The use of your data is always based on a valid legal basis under GDPR, including:

• Processing transactions and providing customer service
• Responding to your inquiries and feedback
• Improving our products and services
• Ensuring store security and preventing theft
• Complying with legal and regulatory requirements
• Sending promotional communications (with your consent)

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Legitimate Interest: For business operations, security, and service improvement
• Contractual Necessity: To fulfill transactions and provide services
• Legal Obligation: To comply with tax, accounting, and other legal requirements
• Consent: For marketing communications and optional services

Data Sharing

We do not sell your personal information to third parties. We may share your data with:

• Service providers who assist with business operations (payment processors, IT support)
• Legal authorities when required by law or to protect our rights
• Professional advisors (accountants, lawyers) under confidentiality agreements

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Generally:

• Customer contact information: Until you request deletion or 3 years of inactivity
• Transaction records: 7 years as required by Dutch tax law
• CCTV footage: 30 days unless needed for security investigations
• Marketing consent: Until withdrawn or 2 years of inactivity

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal requirements)
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for marketing or other optional services

International Transfers

We primarily process data within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses approved by the European Commission.

Security Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption, access controls, staff training, and regular security assessments.

Cookies and Tracking

Our website uses cookies and similar technologies to enhance your browsing experience and analyze website usage. For detailed information about our use of cookies, please see our Cookie Policy.

Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding your personal data, please reach out to us:

Supervisory Authority

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):