Privacy Policy

1. Data Controller

The data controller is:

Arzeni
Bottelroosstraat 5-46, Groningen, Netherlands.

2. Personal Data We Collect

We may collect the following personal data when you use our services:

  • Identification details: Name, email address, phone number

  • Address details: Shipping and billing address

  • Order and transaction data: Order history, payment status, delivery details

  • Device and usage data: IP address, browser type, cookies, and usage data

  • Marketing preferences: Subscription to newsletters or promotions

We do not collect or process sensitive personal data (special categories under Art. 9 GDPR).

3. Purposes of Data Processing

We process your data for the following purposes:

  • To process and deliver your orders

  • To manage customer service inquiries

  • To communicate order updates and marketing messages (if consented)

  • To maintain and improve our website functionality

  • To comply with legal obligations (e.g. tax law, consumer rights)

4. Legal Bases for Processing

Your personal data is processed on one or more of the following legal bases under Article 6 GDPR:

  • Contractual necessity (Art. 6(1)(b)) – to fulfill your purchase

  • Legal obligation (Art. 6(1)(c)) – for accounting, invoicing, or consumer law

  • Legitimate interest (Art. 6(1)(f)) – e.g. fraud prevention, website security

  • Consent (Art. 6(1)(a)) – for optional marketing communications

You may withdraw your consent at any time.

5. Data Sharing and Transfers

We do not sell your personal data. Your data may be shared with:

  • Payment providers (e.g. Shopify Payments, iDEAL, PayPal)

  • Shipping carriers (e.g. PostNL, DHL)

  • IT and hosting partners (e.g. Shopify, email providers)

  • Administrative service providers (e.g. bookkeepers, tax consultants)

All parties are GDPR-compliant and bound by data processing agreements where necessary.

We do not transfer your data outside the EEA unless adequate safeguards are in place (e.g. EU Standard Contractual Clauses).

6. Data Retention

We retain your personal data:

  • As long as needed for the purpose of processing (e.g. order fulfilment)

  • For a minimum of 7 years for tax and administrative purposes (required by Dutch law)

  • For marketing purposes, until you unsubscribe or withdraw consent

7. Your Rights

Under the GDPR, you have the following rights:

  • Right to access your data

  • Right to rectification of inaccurate data

  • Right to erasure ("right to be forgotten")

  • Right to restriction of processing

  • Right to data portability

  • Right to object to processing based on legitimate interest

  • Right to withdraw consent at any time

  • Right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): https://autoriteitpersoonsgegevens.nl

To exercise your rights, contact us at: [Insert contact email]

8. Cookies

Our website uses cookies to improve user experience, enable essential functions (e.g. shopping cart), and analyze website traffic. For more information, see our [Cookie Policy].

You may manage your cookie preferences via your browser settings or our cookie banner.

9. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse, including:

  • Encrypted payment processing

  • HTTPS secured website

  • Access controls for data processors

10. Changes to This Privacy Policy

We may update this privacy policy from time to time. The latest version will always be available on our website. We recommend reviewing it regularly.

11. Contact

If you have any questions regarding this privacy policy or how we handle your personal data, please contact:

Arzeni
Email: contact@arzeni.nl