1. Data Controller
This website is operated by Lekker and Peace B.V., located at Albert Cuypstraat 203DH, Amsterdam, The Netherlands.
For any questions regarding this Privacy Policy or your personal data, you can contact us at: info@chinguamsterdam.nl.
2. Personal Data We Collect
We may collect and process the following personal data:
- Orders (WooCommerce): name, email address, phone number, billing and shipping address.
- Payments (SumUp): payment details are processed directly by SumUp; we do not store full payment card information.
- Contact forms (WPForms): when you submit a message via our contact form, we collect your name, email, and the content of your message.
- Analytics (Google Analytics): anonymised data such as IP address (shortened), device, browser, and usage statistics.
3. Purposes of Processing
We process your data for the following purposes:
- To process and deliver your orders.
- To manage payments securely through SumUp.
- To respond to enquiries submitted via the contact form.
- To analyse website traffic and improve our services.
- To comply with legal obligations (e.g. tax and accounting requirements).
4. Legal Basis under GDPR
- Contract performance: for processing orders and payments.
- Consent: for analytics cookies and when you voluntarily submit data via our contact form.
- Legal obligation: for record-keeping and compliance with tax laws.
- Legitimate interest: to improve our website and services.
5. Sharing of Data
We may share your personal data with trusted third parties only when necessary:
- SumUp: to process payments. See SumUp Privacy Policy.
- Google Analytics: for statistical analysis. See Google Privacy Policy.
- Service providers: such as our web hosting company, for the operation of our website.
We do not sell or rent your personal data to third parties.
6. Data Retention
We keep personal data only for as long as necessary:
- Order information: retained for at least 7 years in accordance with Dutch tax law.
- Contact form messages: kept as long as needed to handle your enquiry.
- Analytics data: retained according to Google Analytics’ policies.
7. Data Subject Rights
Under GDPR, you have the following rights:
- Right to access your data.
- Right to rectification of inaccurate data.
- Right to erasure (“right to be forgotten”).
- Right to restriction of processing.
- Right to data portability.
- Right to object to certain processing.
To exercise any of these rights, please contact us at info@chinguamsterdam.nl.
8. International Transfers
Some of our service providers (e.g. Google) may process data outside the European Economic Area (EEA). We ensure that appropriate safeguards are in place, such as the EU Standard Contractual Clauses.
9. Security
We take appropriate technical and organisational measures to protect your personal data against loss, misuse, and unauthorised access.
10. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect legal changes or updates to our services. Please check this page periodically.