Privacy policy
Privacy statement
|
Organisation: |
Devoted Creations Benelux B.V. |
|
Address: |
Papaverweg 34, unit B100 1032KJ Amsterdam |
|
Telephone: |
+31 6 2550 1616 |
|
E-mail: |
info@devotedcreationsbenelux.nl |
|
Website: |
www.devotedcreationsbenelux.nl |
|
Chamber of Commerce-number: |
42140848 |
1. Why this privacy statement?
Your privacy is important to us. In this statement, we explain what personal data we collect, why we do so and what your rights are. This information helps you gain a better understanding of what we do with your data.
2. What do we collect and how?
We collect and use the following personal data:
· name, address, telephone number and e-mail address;
· billing details and payment information;
· communications about an order/appointment;
· information from cookies and similar technologies;
· quotations and contract details;
· website usage and IP-addresses;
· user account (login) details;
· technical log files;
· delivery- and collection addresses;
· signatures upon delivery;
· loyalty card and reward points;
· customer purchase history;
· online shopping behaviour;
· payment details;
· user preferences.
3. Why do we use your data?
We use your data because this is necessary to provide our services and to comply with the law. An example of the former is when you have placed an order and we need your address to deliver it. An example of the latter is when we need your data to file tax returns.
We may only use your personal data if we have a valid reason to do so. The legal term for this is ‘legal basis’. We may use your data on the following legal bases:
We need your data to perform a contract[1] (for example, delivering an order to your address).
We need your data to comply with our legal obligations[2] (such as filing tax returns).
We use your data because you have given consent[3] for this.
We need your data because it is important for your health or life[4] (during emergencies or imminent danger).
We have a legitimate interest[5] in using your data.
4. With whom do we share your data?
We only share your personal data with other organisations when this is necessary or required by law.
Where necessary, we may share your data with these partners:
|
Bookkeeper/accountant |
For accounting and tax returns |
|
Bank Supplier |
For payment processing For the data it processes on our behalf
|
|
Payment service providers |
For processing and verifying payments and preventing fraud |
|
Delivery service |
For the delivery of your orders |
|
Hosting provider(s) |
For website and email services |
|
Customs authorities |
For international transport |
|
Freight forwarders and partners |
For carrying out transport operations |
|
Marketing and analysis partners |
For marketing and analysis purposes |
We are legally required to share data with, among others, the following organisations:[6]
· police and prosecution authorities during criminal investigations;
· Tax and Customs Administration;
· supervisory authorities during inspections;
· judicial authorities;
· other organisations legally authorised to request data.
5. How do we protect your data?
We ensure that your personal data is properly secured:
Your data is secured using modern technology.
Only authorised employees have access.
We make regular backups.
In the event of a data breach, we will inform you as soon as possible.
We do not retain your data for longer than necessary:
Customer and account data: for the duration of the customer relationship or the existence of the account, and thereafter for no longer than necessary to handle enquiries, complaints and potential claims, unless a longer statutory retention period applies.
Invoice, payment and other administrative data: 7 years after the end of the financial year to which the data relates, or 10 years for data subject to a statutory retention period of 10 years.
Data relating to orders, returns and complaints: for as long as necessary to perform the contract and handle enquiries, complaints and potential claims.
6. What are your rights?
When we use your personal data, you have the right to:
|
Access |
You may ask what data we hold about you. |
|
Rectification |
Is the personal data we hold about you incorrect or incomplete? You may ask us to rectify the data (to amend or complete it). |
|
Erasure |
You may ask us to erase your data. |
|
Restriction |
You may ask us to temporarily stop processing your data. |
|
Portability |
You may request your data in a commonly used format. |
|
Objection Withdraw consent
Human review of decisions |
You may object to certain processing operations. You may withdraw the consent you previously gave for processing. If you receive an automated decision from us, you may ask us to make a new decision that has been reviewed by a person. |
Sometimes we cannot comply with your request because an exception may apply. For example, when collecting debts. If we refuse your request, we will let you know why.
How can you exercise your rights?
Send an e-mail to: info@devotedcreationsbenelux.nl. We will respond to your request within one month.[7]
Do you have a complaint?
Are you dissatisfied with how we handle your personal data? Please contact Aicha van der Pas, aicha.vanderpas@devotedcreationsbenelux.nl, 0625501616. Are you still dissatisfied with how your complaint has been handled? You may then lodge a complaint with the Dutch Data Protection Authority: https://www.autoriteitpersoonsgegevens.nl/een-tip-of-klacht-indienen-bij-de-ap
7. Changes to this privacy statement
We may amend this privacy statement, for example when introducing new services or following changes in the law. You can always find the current version on our website.
Last updated: 28 oktober 2026.
8. Contact
Do you have any questions about this privacy statement or about how we handle your personal data? Please contact us:
Devoted Creations Benelux B.V.
E-mail: info@devotedcreationsbenelux.nl
Telephone: +31 6 2550 1616
[1] Article 6(1)(b) GDPR.
[2] Article 6(1)(c) GDPR.
[3] Article 6(1)(a) GDPR.
[4] Article 6(1)(d) GDPR.
[5] Article 6(1)(f) GDPR.
[6] These are examples, not a complete list of all organisations with which we are required to share data.
[7] You may receive a request in various ways, as the law does not specify how a person must submit a request. You must also respond to a request if you receive it, for example, by post or by telephone.
