Privacy Policy
Last updated: 04-01-2025
Your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your personal data when you use our website and services, in compliance with the General Data Protection Regulation (GDPR).
1. Data We Collect
We may collect the following types of personal data:
- Contact Information: Name, email address, phone number, and address.
- Payment Information: Payment card details or payment processor details (e.g., via iDEAL, Bancontact, etc.).
- Order Information: Details about the products you purchase, delivery addresses, and transaction history.
- Website Usage Information: IP address, browser type, device information, and cookies (see Section 7 for our Cookie Policy).
- Communications: Any messages or inquiries sent via email or our contact form.
2. How We Use Your Data
We use your personal data for the following purposes:
- To process and deliver your orders.
- To communicate with you regarding your orders, support inquiries, or marketing (only with your explicit consent).
- To improve our website, services, and customer experience.
- To comply with legal obligations, such as tax and accounting regulations.
3. Legal Basis for Processing Your Data
Under GDPR, we process your data on the following legal grounds:
- Contractual necessity: To fulfill your order or provide services.
- Legal compliance: To meet legal obligations.
- Consent: For marketing communications or optional features (if provided).
- Legitimate interest: To improve our services or address inquiries.
4. Sharing Your Data
We only share your personal data with third parties when necessary:
- Shipping Carriers: To deliver your orders (e.g., DHL, PostNL).
- Payment Processors: To process payments securely.
- IT and Marketing Service Providers: To manage our website and email communications.
- Legal or Regulatory Authorities: If required by law.
We ensure all third parties comply with GDPR and only process your data under strict confidentiality.
5. Data Retention
We retain your personal data only as long as necessary for:
- The purposes outlined above.
- Legal or regulatory requirements (e.g., tax regulations requiring storage for up to 7 years).
6. Your Rights
Under GDPR, you have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Correction: Update or correct inaccurate information.
- Deletion: Request deletion of your personal data (subject to legal requirements).
- Objection: Object to specific data processing activities.
- Data Portability: Request your data in a structured, commonly used format.
- Withdraw Consent: For any processing activities based on your consent.
To exercise these rights, contact us at info@protoart.net. We will respond within 30 days.
7. Cookies
We use cookies to enhance your browsing experience. Cookies are small text files stored on your device. You can manage your cookie preferences in your browser settings.
8. Data Security
We take data security seriously. Your data is stored on secure servers, and we implement measures such as encryption, firewalls, and access controls to protect it.
9. International Transfers
If your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent measures.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with the updated date.
11. Contact Us
If you have questions or concerns about this Privacy Policy or how we handle your personal data, please contact us:
Email: info@protoart.net