Theodoors Artworks is a sole tradership, based in the Netherlands.​

• Business name: Theodoors Artworks

• Owner: Theodoor

• Address: Varenkamp 91, 7815 CB Emmen

• Email address: info@theodoorsartworks.com

• Phone number: 06-36555972

• Chamber of Commerce number: 95407189​

I am responsible for the processing of your personal data as described in this policy. No Data Protection Officer has been appointed; this is not legally required for a business of my size. For privacy-related questions you can contact me directly using the details above.

Data you provide yourself

When placing an order, creating an account or contacting customer service, I ask for:

• Name

• Address

• Phone number

• Email address

• Payment details (processed by payment providers, not stored by me)

• Any comments or questions you add

​

Data collected automatically

When you visit my website, some technical data is collected automatically:

• IP address (anonymised)

• Browser and device type

• Pages visited and click behaviour

• Time and duration of your visit

This data is only collected if you have given your consent via the cookie banner. See the cookie policy for more information.

Newsletter data

If you sign up for my newsletter, I store your email address. You will only be added to the mailing list after you have confirmed your subscription via a confirmation email (double opt-in).

I only use your data for the purposes for which you provided it, and always on the basis of a legal ground under the GDPR (Article 6):

​

To process your order

For delivery, invoicing and any contact about your order. Legal basis: performance of a contract.

​

To comply with legal obligations

For example, retaining invoices for tax purposes. Legal basis: legal obligation.

To improve my services

Anonymous analysis of website usage to optimise the webshop. Legal basis: consent via the cookie banner.

​

For the newsletter

Sending updates about new products, projects and offers. Legal basis: consent. You can unsubscribe at any time via the link at the bottom of every newsletter.

I take appropriate technical and organisational measures to protect your data against loss, misuse or unauthorised access:

• Data is stored via secure services (Wix).

• My website uses SSL encryption (https).

• Only I have access to customer data.

• Payment details are processed exclusively by recognised payment providers and are not stored by me.

I only share your data with third parties where necessary for the performance of the contract or where I am legally required to do so. Specifically:

• Logistics partners: PostNL, for delivery of your order.

• Payment providers: Mollie and PayPal, for processing payments.

• Hosting partner: Wix, for hosting the website and webshop.

I have a Data Processing Agreement (DPA) with each of these parties, setting out how your data is protected in accordance with the GDPR. I never sell your data to third parties.

I do not retain your data any longer than strictly necessary:

• Order data and invoices: 7 years (statutory retention obligation for the Tax Authority).

• Customer data (account): for as long as your account is active, plus 1 year after the last contact.

• Newsletter subscriptions: until you unsubscribe, with a maximum of 3 years after the last interaction.

• Contact forms: maximum 1 year after the last response.

My website uses cookies. A detailed description of which cookies I use, why, and how you can manage your preferences can be found in my cookie policy.

Under the GDPR you have a number of rights regarding your personal data:

• Right of access: you may ask which data I hold about you.

• Right to rectification: you may have incorrect data corrected.

• Right to erasure: you may request that your data be deleted.

• Right to restriction: you may have the processing restricted.

• Right to data portability: you may receive your data in a common format.

• Right to object: you may object to the use of your data, for example for the newsletter.

• Right to withdraw consent: for anything processed on the basis of consent.

Would you like to exercise one of these rights? Send an email to info@theodoorsartworks.com. I will respond within 2 business days and process your request within the statutory period of 1 month.

Should a data breach occur involving your personal data, I will report this to the Dutch Data Protection Authority and — where this poses a high risk to your rights and freedoms — also notify you personally, in accordance with GDPR Articles 33 and 34.

Do you have a complaint about how I handle your data? Please let me know first so we can resolve it together. If we cannot reach a resolution, you have the right to file a complaint with the Dutch Data Protection Authority at autoriteitpersoonsgegevens.nl.

I may update this privacy policy from time to time, for example if my services or applicable legislation changes. Please check this page regularly to stay informed. The date at the top of this page indicates when it was last updated.