1. Data Controller
The data controller responsible for your personal data is:
Dryxalonrycrax
Marktplein 9, 7607 HN Almelo, Netherlands
Phone: +31621546628
Email: welcome-info@dryxalonrycrax.world
2. Personal Data We Collect
We collect personal data only when you voluntarily provide it or when it is generated by your interaction with our website. The categories of data we may process include:
- Identification data: first name, last name
- Contact data: email address, phone number
- Order data: product ordered, delivery address, correspondence
- Technical data: IP address, browser type, device information, pages visited, time of visit
- Cookie data: cookie identifiers and related preferences (see our Cookie Policy)
We do not collect special categories of personal data (such as health, racial or political data) unless you voluntarily disclose such information in a message field.
3. Purposes and Legal Bases for Processing
We process your personal data for the following purposes and on the following legal bases (Article 6 GDPR):
- Order processing and fulfilment – Legal basis: performance of a contract (Art. 6(1)(b) GDPR)
- Customer communications – Legal basis: contract and legitimate interests (Art. 6(1)(b) and (f))
- Legal compliance – Legal basis: legal obligation (Art. 6(1)(c))
- Website analytics – Legal basis: consent (Art. 6(1)(a))
- Marketing communications – Legal basis: consent (Art. 6(1)(a))
Where processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
4. Retention Periods
We retain personal data only for as long as necessary for the purposes described above:
- Order and contractual data: 7 years (Dutch fiscal retention requirement under Boek 2 BW)
- Customer communications: 2 years from last contact
- Analytics data: up to 26 months
- Marketing consent records: until consent is withdrawn, plus 1 year for evidence purposes
- Technical / server logs: up to 90 days
5. Recipients and Transfers
We do not sell your personal data. We may share your data with:
- Courier and logistics partners for order delivery (name and address only)
- Payment service providers who process transactions on our behalf
- IT service providers (hosting, email) acting as processors under a data processing agreement
- Competent authorities if required by law
All processors are contractually bound to process data only as instructed and to maintain appropriate security measures. Where data is transferred outside the EEA, we ensure appropriate safeguards (Standard Contractual Clauses or adequacy decision) are in place.
6. Your Rights Under GDPR
Under GDPR and Dutch law, you have the following rights regarding your personal data:
- Right of access – obtain a copy of your personal data
- Right to rectification – correct inaccurate or incomplete data
- Right to erasure – request deletion of your data where permitted
- Right to restriction – limit how we process your data
- Right to data portability – receive your data in a structured, machine-readable format
- Right to object – object to processing based on legitimate interests or direct marketing
- Right to withdraw consent – where processing is based on consent
To exercise any of these rights, contact us at the address in Section 1. We will respond within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).
7. Security Measures
We implement appropriate technical and organisational security measures to protect your personal data against accidental loss, destruction, alteration, unauthorised disclosure or access. These measures include:
- HTTPS/TLS encryption for all data transmitted via the website
- Access controls limiting data access to authorised personnel only
- Regular review of security practices
- Data processing agreements with all sub-processors
8. Cookies
Our website uses cookies and similar technologies. For full details, please review our separate Cookie Policy.
9. Minors
Our website and products are intended for adults aged 18 and over. We do not knowingly collect personal data from persons under 16 years of age. If you believe we have inadvertently collected such data, please contact us immediately so we can delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We encourage you to review this page periodically. Material changes will be communicated via a notice on the website.
11. Contact Us
For any questions, requests or complaints regarding your personal data, please contact:
Dryxalonrycrax
Marktplein 9, 7607 HN Almelo, Netherlands
Phone: +31621546628
Email: welcome-info@dryxalonrycrax.world