
Privacy Policy – Stoffengigant
Stoffengigant respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and what rights you have under the General Data Protection Regulation (GDPR).
1. Who We Are
For the purposes of the GDPR, Stoffengigant is the data controller. This means that we decide how and why your personal data is processed.
If you have any questions about this Privacy Policy or our data processing practices, please contact us at:
[Insert contact details]
2. Personal Data We Collect
When you use our website, services, or provide information to us directly, we may process the following personal data:
-
First and last name
-
Gender
-
Address details
-
Telephone number
-
Email address
-
Other information you provide voluntarily (e.g. via contact form or account creation)
-
Location data
-
Information about your activities on our website
-
IP address
-
Internet browser and device type
3. Special Categories of Data & Minors
Our services are not intended for children under 16 years of age, unless consent has been given by a parent or legal guardian. We cannot verify the age of visitors, and we encourage parents to monitor their children’s online activities.
If you believe we have collected personal data about a child without proper consent, please contact us immediately. We will delete this information without delay.
4. Purposes and Legal Basis for Processing
We process your personal data for the following purposes:
-
To contact you by email or telephone if necessary for providing our services
-
To deliver your orders to the correct address
-
To enable you to create and manage an account, so you don’t have to re-enter details for future orders
-
To respond to your inquiries or requests via the contact form
-
To analyze website usage and improve our services based on your preferences
We process your data based on one or more of the following legal grounds:
-
Your consent
-
The performance of a contract
-
Compliance with legal obligations
-
Legitimate interests (e.g. website optimization, fraud prevention)
5. Data Retention
We will retain your personal data only as long as necessary to achieve the purposes for which it was collected, or as required by law.
If you would like to know how long we keep specific categories of data, please contact us at [Insert contact details].
6. Sharing of Data
We do not sell your personal data to third parties. We only share data with:
-
Third parties necessary for fulfilling our contract with you (e.g. delivery services, payment providers)
-
External service providers acting as processors under strict agreements ensuring confidentiality and security
-
Authorities where legally required
Stoffengigant remains responsible for the processing of your data.
7. Payments
When you make an online purchase, your payment will be processed securely through trusted payment providers. All payment methods used by Stoffengigant use encrypted connections to protect your personal data.
8. Cookies and Website Analytics
We use cookies and similar technologies to optimize your experience on our website. These include:
-
Functional cookies – ensure the website functions properly and remember your preferences
-
Analytical cookies (Google Analytics) – help us understand how our website is used
-
Tracking cookies (third parties) – allow personalized advertising and tracking across websites
You can disable or delete cookies in your browser settings. For more information, please see our [Cookie Policy].
9. Your Rights under GDPR
You have the following rights regarding your personal data:
-
Right of access – obtain a copy of the data we hold about you
-
Right to rectification – request correction of inaccurate or incomplete data
-
Right to erasure – request deletion of your personal data
-
Right to restrict processing – request a temporary halt on processing your data
-
Right to data portability – receive your data in a structured, machine-readable format
-
Right to object – object to processing based on legitimate interests or for direct marketing
To exercise your rights, please send a request to [Insert contact details]. For verification, we may ask you to provide a copy of your ID, with your photo, MRZ, passport number, and BSN (citizen service number) blacked out for privacy.
We will respond to your request within four weeks.
10. Security – SSL Encryption
We use SSL (Secure Socket Layer) technology to ensure that personal data transmitted via our website is encrypted and protected against unauthorized access. You can recognize a secure connection by the padlock icon in your browser and the use of “https://” in the website address.
11. Data Security
We take data protection seriously and implement appropriate technical and organizational measures to prevent misuse, loss, unauthorized access, disclosure, or alteration of your personal data.
If you suspect misuse of your data, please contact us immediately at [Insert contact details].
12. Updates to This Policy
We may update this Privacy Policy from time to time. The most recent version will always be published on our website, with the date of the latest update indicated.