This privacy policy describes how De Kaaskamer collects, uses, and protects the personal information you provide when using our online platform and services. We are committed to protecting your privacy and handling your data responsibly, in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).
Information We Collect
We collect various types of information to provide and improve our services to you. This includes information you provide directly to us, such as when you place an order, create an account, subscribe to a newsletter, participate in a workshop, or contact us. This information may include your name, billing address, shipping address, payment details (though we do not store full payment card numbers), and communication preferences.
We also collect information automatically when you use our site. This may include technical information about your device, your IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform. We also collect information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our site (including date and time), products you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page.
How We Use Your Information
We use the information we collect for various purposes:
- To process and fulfill your orders, including managing payments and delivery.
- To provide, operate, and maintain our services.
- To improve, personalize, and expand our services and our online platform.
- To understand and analyze how you use our services.
- To communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the service, and for marketing and promotional purposes, where you have consented.
- To process your participation in workshops or other events.
- To send you technical notices, updates, security alerts, and support and administrative messages.
- To detect and prevent fraud and other prohibited or illegal activities.
- To comply with our legal obligations.
Legal Basis for Processing
We process your personal data based on several legal grounds:
- Your consent: Where you have given us clear consent to process your personal data for a specific purpose.
- Performance of a contract: Where processing is necessary for the performance of a contract to which you are party or in order to take steps at your request before entering into a contract (e.g., processing your order).
- Legal obligation: Where processing is necessary for compliance with a legal obligation that applies to us.
- Legitimate interests: Where processing is necessary for our legitimate interests or those of a third party, provided that your fundamental rights and freedoms do not override those interests (e.g., improving our services, preventing fraud).
Sharing Your Information
We may share your personal information with third parties in the following circumstances:
- Service Providers: We may share information with third-party service providers who perform services on our behalf, such as payment processing, order fulfillment, delivery services, website hosting, data analysis, and marketing services. These third parties are obligated to protect your information and use it only as necessary to perform the services for us.
- Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
- Business Transfers: In the event of a merger, acquisition, or asset sale, your personal information may be transferred as part of that transaction.
- With Your Consent: We may share your information with other third parties when we have your express consent to do so.
We do not sell or rent your personal data to third parties for their marketing purposes without your explicit consent.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
Data Security
We have implemented appropriate technical and organizational security measures designed to protect your personal information from accidental loss, unauthorized access, use, alteration, and disclosure. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee its absolute security.
Your Rights
In accordance with applicable data protection laws, you have certain rights regarding your personal data. These rights may include:
- The right to access the personal data we hold about you.
- The right to request correction of inaccurate or incomplete personal data.
- The right to request erasure of your personal data where there is no longer a legitimate reason for us to continue processing it.
- The right to restrict the processing of your personal data in certain circumstances.
- The right to object to the processing of your personal data in certain circumstances (e.g., for direct marketing).
- The right to data portability, allowing you to receive your personal data in a structured, commonly used, and machine-readable format and transmit it to another controller.
- The right to withdraw consent at any time where we are relying on consent to process your personal data. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
To exercise any of these rights, please contact us using the details provided below. You also have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data infringes applicable data protection laws.
Cookies and Similar Technologies
Our site uses cookies and similar tracking technologies to track the activity on our service and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyze our service. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.
Updates to this Policy
We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we update the policy, we will revise the information presented here.
Contact Us
If you have any questions about this privacy policy or our data practices, please contact us:
De Kaaskamer
Runstraat 274
1016 PJ Amsterdam
Netherlands
