1.Privacy Policy – Atelier Verden BV

Version 1.0 — April 19, 2025

1. Who are we?

This privacy policy applies to all personal data collected and processed by:

• Atelier Verden BV
• 3PL Address
• Netherlands
• Chamber of Commerce (KvK): KvK number
• Email: contact@atelierverden.com
• Website: www.atelierverden.com

Atelier Verden BV is the data controller within the meaning of the General Data Protection Regulation (GDPR).

2. What personal data do we process?

We process the following personal data:

• Name and address details
• Email address and phone number
• Payment information
• Order history
• IP address, browser data, device information, and click behavior (for website optimization)
• Any content of communication with customer service

We do not process special categories of personal data.

3. Purposes of processing

We only process personal data for legitimate and clearly defined purposes:

• To contact you regarding your order or questions about our products
• To execute the agreement and handle your order
• For invoicing and financial administration
• To inform you about changes to our products or services
• For customer service and returns
• To send marketing messages (e.g. newsletters), with your consent
• To analyze and improve website performance (e.g. via cookies or analytics tools)
• To comply with legal obligations (e.g. tax recordkeeping)

Use of customer content on social media

If you tag us on social media or use hashtags like #atelierverden, we may — with your consent — use this content on our marketing channels (e.g. website, social media, newsletter).
You may withdraw consent at any time.
You guarantee that the shared content does not infringe on the rights of third parties, including intellectual property, portrait, or privacy rights.
You agree to indemnify Atelier Verden for third-party claims related to this content, as permitted by law.
We do not sell or rent your data to third parties.

4. Legal basis for processing

We process your data based on:

• Performance of a contract (e.g. delivery, payment, returns)
• Consent (e.g. marketing communications)
• Legal obligations (e.g. administrative recordkeeping)
• Legitimate interest (e.g. fraud prevention, customer service)

5. Data retention periods

We do not retain data longer than necessary, unless legally required:

• Invoice and order data: 7 years
• Account data: as long as the account is active
• Newsletter subscriptions: until you unsubscribe

6. Sharing data with third parties

We only share your data with third parties when necessary, such as:

• Logistics partners
• Payment providers
• Accounting and tax service providers
• IT and hosting providers (e.g. Shopify)
• Marketing platforms (e.g. newsletter tools, with consent)

We have data processing agreements with these parties, in compliance with the GDPR.

Shopify hosting

Our webshop is hosted on Shopify. Shopify is responsible for the hosting and security of the store and applies the following:
• Firewalls
• Encryption
• Secure servers
• Data minimization

Shopify meets EU data security standards and holds relevant certifications.
Despite strong protections, we cannot guarantee 100% security against incidents such as ransomware or data breaches.

Atelier Verden remains ultimately responsible. If a data breach occurs, we will follow legal notification requirements and inform affected individuals as soon as possible.

7. Your rights

You have the following rights:

• Right of access to your data
• Right to rectification (correction of errors)
• Right to erasure (right to be forgotten)
• Right to restrict processing
• Right to data portability
• Right to object, including to marketing use

To exercise your rights, email us at contact@atelierverden.com. We respond within 30 days.

8. Cookies

Our website uses functional, analytical, and (with consent) marketing cookies.
For full details, see our separate Cookie Policy.

9. Security

We and our partners (like Shopify) implement appropriate technical and organizational measures, including:

• SSL certificates
• Encrypted data storage
• Firewalls and monitoring
• Regular software updates
• Access limited to authorized personnel only

10. Complaints

If you are dissatisfied with how we handle your data, contact our Data Protection Officer at contact@atelierverden.com.
You also have the right to file a complaint with the Dutch Data Protection Authority via www.autoriteitpersoonsgegevens.nl.

11. Changes

We reserve the right to amend this privacy policy at any time. The latest version is always available on our website.

Last updated: April 19, 2025
© Atelier Verden BV