Privacy Policy

1. Introduction

DimitryVandenBerg (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make a purchase from our online shop.

This policy complies with the General Data Protection Regulation (GDPR) and Dutch data protection laws.

2. Data Controller

The data controller responsible for your personal data is:

3. Information We Collect

3.1 Personal Information You Provide

When you place an order or contact us, we collect:

• Contact Information: Name, email address
• Shipping Information: Delivery address
• Order Information: Products purchased, order preferences
• Communication: Messages you send us via contact forms

3.2 Payment Information

Payment processing is handled by Stripe. We do not store your complete credit card information. Stripe collects and processes payment data in accordance with their privacy policy and PCI-DSS standards.

3.3 Automatically Collected Information

• Technical Data: IP address, browser type, device information
• Usage Data: Pages visited, time spent on site
• Cookies: We use minimal essential cookies only (see Section 8)

4. How We Use Your Information

We use your personal data for the following purposes:

• Order Fulfillment: Processing and delivering your orders
• Communication: Responding to inquiries and providing customer support
• Legal Compliance: Maintaining records as required by law
• Security: Detecting and preventing fraud
• Service Improvement: Understanding how our website is used

Legal Basis for Processing (GDPR)

• Contract Performance: Processing your orders and delivering products
• Legitimate Interest: Fraud prevention, website security, improving services
• Legal Obligation: Tax records, accounting requirements
• Consent: Marketing communications (only with your explicit consent)

5. Data Sharing and Third Parties

We share your personal data only with trusted service providers:

Service Providers:

• Payment Processing: Stripe (USA) - PCI-DSS compliant
• Hosting: Vercel (USA) - GDPR compliant
• Email: Resend (USA) - GDPR compliant
• Content Management: Sanity (USA) - GDPR compliant

International Transfers: Some service providers are located outside the EU. We ensure appropriate safeguards are in place (Standard Contractual Clauses) to protect your data.

We do NOT:

• Sell your personal data to third parties
• Use your data for marketing without explicit consent
• Share your data with social media platforms

6. Data Retention

We retain your personal data for the following periods:

• Order Data: 7 years (Dutch tax law requirement)
• Contact Form Messages: 2 years
• Technical Logs: 90 days
• Marketing Consent: Until you withdraw consent

After these periods, data is securely deleted or anonymized.

7. Your Rights (GDPR)

Under GDPR, you have the following rights:

To exercise your rights, contact us at:
shop@dimitryvandenberg.com
We will respond within 30 days.

8. Cookies and Tracking

We use minimal essential cookies only. These are necessary for the website to function properly (shopping cart, session management, security).

Cookies We Use:

• Session Cookies: Maintain your shopping session (deleted when you close browser)
• Security Cookies: Protect against fraud and unauthorized access
• Preference Cookies: Remember your language and display preferences

We do NOT use:

• Marketing or advertising cookies
• Social media tracking cookies
• Third-party analytics cookies (Google Analytics, etc.)

You can disable cookies in your browser settings, but this may affect website functionality.

9. Data Security

We implement appropriate technical and organizational measures to protect your data:

• HTTPS encryption (SSL/TLS) for all data transmission
• Secure payment processing through PCI-DSS compliant providers
• Regular security updates and monitoring
• Access controls and authentication
• Data backup and recovery procedures

While we strive to protect your data, no internet transmission is 100% secure. We cannot guarantee absolute security.

10. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy periodically. The "Last Updated" date at the top indicates when changes were made. Continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact and Complaints

For questions about this Privacy Policy or to exercise your rights, contact us:

Right to Lodge a Complaint:
If you believe we have not handled your data properly, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):