PRIVACY POLICY CARDINAL CHOCOLATERIE

1. Contact details

Cardinal Chocolaterie

Utrechtsestraat 22

1017 VN Amsterdam

Chamber of Commerce: 97332372

Email: info@cardinal-chocolaterie.nl

2. Personal data we process

We process your personal data because you use our services and/or provide this information to us yourself (e.g., when placing an order). We may process:

- First and last name

- Address details

- Phone number

- Email address

- Payment details

- Order information

3. Purposes and legal bases for processing

We process your data for the following purposes:

- Handling your payment and order

- Sending your order

- Contacting you if there are questions or an item is unavailable

- Fulfilling legal obligations (e.g., tax compliance)

- Sending newsletters (only with your consent)

- Website analytics and improvement

We process your data based on the following legal grounds under the General Data Protection Regulation (GDPR):

- Performance of a contract

- Legal obligation

- Consent (e.g., newsletters)

- Legitimate interest (e.g., site functionality and analytics)

4. Retention period

We retain your data no longer than necessary to fulfill the purposes for which it was collected, or as legally required.

5. Sharing data with third parties

We only share your data with third parties if necessary to execute our agreement (e.g., delivery services, payment processors) or to meet legal obligations. We have data processing agreements in place with these parties to protect your information.

6. Transfer of data outside the EU

Our webshop runs on Shopify. As a result, your data may be stored outside the European Economic Area (EEA). Shopify ensures compliance with data protection laws through Standard Contractual Clauses and other safeguards.

7. Cookies and similar technologies

Our website uses only technical, functional, and analytical cookies that do not infringe upon your privacy. Analytical cookies help us understand and improve website usage. You can manage your cookie preferences through your browser settings. For more details, please consult our cookie policy.

8. Your rights

You have the right to:

- access your data;

- have it corrected;

- have it deleted;

- object to processing;

- request restriction of processing;

- and request data portability to another provider.

To exercise these rights, email us at info@cardinal-chocolaterie.nl. We will respond as quickly as possible, within four weeks at the latest.

9. Data security

We take appropriate technical and organizational measures to protect your data against misuse, loss, unauthorized access, and unauthorized changes.

10. Questions or complaints

If you have any questions or complaints regarding your privacy, please contact us using the details above. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via www.autoriteitpersoonsgegevens.nl