Privacy Policy

Data Controller

spaniswkyf B.V. is the data controller responsible for your personal data. We are a Dutch company registered under number 53491827 with VAT number NL878106429B01.

Data Collection

The data we collect includes personal information that you provide to us directly and information that we collect automatically when you use our e-commerce platform and services.

Information You Provide

• Contact information (name, email address, phone number, postal address)
• Account information (username, password, profile details)
• Business information (company name, VAT number, business address)
• Payment information (billing address, payment method details)
• Communication data (messages, support requests, feedback)
• Order and transaction information

Information We Collect Automatically

• Device information (IP address, browser type, operating system)
• Usage information (pages visited, time spent, click patterns)
• Location information (country, region based on IP address)
• Cookies and similar tracking technologies
• Log files and analytics data

How We Use Your Information

We explain how we use your information to provide and improve our e-commerce platform services, process transactions, and communicate with you about your account and our services.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contract Performance: To provide our e-commerce platform services and fulfil our contractual obligations
• Legitimate Interests: To improve our services, prevent fraud, and ensure platform security
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Consent: For marketing communications and non-essential cookies (where required)

Purposes of Processing

• Providing and maintaining our e-commerce platform services
• Processing transactions and managing orders
• Creating and managing user accounts
• Providing customer support and responding to enquiries
• Improving our platform functionality and user experience
• Detecting and preventing fraud, abuse, and security threats
• Complying with legal obligations and regulatory requirements
• Sending service-related communications and updates
• Marketing communications (with your consent)

Data Sharing and Disclosure

spaniswkyf does not sell, rent, or trade your personal information to third parties. We may share your information in the following limited circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our platform
• Payment Processors: With secure payment processing partners to handle transactions
• Legal Requirements: When required by law, court order, or regulatory authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Protection: To protect the rights, property, or safety of spaniswkyf, our users, or others

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

• Account Data: Retained while your account is active and for 3 years after closure
• Transaction Records: Retained for 7 years for accounting and tax purposes
• Communication Records: Retained for 3 years after the last interaction
• Marketing Data: Retained until you withdraw consent or for 2 years of inactivity
• Legal Hold: Data may be retained longer if required by legal proceedings

Your Rights

Under GDPR and Dutch data protection law, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request transfer of your data to another service provider
• Right to Object: Object to processing based on legitimate interests or for marketing
• Right to Withdraw Consent: Withdraw consent for processing where applicable

To exercise any of these rights, please contact us at privacy@spaniswkyf.life. We will respond to your request within one month.

Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

• Encryption of data in transit and at rest
• Regular security assessments and monitoring
• Access controls and authentication measures
• Employee training on data protection practices
• Incident response and breach notification procedures

International Data Transfers

spaniswkyf primarily processes data within the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions recognising equivalent data protection levels
• Binding Corporate Rules for intra-group transfers
• Explicit consent for specific transfers where appropriate

Cookies and Tracking

We use cookies and similar technologies to enhance your experience on our platform. For detailed information about our cookie practices, please refer to our Cookie Policy.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of material changes by posting the updated policy on our website and, where required, by email or other means.

Contact Information

If you have questions about this Privacy Policy or how we handle your personal data, please contact us:

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we have not handled your personal data appropriately.