Privacy policy.

1Who are we?

Aurecha is responsible for the processing of personal data as described in this privacy policy.

Do you have questions about this privacy policy or about how we process your personal data? Please contact us at info@aurecha.com.

2Which personal data do we process?

Depending on how you use our website, we may process the following personal data:

• ●first and last name;
• ●billing and delivery address;
• ●email address;
• ●phone number, if you provide it to us;
• ●order details and purchase history;
• ●payment details to the extent needed to process a payment;
• ●communication you have with us, for example by email;
• ●information you provide when you contact us;
• ●technical data about your use of our website, such as IP address, browser and device, to the extent this data is processed through our website;
• ●cookie and similar data, to the extent you have given consent or processing is permitted on another legal basis.

We do not process more personal data than necessary for the purposes for which it is collected.

3What do we use your personal data for?

We use personal data for the following purposes:

4On what legal bases do we process personal data?

We only process personal data when there is a legal basis for doing so.

Depending on the situation, this may be:

• ●performance of an agreement, for example to process and deliver your order;
• ●legal obligation, for example for our administration;
• ●legitimate interest, for example to secure and improve our services and website;
• ●consent, for example for certain cookies or marketing communication where consent is required.

The GDPR requires organisations to have an appropriate legal basis for processing personal data.

5Who do we share your data with?

We do not sell your personal data.

To run our webshop and services properly, personal data may be shared with parties that support us. For example:

• ●payment providers;
• ●carriers and delivery services;
• ●parties that support our webshop or IT systems;
• ●hosting and technical service providers;
• ●accounting or administrative service providers;
• ●other service providers necessary for our business operations.

These parties only receive the data they need to perform their work.

When an external party processes personal data on behalf of Aurecha, we make agreements about protecting that data where necessary.

6Payments

When you pay for an order, the payment is processed via the payment method you choose at checkout.

Aurecha does not always receive all the data you provide to the payment provider during a payment. Payment data may also be processed by the relevant payment provider.

We use the data Aurecha itself receives to process your payment and order and to keep our records.

7Cookies

Our website may use cookies and similar technologies.

Cookies are small files that can be stored on your device when you visit our website.

We may use cookies, for example, for:

• ●making the webshop work properly;
• ●remembering certain settings;
• ●processing a shopping cart;
• ●making payments run securely;
• ●analysing and improving our website;
• ●marketing purposes, where applicable and permitted.

For cookies that require consent, we ask for your consent via our cookie banner or cookie settings.

You can change your cookie preferences via the cookie settings on our website.

8How long do we keep your data?

We do not keep personal data longer than necessary for the purpose for which it was collected, unless we are legally required to keep it longer.

Data that forms part of our administration may, for example, be kept longer due to statutory tax and administrative retention obligations.

When data is no longer needed and there is no legal obligation to keep it, it is deleted or anonymised.

9How do we protect your data?

We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, misuse, alteration or disclosure.

Only people and parties who need the data for their work have access to personal data.

Although we take appropriate security measures, no website or data transfer over the internet can be guaranteed to be completely secure.

10Your privacy rights

Under the GDPR you have several rights regarding your personal data.

Among other things, you can:

• ●ask which personal data we process about you;
• ●ask us to correct your personal data;
• ●ask us to delete your personal data, where legally possible;
• ●ask us to restrict the processing of your personal data;
• ●object to certain processing;
• ●in certain situations, ask us to transfer your personal data;
• ●withdraw consent you gave earlier.

Withdrawing consent does not affect the lawfulness of processing based on that consent before it was withdrawn.

More information about privacy rights and how to use them is available from the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

11How can you submit a privacy request?

Want to use one of your privacy rights? Send an email to info@aurecha.com.

Describe your request as clearly as possible in your message.

To prevent personal data from being provided to the wrong person, we may in some cases ask for additional information to verify your identity.

We handle requests within the statutory period.

12Complaints

Do you have a complaint about how we handle your personal data? Please contact us first at info@aurecha.com. We will of course do our best to resolve your complaint.

You also have the right to file a complaint with the Dutch supervisory authority: Autoriteit Persoonsgegevens (Dutch Data Protection Authority).

The Autoriteit Persoonsgegevens supervises compliance with privacy legislation in the Netherlands.

13Children's data

Our webshop is not specifically aimed at children.

We do not intend to collect personal data from children without the required consent or another legal basis.

Are you convinced we have collected personal data from a child when we should not have? Please contact us at info@aurecha.com so we can assess this and delete the data if necessary.

14Transfers outside the European Economic Area

When we use service providers that process personal data outside the European Economic Area (EEA), we ensure this only happens when there is a valid legal basis and appropriate safeguards are in place.

If personal data is processed outside the EEA, we will inform you about this when required under the GDPR.

15Automated decision-making and profiling

Aurecha does not use automated decision-making that has legal effects for you or similarly significantly affects you.

If this changes in the future, we will update our privacy policy and provide the required information.

16Changes to this privacy policy

We may update this privacy policy from time to time, for example when our services change or when laws and regulations require it.

The most recent version is always available on our website. The top of this privacy policy shows when it was last updated.

17Contact

Do you have questions about this privacy policy or about how Aurecha handles personal data? Please get in touch.