Privacybeleid

Privacy Policy — Aufide
Last updated: August 1, 2026 | Compliant with GDPR (Regulation (EU) 2016/679) and the Dutch UAVG

1. Controller Identity
The data controller responsible for processing your personal data is:

Raav Enterprise (trading as Aufide)
KVK: 90556674 | BTW: NL004825380B08
Laan van Vollenhove 174, 3706 AA Zeist, Netherlands
Email: info@raavgroup.com | Phone: +31 6 86 27 16 67

2. Categories of Personal Data Collected
We collect and process the following categories of personal data:

Category Data Points Source
Identity Full name Provided by customer
Contact Email, phone number Provided by customer
Address Shipping and billing address Provided by customer
Financial Payment method type, transaction ID (no full card data stored) Payment processor
Technical IP address, browser type, device type, session data Automatically collected
Behavioral Pages visited, products viewed, cart actions Cookies / analytics
Communications Email and support correspondence Customer interaction

We do not collect special categories of data (Article 9 GDPR) and do not engage in automated decision-making or profiling that produces legal or similarly significant effects.

3. Legal Bases for Processing

Processing Purpose Legal Basis (GDPR Art. 6) Retention Period
Order fulfillment and delivery Art. 6(1)(b) — Performance of contract 7 years (Dutch tax law)
Customer service Art. 6(1)(b) — Performance of contract 2 years after last contact
Fraud detection and security Art. 6(1)(f) — Legitimate interest Duration of risk assessment
Legal and tax obligations Art. 6(1)(c) — Legal obligation 7 years (Art. 52 AWR)
Email marketing (if subscribed) Art. 6(1)(a) — Explicit consent Until consent withdrawn
Analytics and site improvement Art. 6(1)(f) — Legitimate interest 26 months (anonymized)

4. Data Recipients and Third-Party Processors
We share your data strictly on a need-to-know basis with the following processors, each bound by a Data Processing Agreement (DPA):

  • Gelato AS (Norway) — Production and fulfillment; receives name, delivery address, and order details only

  • Shopify Inc. (Canada/Ireland) — E-commerce platform; processes all store data under a GDPR-compliant DPA

  • Payment processors (Stripe, PayPal, or similar) — Payment data only; PCI-DSS compliant

  • Google LLC — Analytics (if Google Analytics is active); data anonymized where possible

  • Meta Platforms — Advertising (if Meta Pixel is active); subject to your cookie consent

We do not sell, rent, or broker your personal data to any third party under any circumstances.

5. International Data Transfers
Gelato (Norway — EEA, adequate country), Shopify (Ireland — EEA), and some processors (e.g. Google, Meta) may transfer data to the United States or other third countries. Such transfers are safeguarded by:

  • Standard Contractual Clauses (SCCs) approved by the European Commission (Decision 2021/914/EU)

  • Adequacy decisions where applicable

6. Your Rights Under GDPR
You have the following rights, exercisable at any time by contacting aufide123@outlook.com:

  • Right of access (Art. 15): Obtain a copy of your personal data

  • Right to rectification (Art. 16): Correct inaccurate data

  • Right to erasure (Art. 17): Request deletion ("right to be forgotten")

  • Right to restriction (Art. 18): Limit how we process your data

  • Right to data portability (Art. 20): Receive your data in a machine-readable format

  • Right to object (Art. 21): Object to processing based on legitimate interest

  • Right to withdraw consent (Art. 7(3)): Withdraw marketing consent at any time without penalty

We respond to all requests within 30 calendar days. If your request is complex or numerous, we may extend this by a further 60 days with prior notice.

You have the right to lodge a complaint with the Dutch supervisory authority:
Autoriteit Persoonsgegevens | autoriteitpersoonsgegevens.nl | T: 0900-2001201

7. Cookies
We use the following categories of cookies:

Cookie Type Purpose Consent Required
Strictly necessary Session management, cart, checkout No
Functional Language, preferences No
Analytical Traffic analysis (Google Analytics) Yes
Marketing Ad targeting (Meta Pixel) Yes

Non-essential cookies are only placed after explicit consent via our cookie banner. You may withdraw consent at any time.

8. Data Security
We implement appropriate technical and organizational measures (TOMs) to protect your personal data, including SSL/TLS encryption, access controls, and regular security reviews. In the event of a data breach that poses a high risk to your rights and freedoms, we will notify you without undue delay and within 72 hours notify the Autoriteit Persoonsgegevens.