Privacy policy
Privacy policy
Last updated: 7 October 2026
1. Controller
The controller of your personal data within the meaning of the General Data Protection Regulation (GDPR) is Keizers Haaksbergen V.O.F., Hengelosestraat 14, 7482 AC Haaksbergen, the Netherlands, Chamber of Commerce (KvK) 82009619, VAT NL862303254B01 ("we", "us"). Contact for privacy matters: cs@gardenmachineshop.com, phone +31 53 572 78 78. We have not appointed a data protection officer.
2. What we process, why and on what legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Processing and delivering your order, payment, invoicing, returns and complaints | name, delivery and billing address, email, phone number, order details, payment status (we do not receive full card data) | Art. 6(1)(b) – performance of the contract |
| Customer account (if you create one) | login details, name, addresses, order history | Art. 6(1)(b) |
| Customer service and contact requests | name, email, phone, message, order number | Art. 6(1)(b) or (f) – legitimate interest in answering your questions |
| Accounting and tax records | invoice and payment data | Art. 6(1)(c) – legal obligation |
| Security, fraud prevention and operation of the shop | technical data (IP address, browser, device), strictly necessary cookies | Art. 6(1)(f) – legitimate interest in a safe, working shop |
| Analytics and marketing (only if you consent via the cookie banner) | cookie and usage data | Art. 6(1)(a) – consent, which you can withdraw at any time |
Providing data needed for an order is necessary to conclude and perform the contract; without it we cannot process your order. Other data is voluntary.
3. Recipients
We share personal data only where necessary for the purposes above, with the following categories of recipients:
- Shopify – hosting and e-commerce platform (processor).
- Payment service providers – the payment methods offered at checkout, for processing your payment.
- Carriers (DHL and other carriers / freight forwarders) – name, delivery address, email address and phone number, so that they can deliver and notify you of the delivery.
- Customer service system – software provider for handling emails and requests (processor).
- Accounting – our accounting software provider (Microsoft Dynamics 365 Business Central) and our accountant.
- Tax authorities (Belastingdienst) and other public authorities, where we are legally required to provide data.
- Analytics and marketing providers – only after your consent via the cookie banner.
We do not sell your personal data.
4. Transfers outside the EEA
Some recipients (in particular Shopify) may process data outside the European Economic Area, for example in the United States or Canada. Such transfers are based on an adequacy decision of the European Commission (for the US: the EU-US Data Privacy Framework, for certified companies; Canada) or on the European Commission's standard contractual clauses. You can request more information via the contact details above.
5. Retention periods
- Order, invoice and accounting data: 7 years (Dutch statutory tax retention obligation).
- Customer service and contact requests: 2 years after the request has been handled.
- Customer account: until you delete the account; order data then remains for the 7-year period above.
- Consent-based cookies: until you withdraw consent or the cookie expires.
6. Your rights
You have the right of access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time; this does not affect the lawfulness of processing before withdrawal. To exercise your rights, contact us at cs@gardenmachineshop.com.
You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or with the supervisory authority in the EU/EEA country where you live or work.
7. No automated decision-making
We do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.
8. Changes
We may update this policy. The current version is always available on this page.