Let’s Get in Touch & Get Things Done
The General Data Protection Regulation (“GDPR”) states that personal data is any information about an identified or identifiable natural person. This means that information is either directly about someone or can be traced back to that person. Data about organizations is not personal data.
Eden Spirits B.V. located at Dalseweg 13 (6521 JB) in Nijmegen is responsible within the meaning of the GDPR for the data we receive from you.
We process your personal data only for carefully defined purposes. We receive personal data from you because you purchase or wish to purchase one or more products from us. The law refers to data processing that is necessary for the preparation or execution of an agreement. Basically, we cannot serve you as a customer if we do not process this data from you. Your personal data is also used because we carry out marketing activities. In law, this is called processing due to legitimate interests. Below you will find more information about the different purposes.
*Execution of our agreement regarding the sale and delivery of the product you purchased. This purpose is necessary for the conclusion or performance of a contract (Article 6 paragraph 1 sub b GDPR).
We may process the following personal data from you: name, address details, date of birth (for age verification purposes), e-mail address (we use to send you relevant and up-to-date information and targeted promotions and for other marketing purposes), name and address (shipment of purchased product), company name, VAT number (tax legislation) or other details you provide as a customer of Eden Spirits B.V. We keep your personal data for as long as is necessary for the following purposes or to comply with our legal (retention) obligations.
If you buy a product via our webshop, we also collect your IBAN account number (direct debit for invoicing purposes).
*To comply with a legal obligation, this means the regulation on direct debits (SEPA) and tax legislation. This purpose is necessary for the conclusion or execution of a contract (article 6 paragraph 1 sub b GDPR) or to fulfill a legal obligation (article 6 paragraph 1 sub c).
*For marketing activities in order to contact you via email or push messages. The legal basis is our legitimate interest (Article 6 paragraph 1 sub f GDPR). For this purpose, we use only your email address.
It involves the following data:
– Location data
– IP address or app IDs
– Internet browser and device type
– Website language
The data from analytical and marketing cookies will not be linked to any other data you provide during the ordering process. Please refer to our cookie statement for more information on cookies. The legal basis is consent, which you give by agreeing to our cookie terms in the cookie banner on the website (Article 6 paragraph 1 sub a GDPR).
*Profiling, we use your personal data and transaction history to send you the most appropriate action or message.
If we process your data based on consent, you always have the right to withdraw your consent. You can easily do so by sending us an email with your details and which data you no longer want us to process. If we have no other basis for the data we process based on consent, we will no longer use and delete this data.
In some cases, we provide your data to external parties. For example, government agencies or external service providers who help us process your personal data. However, we will never sell your data to other parties.
If you purchase a product from then it will be shipped by liquor store Erbuni-Yerevan, located at Vijzelstraat 87H, 1017 HG, Amsterdam, the Netherlands (“Liquor Store”). We share some of your information with this party, namely name, address information, date of birth and, if applicable, Chamber of Commerce number. Slijterij will ship your order to you based on this data. Processors who help us process your personal data may only use your data in accordance with our instructions and to perform the relevant services they provide to us. They may not use or transfer your data independently.
Under Article 32 GDPR, we are obliged to take appropriate technical and organizational measures to prevent the loss of personal data or unlawful processing.
We pay a lot of attention to properly securing personal data. For example, the (personal) data you enter on the website during transmission is encrypted and the transmission of (personal) data takes place via a secure connection.
We work with various applications to obtain and store certain data. To ensure your privacy, we choose our suppliers carefully and these applications are subject to strict regulations. Most data is stored within the European Union. For data sent outside the EU, we only work with parties that offer sufficient protection according to European rules. If we (possibly through our external service providers) process your data outside the EU, we ensure adequate protection of your personal data. For example, by using special contacts that guarantee this.
We keep this data for as long as is necessary for the purpose for which we use your data. And as long as the law requires us to keep your data. Exactly how long varies. From a few months to many years.
You have the right to be properly informed about what we do with your data and why we need your data. We do this through this privacy statement. In addition to the right to be transparently informed, you have the following rights:
– Right of inspection (if you want to know what data we collect from you);
– Right to rectification (we are happy to amend any data that is no longer correct);
– Right to be forgotten (in some cases you can ask us to delete your data);
– Right to restriction of processing (in some cases you may ask us to restrict the processing of your data);
– Right to data portability (if you wish, we can transfer your data to another party or give you a copy of your data);
– Right to object (in some cases you may object to the use of your data).
If you wish to exercise any of your rights, please contact us (see contact). We will respond to your request within 14 days.
For complaints, for example about the way we use your data or how we respond to your privacy-related questions, you can file a complaint with the Dutch Data Protection Authority.
Should you have any questions about this privacy statement or wish to exercise your rights as a data subject, please contact us in writing at the following email address firstname.lastname@example.org.