1. Who are we?

LOPL (Laag op Laag) is responsible for the processing of your personal data.

Name

LOPL (Laag op Laag)

Address

Kanaalpark 52, 4554 ED Philippine

Chamber of Commerce (KvK)

98200453

VAT ID

NL005315764B52

Email

klantenservice@laagoplaag.nl

Website

www.laagoplaag.nl

2. What data do we process?

Depending on your use of our website and services, we may process, among other things:

• name, address, city, email address, and phone number;
• order, payment, and invoice information;
• details of a recipient when an order is shipped to someone else;
• account and login details;
• information you provide when you contact us;
• technical and usage data, such as IP address, browser, device, and interactions with our website;
• data regarding interactions with our advertisements and marketing, such as visits, clicks, and conversions.

3. What do we use your data for?

Purpose	Legal basis
Processing, paying for, and delivering orders, and handling returns, warranties, and complaints	Execution of the agreement (Art. 6(1)(b) GDPR)
Administration and compliance with legal obligations	Legal obligation (Art. 6(1)(c) GDPR)
Security, fraud prevention, and improvement of our website and services	Legitimate interest (Art. 6(1)(f) GDPR)
Answering questions and messages	Execution of the agreement or legitimate interest
Marketing and communication	Consent or, where legally permitted, another applicable legal basis
Measuring, analyzing, and improving marketing and advertisements	Consent when legally required, or another applicable legal basis
Placing non-essential cookies and similar technologies	Consent (Art. 6(1)(a) GDPR)

4. Marketing, advertising, and analysis

We may use third-party advertising, analytics, and marketing services to carry out our marketing, measure the reach and effectiveness of advertisements, and improve our campaigns. In doing so, cookies, pixels, tags, and similar technologies may be used.

When consent is required for the use of such technologies, they will only be used after you have provided consent. You can change or withdraw your consent via our cookie settings.

5. Who do we share data with?

We only share personal data when necessary for our services, legal obligations, or business operations. We make use of, among others:

• Shopify, for our webshop and hosting;
• Mollie, for payments;
• MyParcel and PostNL, for shipping and delivery;
• our accounting/bookkeeping party;
• providers of advertising, analytics, and marketing services for marketing, ad measurement, and conversion analysis.

Where legally required, we enter into a data processing agreement with processors. Data may also be provided when we are legally obligated to do so, for example to the tax authorities (Belastingdienst).

6. Transfers outside the EEA

Some of our service providers may process personal data outside the European Economic Area. When this occurs, we ensure that this processing takes place in accordance with applicable privacy legislation.

7. How long do we keep data?

We do not store personal data longer than necessary for the purpose for which it was collected, unless a legal retention period applies.

• Administration and invoice data subject to the fiscal retention obligation: 7 years.
• Account data: as long as the account exists, unless a longer retention period is legally required.
• Contact details and messages: as long as necessary for handling and follow-up.
• Data for marketing and analysis: no longer than necessary for the relevant purpose.

8. Cookies and similar technologies

We use essential cookies for the functioning of the website and the checkout process. For non-essential cookies and similar technologies, such as analytical, advertising, and marketing techniques, we ask for prior consent when legally required. You can adjust your cookie preferences or withdraw consent via the cookie settings on our website.

9. Security

We take appropriate technical and organizational measures to protect personal data against loss, misuse, and unauthorized access or modification.

10. Your rights

To the extent provided for by the GDPR, you have the right to: access; rectification; erasure; restriction of processing; objection; data portability; and withdrawal of consent.

You can contact us for this purpose via klantenservice@laagoplaag.nl. We will respond to your request within one month. In certain cases, this period may be extended in accordance with the GDPR. To prevent misuse, we may ask you to confirm your identity. Data that we are required to retain by law cannot always be deleted immediately.

You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

11. Automated decision-making

We do not use automated decision-making that has legal consequences for you or otherwise significantly affects you.

12. Data breaches

In the event of a data breach, we take appropriate measures. When required by law, we report the data breach to the Dutch Data Protection Authority and inform the affected parties.

13. Changes

We may change this privacy policy when our services or legislation change. The most current version is always available on this page.