GDPR Compliance

Our Commitment to GDPR

Holland Curtains is fully committed to complying with the General Data Protection Regulation (GDPR). As a company based in the Netherlands and serving customers throughout the European Union, we take our data protection obligations seriously.

This page explains how we comply with GDPR requirements and outlines your rights as a data subject.

Data Controller Information

Holland Curtains acts as the data controller for personal information collected through our website and services.

Contact Details:
Holland Curtains
Herengracht 182
1016 BR Amsterdam
Netherlands
Email: [email protected]

Your Rights Under GDPR

The GDPR provides you with specific rights regarding your personal data:

Right to Be Informed

You have the right to know how your personal data is being collected and used. Our Privacy Policy and this GDPR page provide this information.

Right of Access

You can request a copy of all personal data we hold about you. We will provide this information within 30 days of receiving your request, free of charge.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected. We will make the necessary changes within 30 days.

Right to Erasure (Right to Be Forgotten)

You can request that we delete your personal data when:

• The data is no longer necessary for its original purpose
• You withdraw your consent (where consent was the legal basis)
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Please note that we may need to retain certain data for legal or contractual obligations.

Right to Restrict Processing

You can request that we limit how we use your data in certain circumstances, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format. You can also request that we transfer this data directly to another organisation where technically feasible.

Right to Object

You can object to the processing of your personal data for:

• Direct marketing purposes (we will stop immediately)
• Processing based on legitimate interests
• Research or statistical purposes

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not currently use automated decision-making processes that fall under this provision.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at [email protected] with your request. We may need to verify your identity before processing your request.

We will respond to your request within 30 days. In complex cases, we may extend this period by an additional 60 days, but we will inform you of any extension within the initial 30-day period.

Data Protection Principles

We adhere to the following GDPR principles when processing your personal data:

• Lawfulness, Fairness, and Transparency: We process data lawfully and are transparent about our practices
• Purpose Limitation: We collect data for specified, explicit, and legitimate purposes
• Data Minimisation: We only collect data that is necessary
• Accuracy: We keep data accurate and up to date
• Storage Limitation: We do not keep data longer than necessary
• Integrity and Confidentiality: We protect data with appropriate security measures

Supervisory Authority

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Dutch Data Protection Authority:

Autoriteit Persoonsgegevens
Postbus 93374
2509 AJ Den Haag
Netherlands
Website: www.autoriteitpersoonsgegevens.nl

Updates to This Information

We may update this GDPR information page to reflect changes in our practices or legal requirements. The current version will always be available on our website.