Privacy Policy (GDPR)

Privacy at a Glance

At EENDRIE, we respect your privacy and handle your personal data with the highest level of care. We only collect data that is necessary to provide our services, fulfill orders, and comply with legal obligations.

6.1 Data Controller

EENDRIE is the data controller responsible for processing your personal data.

Company: EENDRIE
Country of establishment: The Netherlands
Email: info@eendrie.com

6.2 Personal Data We Collect

We may process the following categories of personal data:

  • Identity data (name, surname)

  • Contact data (email address, phone number)

  • Address data (billing and shipping address)

  • Order and payment data (processed securely via Shopify and payment providers)

  • Technical data (IP address, browser type, device data)

6.3 Purposes and Legal Basis

Your personal data is processed for the following purposes and legal bases under Article 6 GDPR:

  • Order fulfillment and account management – performance of a contract

  • Customer service and communication – performance of a contract

  • Legal and tax obligations – legal obligation

  • Website optimization and analytics – legitimate interest

  • Marketing communications (if applicable) – consent  

6.4 Data Retention

We do not retain personal data longer than necessary:

  • Order and invoice data: up to 7 years (legal obligation)

  • Customer service communications: up to 2 years

  • Marketing data: until consent is withdrawn

6.5 Data Sharing and Third Parties

We only share personal data with parties essential to operating our webshop, including:

  • Shopify (e-commerce platform)

  • Payment service providers

  • Logistics and fulfillment partners

Some of these parties may process data outside the European Economic Area. In such cases, data transfers are safeguarded by appropriate measures such as Standard Contractual Clauses approved by the European Commission.

6.6 Your Rights

Under the GDPR, you have the right to:

  • Access your personal data

  • Rectify inaccurate data

  • Request erasure of your data

  • Restrict processing

  • Object to processing

  • Data portability

  • Withdraw consent at any time (without affecting prior processing)

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

6.7 Mandatory Data

Providing personal data is necessary to conclude a purchase agreement. Without this data, we cannot process your order.

6.8 Automated Decision-Making

EENDRIE does not use automated decision-making or profiling that produces legal or significant effects on customers.