PRIVACY POLICY
At Quaint, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you use our website and services. By using our website, you agree to the collection and use of information in accordance with this policy.
1. Data Controller
The data controller responsible for the processing of your personal data is:
Quaint Vintage
Korte Hoogstraat 17-A Rotterdam, The Netherlands 3011GK
2. What Information We Collect
When you use our website or make a purchase, we may collect the following types of personal data: Personal Information: Name, email address, shipping and billing address, phone number.
Payment Information: Payment details such as credit card or bank information. We do not store your payment information directly; it is handled by our secure payment processor.
Account Information: Username, password, order history, preferences.
Technical Information: IP address, browser type, and information about your usage of our website.Cookies: Information collected through cookies and similar technologies. Please see our Cookie Policy for more information.
3. How We Use Your Data
We use your personal data for the following purposes:
To process your orders: We use your information to fulfill and ship your order, provide customer support, and communicate with you about your purchase.
To improve our services: We may use your data to improve your experience on our website, optimize our services, and understand customer preferences.
To send promotional offers: If you have opted in to receive marketing emails, we will use your email address to send you updates, offers, and promotions. You can unsubscribe from these communications at any time.
Legal compliance: We may use your personal data to comply with legal obligations or respond to legal claims or government requests.
4. Legal Basis for Processing
Under the GDPR, we must have a legal basis to process your personal data.
We rely on the following legal bases:
Performance of a contract: Processing your data is necessary to fulfill the contract we have with you when you place an order.
Consent: For marketing communications, we will seek your explicit consent. You can withdraw your consent at any time.Legal obligation: We may need to process your data to comply with legal obligations (e.g., tax laws).
Legitimate interests: We may process your data to pursue our legitimate interests, such as improving our services or preventing fraud, provided that this does not override your privacy rights.
5. How We Share Your Data
We do not sell or rent your personal data to third parties. However, we may share your data with the following:
Service Providers: Third-party companies that assist us with website hosting, payment processing, shipping, and other essential services. These providers are contractually bound to protect your data.
Legal Authorities: If required by law or if necessary to protect our rights, we may disclose your personal data to law enforcement, government authorities, or in response to legal requests.
6. International Data Transfers
Your personal data may be transferred and stored outside of the European Economic Area (EEA). We ensure that appropriate safeguards are in place to protect your data in compliance with GDPR standards, such as using service providers who participate in the EU-U.S. Privacy Shield or other recognized transfer mechanisms.
7. Your Rights
Under GDPR, you have the following rights regarding your personal data:
Right to Access: You can request access to the personal data we hold about you.
Right to Rectification: You have the right to request correction of any inaccurate or incomplete data.
Right to Erasure (Right to be Forgotten): You can request that we delete your personal data under certain circumstances.
Right to Restriction of Processing: You can request that we restrict the processing of your personal data.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object: You can object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent: If you have given consent for marketing or other processing, you can withdraw it at any time.
To exercise any of these rights, please contact us at info@quaintvintage.nl.
8. Data Retention
We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including to comply with legal, accounting, or reporting requirements. For tax purposes, we are legally required to keep certain information (e.g., invoices) for 7 years.
9. Data Security
We take the security of your personal data seriously. We use industry-standard encryption and security measures to protect your data from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee the absolute security of your data.
10. Cookies
We use cookies and similar technologies to enhance your browsing experience and analyze website traffic. For more information, please refer to our Cookie Policy.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page, and we encourage you to review this policy periodically.
12. Contact Us
If you have any questions or concerns regarding this Privacy Policy, or if you wish to exercise your rights, please contact us at: info@quaintvintage.nl. If you are not satisfied with our response, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.