At Lureto Haus, operated by Aja zorg, we respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store and protect personal information when you visit or use www.lureto-haus.com, place an order, contact us, or otherwise interact with our webshop.
We process personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and applicable Dutch privacy legislation.
1. Who We Are
The controller responsible for your personal data is:
Aja zorg
Trading as: Lureto Haus
Parelmoerwolk 48
6846 DP Arnhem
The Netherlands
KVK number: 86766058
Email: info@lureto-haus.com
Website: www.lureto-haus.com
For questions about this Privacy Policy or your personal data, you can contact us at info@lureto-haus.com.
2. What Personal Data We Collect
Depending on how you interact with our Website, we may collect and process the following categories of personal data:
Information you provide directly to us:
-
First and last name
-
Billing and delivery address
-
Email address
-
Telephone number, if provided
-
Order details and purchase history
-
Payment-related information necessary to process your order
-
Information you provide when contacting customer service
-
Information you provide when submitting a complaint, return or refund request
Information collected automatically:
When you visit our Website, certain technical information may be collected automatically, such as:
-
IP address
-
Browser type and version
-
Device type
-
Operating system
-
Language and general location information
-
Pages visited and interactions with our Website
-
Date and time of Website visits
-
Referring website or source
-
Information about how you interact with our Website
Some of this information may be collected through cookies and similar technologies. Please see our Cookie Policy for more information.
3. How We Use Your Personal Data
We may use your personal data for the following purposes:
-
To process and fulfil orders
-
To arrange delivery of products
-
To process payments and refunds
-
To communicate with you about your order
-
To respond to customer service requests
-
To handle returns, complaints and warranty claims
-
To maintain and improve our Website and services
-
To prevent fraud, abuse and security incidents
-
To comply with legal and regulatory obligations
-
To maintain appropriate business and financial records
-
To send marketing communications where you have provided the required consent or where otherwise permitted by applicable law
-
To analyse Website usage and improve our products, services and customer experience, where permitted by law
We only use personal data for purposes that are compatible with the purpose for which it was collected or where another lawful basis allows us to do so.
4. Legal Bases for Processing
Under the GDPR, we need a legal basis for processing your personal data.
Depending on the circumstances, we may rely on one or more of the following legal bases:
Performance of a contract
We process personal data where it is necessary to process and fulfil your order or otherwise perform our agreement with you.
For example, we need your name, address and contact information to process and deliver an order.
Legal obligation
We may process personal data when necessary to comply with legal obligations, such as accounting, tax, consumer protection or other legal requirements.
Legitimate interests
We may process personal data where it is necessary for our legitimate business interests, provided that these interests do not override your fundamental rights and freedoms.
This may include maintaining Website security, preventing fraud, improving our services and managing customer relationships.
Consent
Where required by law, we will ask for your consent before processing personal data for a particular purpose, such as certain forms of marketing or the use of non-essential cookies.
You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before you withdrew your consent.
5. Payment Information
Payments made through our Website may be processed by third-party payment providers.
Depending on the payment method you choose, your payment information may be processed directly by the relevant payment provider.
We generally do not have access to or store complete payment card details ourselves.
Payment providers process personal data according to their own privacy policies and terms.
6. Shopify
Our online store is operated using Shopify.
Shopify provides the e-commerce infrastructure that allows us to operate our online store, process orders and provide related services.
When you use our Website or place an order, Shopify may process personal data on our behalf or as an independent controller for certain processing activities, depending on the circumstances.
For more information about how Shopify processes personal data, please refer to Shopify's Privacy Policy.
7. Cookies and Similar Technologies
Our Website uses cookies and similar technologies.
Cookies may be used for purposes such as:
-
Making the Website function properly
-
Remembering preferences
-
Maintaining shopping cart functionality
-
Understanding how visitors use the Website
-
Improving Website performance
-
Measuring marketing effectiveness
-
Providing relevant advertising, where applicable
Some cookies are necessary for the operation of the Website, while others require your consent depending on applicable law.
Where required, we will ask for your consent before placing or using non-essential cookies.
You can manage certain cookie preferences through our cookie consent mechanism and/or your browser settings.
For more information, please see our Cookie Policy.
8. Marketing Communications
If you subscribe to our marketing communications, we may use your email address to send you information about products, promotions, offers, news and other updates from Lureto Haus.
Where required by law, we will only send marketing communications based on your consent.
You can unsubscribe from marketing emails at any time by clicking the unsubscribe link included in the relevant email or by contacting us at info@lureto-haus.com.
Unsubscribing from marketing communications does not affect transactional or service-related communications, such as order confirmations, shipping updates or information relating to your purchases.
9. Sharing Personal Data with Third Parties
We may share personal data with third parties where necessary to operate our business, provide our services, fulfil orders or comply with legal obligations.
Depending on the services we use, these parties may include:
-
Shopify and Shopify-related service providers
-
Payment service providers
-
Delivery and shipping companies
-
IT, hosting and technical service providers
-
Customer service providers
-
Email and marketing service providers
-
Analytics and advertising providers
-
Professional advisers, such as accountants, lawyers or auditors
-
Government authorities or law enforcement agencies where legally required
We only share personal data where there is an appropriate legal basis for doing so.
We do not sell your personal data to third parties.
10. International Transfers of Personal Data
Some of our service providers may process personal data outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, we will take appropriate measures to ensure that the transfer is carried out in accordance with applicable data protection law.
Depending on the circumstances, this may include relying on an adequacy decision, Standard Contractual Clauses or another legally recognised transfer mechanism.
11. How Long We Keep Personal Data
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
For example, information relating to purchases may need to be retained for accounting, tax, legal, warranty or dispute-resolution purposes.
When personal data is no longer required, we will delete it or anonymise it where reasonably possible.
Different categories of information may therefore be retained for different periods.
12. Data Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
However, no method of transmission over the internet or electronic storage can be guaranteed to be completely secure.
You should also take appropriate steps to protect your own accounts and devices, including using secure passwords and avoiding sharing account credentials with others.
13. Your Privacy Rights
Depending on your circumstances and applicable law, you may have the following rights regarding your personal data:
-
Right of access: You may request a copy of the personal data we hold about you.
-
Right to rectification: You may ask us to correct inaccurate or incomplete personal data.
-
Right to erasure: You may request that we delete your personal data in certain circumstances.
-
Right to restriction: You may request that we restrict the processing of your personal data in certain circumstances.
-
Right to data portability: In certain circumstances, you may request your personal data in a structured, commonly used and machine-readable format.
-
Right to object: You may object to certain types of processing, including processing based on legitimate interests.
-
Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time.
-
Rights relating to automated decision-making: Where applicable, you may have rights concerning certain automated decision-making or profiling.
These rights are subject to applicable legal conditions and exceptions.
14. How to Exercise Your Rights
To exercise any of your privacy rights, please contact us at:
Please provide enough information for us to identify you and understand your request.
We may need to verify your identity before fulfilling certain requests in order to protect your personal information.
We will generally respond to valid requests within the timeframe required by applicable data protection law.
15. Complaints
If you have concerns about how we process your personal data, we encourage you to contact us first so that we can try to resolve the issue.
You also have the right to lodge a complaint with the data protection authority responsible for your country.
For the Netherlands, the relevant supervisory authority is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
16. Children's Privacy
Our Website is not intended to knowingly collect personal data from children where such collection is prohibited by applicable law.
If you believe that a child has provided us with personal data without the appropriate consent or legal basis, please contact us at info@lureto-haus.com so that we can investigate and take appropriate action.
17. Third-Party Websites
Our Website may contain links to third-party websites, services or platforms.
We are not responsible for the privacy practices, security or content of third-party websites.
We recommend that you review the privacy policies of third-party websites before providing them with personal information.
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, Website, services, technology or applicable legal requirements.
The updated version will be published on this page, together with the date on which it was last updated.
We encourage you to review this Privacy Policy periodically.
19. Contact Us
If you have questions about this Privacy Policy or how we process your personal data, please contact us:
Aja zorg / Lureto Haus
Parelmoerwolk 48
6846 DP Arnhem
The Netherlands
KVK number: 86766058
Email: info@lureto-haus.com
Website: www.lureto-haus.com
We will be happy to assist you with questions concerning your personal data and privacy.
20. Supervisory Authority
If you are located in the Netherlands and wish to contact the relevant data protection authority, you can contact:
Autoriteit Persoonsgegevens
The Dutch Data Protection Authority
You can find information about the authority and how to submit a complaint through its official website.
