PRIVACY POLICY
This Privacy Policy explains how Sport & Lifestyle B.V. collects, uses, shares, and protects your personal data when you visit www.apnutrition.nl (the βWebsiteβ) or make a purchase. We process your personal data in accordance with the General Data Protection Regulation (GDPR).
Data Controller
The data controller for your personal data is:
Sport & Lifestyle B.V.
Henckenshagenstraat 5, 4834 KX Breda, Netherlands
Chamber of Commerce: 95664629
E-mail: info@apnutrition.nl
Note: In the event of differences in interpretation, misunderstandings, or translation errors, the Dutch original version shall always prevail.
What personal data we collect
Device Data
When you visit the Website, we automatically collect certain data about your device, including your web browser, IP address, time zone, and cookies that are installed on your device. As you browse the Website, we collect data about the pages or products you view, the websites or search terms that referred you to the Website, and information about your interaction with the Website.
We collect Device Data using the following technologies:
Cookies β data files that are placed on your device. For more information, see our "Cookies" section below.
Log Files β record actions on the Website and collect data including your IP address, browser type, internet service provider, referring and exit pages, and date and time stamps.
Web Beacons, Tags, and Pixels β electronic files used to record data about your use of the Website, including the Meta Pixel and Google tags.
Order details
When you make a purchase or attempt to make a purchase through the Website, we collect your name, billing address, delivery address, payment information (processed through our payment providers), email address, and phone number.
When we refer to "Personal Data" in this Privacy Policy, we mean both Device Data and Order Data.
How we use your personal data
We process your Order Data to:
handle orders (payment processing, shipping, invoicing, and order confirmations);
communicate with you about your order;
check orders for potential risks or fraud;
send you marketing messages and offers, if you have given consent for that.
We process your Device Data to:
improve and optimize our Website;
generate analytics on how visitors use the Website;
assess the success of our marketing and advertising campaigns;
counter risks and fraud.
Legal grounds for processing
We process your personal data based on the following legal grounds:
Performance of a contract (art. 6(1)(b) GDPR) β for processing your order and delivery.
Legal obligation (art. 6(1)(c) GDPR) β for administrative and tax obligations, such as retaining invoices.
Legitimate interest (art. 6(1)(f) GDPR) β for improving our services, fraud prevention, and security.
Consent (art. 6 para 1 sub a GDPR) β for sending marketing messages and placing non-essential cookies. You can withdraw this consent at any time.
With whom we share your personal data
We share your personal data only with third parties who assist us in providing our services. We have entered into processor agreements with these parties that outline the arrangements for protecting your data. The categories of recipients are:
Payment providers β Mollie B.V. (Netherlands) and Stripe, Inc. (United States) for processing your payment.
Carriers β Sendcloud B.V. for processing shipments and generating shipping labels, and PostNL, DHL, DPD, UPS, and FedEx for delivering your order.
IT- en hostingdiensten β Wix.com Ltd. voor het hosten van onze Website, en Odoo S.A. voor onze administratie, klantbeheer en e-mailmarketing.
Marketing and analytics services β Google LLC (Google Ads, Google Analytics) and Meta Platforms, Inc. (Meta Pixel) for advertising and website analysis.
Competent authorities β if we are legally obligated to do so, for example, based on a subpoena or court order.
Transfer outside the European Economic Area
Some of our service providers (including Stripe, Google, and Meta) are located in the United States. When we transfer your personal data to countries outside the EEA, we do so only when appropriate safeguards are in place, such as:
the EU-US Data Privacy Framework (for transfers to certified U.S. organizations);
European Commission approved standard contractual clauses (Standard Contractual Clauses);
a decision of adequacy by the European Commission.
Cookies
Our Website uses cookies. We distinguish:
Functional cookies β necessary for the functioning of the Website (for example, shopping cart and logging in). These are always placed.
Analytical cookies β to measure and improve the use of our Website (for example, Google Analytics).
Marketing and tracking cookies β to show you relevant advertisements on other websites (for example, Meta Pixel and Google Ads).
Non-functional cookies are only placed after you have actively given consent via our cookie banner. You can adjust or withdraw your cookie preferences at any time via our cookie settings.
Do Not Track
Our Website does not currently respond to "Do Not Track" signals from your browser. You can manage your privacy via our cookie banner and the settings in your browser.
Retention periods
We do not retain your personal data longer than necessary for the purposes for which they were collected:
Order data and invoices β 7 years, based on our tax retention obligation (art. 52 AWR).
Customer account data β as long as your account is active. Upon deletion of your account, we will delete your data, except for data that we are legally required to retain.
Marketing data β until you withdraw your consent or unsubscribe.
Device data and analytical data β up to 26 months.
Correspondence (email) β up to 2 years after last contact.
Your rights
Under the GDPR, you have the following rights regarding your personal data:
Right of access β you can request to know what data we process about you.
Right to rectification β you can have incorrect data corrected.
Right to erasure β you can request to have your data deleted ("right to be forgotten").
Right to restriction β you can request to restrict the processing of your data.
Right to object β you can object to processing based on legitimate interest or direct marketing.
Right to data portability β you can receive your data in a structured format or have it transferred.
Right to withdraw consent β when we process data based on consent, you can withdraw it at any time.
To exercise these rights, you can contact us via info@apnutrition.nl. We will respond without undue delay and no later than one month after receiving your request. If necessary, this period may be extended by up to two months, for example, in the case of complex or multiple requests. In that case, we will inform you within one month about the extension and the reason for it.
Right to complain
If you believe that we process your personal data unlawfully, you have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, via www.autoriteitpersoonsgegevens.nl.
Security
We take appropriate technical and organizational measures to protect your personal data against loss, unlawful processing, or unauthorized access. Data is transmitted via secure connections (SSL/TLS).
Changes
This Privacy Policy may be adjusted, for example, in the event of changes in our practices or legal requirements. The most current version can always be found on this page. We recommend that you consult this page regularly.
Contact
For questions about this Privacy Policy or to exercise your rights, you can contact us:
Sport & Lifestyle B.V.
Henckenshagenstraat 5, 4834 KX Breda, Netherlands
E-mail: info@apnutrition.nl
Note: In the event of differences in interpretation, misunderstandings, or translation errors, the Dutch original version shall always prevail.