• Lorem ipsum
HomePrivacy Policy

Privacy Policy

Privacy Policy Koffiezone.nl

Version: September 2026

Koffiezone.nl attaches great importance to the protection of your personal data. This Privacy Policy explains which personal data we process, why we process this data, with which parties data may be shared, how long we retain data and what rights you have.

This Privacy Policy applies to the use of Koffiezone.nl and our services, including placing and processing orders, payments, shipping, customer service, newsletters, reviews and the use of our website.

1. Who is responsible for your personal data?

Koffiezone.nl is responsible for the processing of personal data as described in this Privacy Policy.

Koffiezone.nl
Boerenkamplaan 94 b
5712 AH Someren
The Netherlands

Dutch Chamber of Commerce (KVK): 17265816
VAT identification number: NL821440093B01
Email:[email protected]
Telephone: +31 6 17988539

If you have any questions about privacy or wish to exercise your privacy rights, you can contact us using the contact details above.

2. Which personal data do we process?

Depending on how you use our webshop, we may process the following personal data:

  • name, address, postcode and place of residence;

  • billing and delivery address;

  • email address and telephone number;

  • company name and VAT identification number if you place a business order;

  • order details and purchase history;

  • payment and transaction details;

  • customer number and account details;

  • correspondence with our customer service;

  • information you provide when submitting a review;

  • IP address, browser, device and technical information;

  • information about your use of our website;

  • cookie and consent information;

  • information required for fraud prevention, security and the prevention of misuse.

We do not process more personal data than is reasonably necessary for the relevant purposes.

3. Why do we process your personal data?

Orders and contracts

When you place an order, we process personal data to register and fulfil your order, process your payment, ship your order and keep you informed about its status.

Legal basis: performance of a contract or taking steps prior to entering into a contract.

Customer service

When you contact us, we process the information necessary to deal with your question, complaint, return or other request.

Legal basis: performance of a contract and, depending on the circumstances, our legitimate interest in providing good customer service.

Administration and legal obligations

We process and retain certain order, payment and invoice information in order to comply with our statutory administrative, tax and other legal obligations.

Legal basis: compliance with a legal obligation.

Security and fraud prevention

We may process technical, order and payment information to secure our webshop and services and to prevent or investigate fraud, misuse and unauthorised access.

Legal basis: our legitimate interest in protecting our business, webshop and customers.

Newsletters and commercial communications

When you subscribe to our newsletter, we use your name and/or email address to send you news, offers and information about our products.

You can unsubscribe at any time using the unsubscribe link at the bottom of our newsletters.

Where consent is required by law, we base this processing on your consent. Where commercial communications are permitted on another legal basis, we act in accordance with the applicable rules.

4. Webshop – Lightspeed

Our webshop uses the Lightspeed e-commerce platform.

When you use our webshop or place an order, personal data is processed within this environment. This may include contact, account, order and technical information.

Lightspeed may have access to personal data where necessary for the operation, security and technical support of the webshop.

5. Payments

We use various payment service providers to process payments.

PAY.

A significant proportion of our payment methods are processed through PAY. Depending on the payment method selected, information such as your name, contact details, order details, IP address and payment or transaction details may be processed.

Various payment methods may be made available through PAY. The payment methods actually available to you will be displayed during checkout.

Mollie

We use Mollie for certain payments. Mollie processes the information necessary to execute and administer the selected payment.

PayPal

If you choose PayPal, the personal data and transaction information necessary to process the payment will be processed by or shared with PayPal.

ABN AMRO

We use ABN AMRO for our business banking. Payment and transaction information may therefore be processed as part of our banking administration.

Payment service providers and banks may act as independent data controllers for certain processing activities and are also subject to their own legal obligations, for example in relation to payment services, fraud prevention and financial administration.

6. Shipping – Sendcloud and carriers

We use Sendcloud to process our shipments.

To ship your order, the following information may be provided to Sendcloud:

  • name;

  • delivery address;

  • email address;

  • telephone number, where necessary for delivery;

  • order and shipping information.

We use Sendcloud to create shipping labels and to provide the selected carrier with the information necessary to deliver your order.

Koffiezone.nl uses carriers including DPD, DHL and PostNL.

The relevant carrier receives the personal data necessary to deliver your order and, where applicable, to keep you informed about the delivery.

7. Accounting – SnelStart

We use SnelStart for our financial administration and accounting.

This may involve the processing of information including your name, address details, company details, invoice information, order details and financial information.

Administrative data is retained insofar as necessary to comply with our statutory and tax obligations.

8. Newsletters – Laposta

We use Laposta to send our newsletters.

For this purpose, your name and email address may be processed. Technical information relating to the delivery and use of emails may also be processed, for example whether a newsletter was delivered or opened, insofar as this is permitted under the applicable privacy and cookie rules.

You can unsubscribe at any time using the unsubscribe link at the bottom of each newsletter.

9. Reviews – WebwinkelKeur

We use WebwinkelKeur to collect and publish customer and product reviews.

When we invite you to leave a review, information such as your name, email address and information necessary to link the review to an order may be shared with WebwinkelKeur.

When you submit a review, WebwinkelKeur processes the information you provide in accordance with its own terms and privacy policy.

WebwinkelKeur may publish certain information that you provide when submitting your review. Therefore, please do not include personal information in the public text of your review that you do not wish to make public.

10. Cookies and Cookiebot

Koffiezone.nl uses cookies and similar technologies. We use Cookiebot to manage and record your cookie preferences.

We may use the following types of cookies:

Necessary cookies: required for the technical operation of the webshop, for example for the shopping cart, security and checkout process.

Preference cookies: used to remember certain settings and choices.

Statistics and analytics cookies: used to gain insight into the use and performance of our webshop.

Marketing cookies: used, among other things, to measure the effectiveness of advertising and, depending on your consent, to better tailor advertisements.

Cookies for which consent is legally required are only used after you have given your consent via our cookie banner.

You can change or withdraw your consent and cookie preferences through Cookiebot. The current list of cookies, providers, purposes and retention periods can be found in our cookie settings.

11. Analytics and online marketing

We use analytics and marketing services to understand how our webshop is used and to measure and improve our online marketing.

Depending on your cookie preferences and the services used, information such as your IP address, device information, browser information, pages visited, interactions, traffic source and information about orders or conversions may be processed.

Where consent is required, this processing will only take place after you have given your consent via Cookiebot.

12. Email and communication

When you contact us by email or through another means of communication, we process your contact details and the content of your message in order to deal with your question or request.

Correspondence may be retained for as long as necessary to deal with your request, provide our services and maintain our administration, or for the establishment, exercise or defence of legal claims.

13. Legal matters, insurance, legal assistance and debt collection

Where necessary for dealing with a claim, payment arrears, liability claim, legal dispute or other legal matter, we may provide relevant personal data to our insurer ASR, our legal assistance provider DAS and, where necessary, legal service providers engaged by us or our legal assistance provider.

These may include lawyers, debt collection agencies or bailiffs.

The information concerned may include:

  • name and contact details;

  • company information;

  • order and invoice information;

  • payment information and outstanding amounts;

  • relevant correspondence;

  • other information necessary for dealing with the matter concerned.

We only share personal data that is reasonably necessary to deal with the matter, collect a debt or establish, exercise or defend our legal position.

Legal basis: our legitimate interest in collecting amounts owed to us and in establishing, exercising and defending our rights, or compliance with a legal obligation where applicable.

14. With whom do we share personal data?

We do not sell your personal data.

We only share personal data where this is necessary for our services, business operations, the protection of our rights or compliance with legal obligations.

This may include sharing data with:

  • Lightspeed and other technical service providers for our webshop;

  • payment service providers and banks;

  • Sendcloud and carriers;

  • accounting and administrative service providers;

  • newsletter service providers;

  • review platforms;

  • cookie, analytics, advertising and marketing service providers;

  • IT and security service providers;

  • insurers and legal assistance providers, including ASR and DAS;

  • lawyers, debt collection agencies and bailiffs where necessary;

  • government authorities where we are legally required to provide information.

Where parties process personal data exclusively on our behalf, we enter into appropriate agreements concerning the protection and processing of personal data where required.

15. Transfers outside the European Economic Area

Some service providers or their subprocessors may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we ensure that there is a valid legal basis for the transfer and, where required, appropriate safeguards are in place. These may include an adequacy decision by the European Commission or Standard Contractual Clauses approved by the European Commission.

If you would like more information about the safeguards used for a specific transfer, please contact us at [email protected].

16. How long do we retain personal data?

We do not retain personal data for longer than necessary for the purpose for which it was collected, unless we are legally required to retain certain information for a longer period.

Order, invoice and administrative data that forms part of our basic tax administration is generally retained for 7 years, in accordance with the applicable Dutch tax record-keeping requirements.

Longer statutory retention periods may apply to certain transactions. For example, information that we are required to retain under the European Union's One Stop Shop (OSS) scheme may have to be retained for 10 years.

Account information is retained for as long as your account remains active or for as long as is reasonably necessary. Information in your account that also forms part of our statutory administration may be retained for longer where a statutory retention obligation applies.

Customer service information and correspondence is retained for as long as necessary to deal with your question, complaint, return or dispute. Relevant information may subsequently be retained for as long as reasonably necessary for our administration or for the establishment, exercise or defence of legal claims.

Newsletter information is processed until you unsubscribe or withdraw your consent. After unsubscribing, we may retain limited information, such as your email address, on a suppression list to ensure that your unsubscribe request continues to be respected.

Cookie, analytics and marketing data is retained in accordance with the retention periods applicable to the relevant cookies and services. Current retention periods can be found in our Cookiebot cookie statement and cookie settings.

Information contained in legal files, payment disputes and claims is retained for as long as necessary to deal with the matter concerned and subsequently for as long as reasonably necessary in connection with potential legal claims or statutory obligations.

Where personal data is processed for multiple purposes, the longest applicable statutory or necessary retention period may apply. After the applicable retention period has expired, personal data will be deleted or anonymised unless further retention is legally permitted or required.

17. Security of personal data

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, unwanted disclosure and unauthorised alteration.

Access to personal data is restricted as far as possible to employees and service providers who require the information for their work.

18. Your privacy rights

Under the General Data Protection Regulation (GDPR), depending on the circumstances, you have various rights in relation to your personal data.

These include the right to:

  • request access to your personal data;

  • have inaccurate personal data corrected;

  • request the deletion of your personal data;

  • request restriction of processing;

  • object to certain processing activities;

  • receive or transfer your personal data in certain circumstances;

  • withdraw previously given consent;

  • object to the use of your personal data for direct marketing.

Withdrawing your consent does not affect the lawfulness of processing carried out on the basis of your consent before it was withdrawn.

You can submit a privacy request via [email protected].

To prevent personal data from being provided to the wrong person, we may ask you to provide additional information that allows us to reasonably verify your identity.

We will generally respond to your request within one month. For complex requests or a large number of requests, this period may be extended in accordance with the GDPR.

19. Privacy complaints

If you have a complaint about the way we process your personal data, we encourage you to contact us first so that we can investigate your complaint.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or, where applicable, another competent supervisory authority.

20. Changes to this Privacy Policy

We may amend this Privacy Policy if our services, systems, suppliers, legislation or data processing activities change.

We will always publish the current version on this page. The version date at the top of this Privacy Policy allows you to see when it was last substantively updated.

In the event of significant changes, we will provide additional information where appropriate or legally required.

Current version: September 2026