1. Who we are

KEKKE Amsterdam is responsible for the processing of personal data as described in this policy.
Email: info@kekkeamsterdam.nl

KEKKE Amsterdam acts as data controller within the meaning of the General Data Protection Regulation (GDPR).

2. Personal data we process

We may process the following personal data:

• Name and address details
• Email address
• Phone number (if provided)
• Payment information (processed securely by our payment providers and not stored by us)
• Order and invoice details
• IP address
• Browser and device information
• Content of communication with customer service

We do not process special categories of personal data.

3. Purposes and legal basis

We process personal data only for the following purposes:

Performance of a contract

• Processing and shipping orders
• Customer service and returns

Legal obligation

• Financial administration and tax recordkeeping

Legitimate interest

• Website security
• Fraud prevention
• Improving our services
• Website analytics

Consent

• Sending marketing communications
• Placing non-essential cookies

Consent may be withdrawn at any time.

4. Data retention

We do not retain personal data longer than necessary:

• Order and invoice data: 7 years
• Customer service data: until resolution
• Marketing data: until unsubscribe
• Analytics data: maximum 26 months

5. Sharing data with third parties

We only share personal data when necessary for our services, such as with:

• Payment providers
• Logistics partners
• Hosting providers
• IT service providers
• Marketing tools (if applicable)

We enter into data processing agreements with processors in accordance with the GDPR.

We never sell or rent personal data to third parties.

6. International transfers

If personal data is processed outside the European Economic Area, we ensure appropriate safeguards in accordance with the GDPR.

7. Security

We take appropriate technical and organizational measures to protect personal data against misuse, loss, or unauthorized access.

Access to personal data is limited to persons who need it to perform their duties.

Absolute security cannot be guaranteed. In case of a data breach, we comply with applicable legal notification obligations.

8. Your rights

You have the right to:

• Access your data
• Rectify inaccuracies
• Request deletion
• Restrict processing
• Object to processing
• Request data portability

Requests can be sent to info@kekkeamsterdam.nl. We respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority.

9. Cookies

Our website uses cookies to ensure proper functionality and to analyze website usage.

Functional cookies

Necessary for website operation.

Analytical cookies

To analyze website usage (e.g., Google Analytics).

Where required by law, we obtain consent before placing non-essential cookies.

10. Changes

We reserve the right to update this policy. The latest version is always available on our website.

Latest update: 26-02-2026