This policy explains what personal data Peptide Europe collects, why, and what you can do about it. We are the controller for this processing under the GDPR.
Who we are
Peptide Europe, KvK 42046001, the Netherlands. Contact: info@peptide-europe.net.
What we collect and why
| Data | Why | Legal basis | Kept |
|---|---|---|---|
| Name, address, email, phone | To process and ship your order | Performance of a contract | 7 years (Dutch tax law) |
| Order and payment details | Accounting and warranty | Legal obligation | 7 years |
| Email address for the lab-report request | To send you the report PDF | Consent | Until you withdraw |
| Email address for offers | Marketing email | Consent, or soft opt-in as an existing customer | Until you unsubscribe |
| IP address, pages viewed | Security and site statistics | Legitimate interest | Max. 12 months |
Who we share it with
Only with parties that need it to do their job for us: our payment provider, our carrier (PostNL and its parcel-service partner), our hosting provider and our email provider. They act as processors under a data-processing agreement and may not use your data for their own purposes. We do not sell personal data. We do not transfer data outside the EEA except where a provider is covered by an adequacy decision or standard contractual clauses.
Cookies
We use functional cookies, which are needed for the shop and the cart to work at all, and which do not require consent. Analytical and marketing cookies are set only if you accept them in the cookie banner; you can decline without losing any functionality, and you can change your mind by clearing this site’s cookies in your browser.
Your rights
You can ask us for a copy of your data, to correct it, to erase it, to restrict or object to processing, or to receive it in a portable form. Where processing rests on consent, you can withdraw that consent at any time; that does not affect processing before the withdrawal. Email info@peptide-europe.net and we reply within 30 days.
Note that we cannot erase order and invoice data before the seven-year retention period required by Dutch tax law has expired.
Complaints
If you think we handle your data wrongly, tell us first. You also have the right to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the supervisory authority in your own country.
Security
The site runs over TLS, payments are handled by our payment provider and never touch our servers, and access to order data is limited to people who need it.
Changes
We may update this policy. The version published here is the one that applies.