Privacy statement
Draft text: this page is still being legally reviewed. Any questions? Feel free to get in touch.
I handle your data with care. This statement explains in plain language which data I collect, why, how long I keep it and what your rights are. In case of any difference, the Dutch version prevails. Last updated: 2 November 2026.
Who is responsible?
- Trade name: De Haagse Kerstboom
- Owner: PLACEHOLDER_NAAM
- Business address: [to follow after Chamber of Commerce registration]
- E-mail: info@haagsekerstboom.nl
- Phone / WhatsApp: 06 3333 8405
- Chamber of Commerce (KVK) number: [to follow]
- VAT ID: [to follow]
What data do I collect?
- When you order: name, address, postcode, town, phone number, email address, your order, delivery time, payment method and any notes.
- For a gift: additionally the recipient's name, address and phone number and the text for the card.
- Contact form: name, email address, optional phone number and your message.
- Website visits: which pages are viewed and the type of source (for example a search engine). I do not store IP addresses or set cookies. See below.
I never ask for more data than needed to deliver your tree.
Why do I use your data?
| Purpose | Legal basis (GDPR) |
|---|---|
| Fulfilling and delivering your order and contacting you about the delivery time | Performance of the contract |
| Sending a confirmation and delivery information | Performance of the contract |
| Bookkeeping and tax returns | Legal obligation |
| Answering your question or message | Legitimate interest / your request |
| An occasional message about the new Christmas season (only if you tick the box) | Consent, which you can withdraw at any time |
| Anonymous visitor statistics to improve the site | Legitimate interest |
| Preventing abuse and spam | Legitimate interest |
How long do I keep your data?
- Order and invoice data: 7 years, as required by the Dutch Tax Administration.
- Contact messages: up to 1 year, unless they relate to an order.
- Consent for messages about the new season: until you unsubscribe.
- Visitor statistics: up to 90 days, without IP addresses or cookies.
Who do I share your data with?
I never sell your data. I do work with a few service providers (processors) that the website needs to function:
- Vercel — website hosting.
- Turso — the database that stores orders (in a European region).
- Resend — sending confirmation emails.
Some of these providers are based in the United States. Data is then transferred under the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. I have a data processing agreement with each processor.
Cookie-free visitor statistics
To see how many people visit the site, I count page views in a privacy-friendly way. No cookies are set and no IP addresses are stored. To avoid double counting, I create an encrypted code from your IP address and browser that changes every day; it can't be used to follow you across days or identify you. See also the cookie statement.
Your rights
You have the right to access, correct or delete your data (as far as I'm not legally required to keep it). You can also object, restrict processing or request your data to take elsewhere. Just email info@haagsekerstboom.nl. I'll respond within one month.
Not happy with how I handle your data? You can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). Of course, I'd rather hear from you first.
Security
The website always uses a secure connection (https). Orders are stored in a protected database, and only I have access to the admin area with a strong password. I never store card payment details.
Tip: save or print this page via your browser (Ctrl/Cmd + P).