Privacy Policy
Controller: Volkranncraxylon, Oude Kijk in Het Jatstraat 42A, 9712 EL Groningen, Netherlands.
Last updated:
This policy describes how we process personal data when you use this website, place orders, or contact us. It is written to align with the EU General Data Protection Regulation (GDPR) and applicable Dutch implementation rules.
Data we collect
We may process identification and contact data (name, email address, telephone number if you provide it), order and payment-related records handled by our payment partners, technical data such as IP address and browser type, and the content of messages you send through forms or email.
| Category | Examples | Purpose |
|---|---|---|
| Contact and order | Name, email, delivery details | Contract performance, customer support |
| Technical | IP address, device type | Security, fraud prevention, analytics if consented |
| Communications | Free-text messages | Responding to your request |
Legal bases
We rely on performance of a contract where you purchase goods, legitimate interests for security and service improvement where not overridden by your rights, consent where required (for example non-essential cookies or certain marketing messages), and legal obligations where we must retain records for tax or consumer law.
Retention
Order and accounting records are kept for the period required by Dutch commercial and tax law, typically up to seven years unless a longer period applies to a specific claim. Marketing consents are stored until withdrawn. Contact form copies are kept only as long as needed to resolve your request unless a longer period is justified by a dispute or legal obligation.
Sharing and transfers
We use processors such as hosting providers and payment service providers under written agreements. Where data is transferred outside the European Economic Area, we use appropriate safeguards such as Standard Contractual Clauses when required.
Security measures
We apply access controls, encryption where appropriate for transmission, separation of environments, and staff instructions limited to what is necessary. No method of transmission over the internet is completely secure; we work to reduce risk in proportion to the data involved.
Your rights
Under the GDPR you may request access, rectification, erasure, restriction of processing, data portability where applicable, and object to processing based on legitimate interests. You may withdraw consent at any time where processing is consent-based. You may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or another EU supervisory authority.
To exercise rights, contact us using the email identifiers published in the site footer. We may ask for reasonable proof of identity before disclosing or changing records.
Automated decisions
We do not use solely automated decision-making, including profiling, that produces legal effects concerning you unless we inform you separately and provide a legal basis.
Children
Our services are not directed at children under 16. We do not knowingly collect data from children without parental authority.
Territory, topic, and advertising context
The controller is established in the Netherlands and offers products in line with EU food-law and consumer rules. If you access this site or place an order from another country, local import, tax, and product rules may apply in addition to what is stated here.
Our product category is food supplements. We process personal data to run the shop and answer enquiries. We do not use this policy to claim medical effects for our products. Where we run online advertising, we aim to comply with platform rules and regional requirements for health-related products, including avoiding disease claims and promises that cannot be substantiated in ad creatives and landing pages.
Changes
We may update this policy to reflect legal or organisational changes. The “Last updated” date at the top will change when we publish a revision.