Privacy and cookie statement

Faso B.V., trading under the name Fasola, is responsible for the processing of personal data for the Fasola webshop. Chamber of Commerce (KvK): 61266442. Business address: Boomblauwtje 124, 7323 VR Apeldoorn, The Netherlands. Contact and return address: Laan van de Maagd 89, 7324 BT Apeldoorn, The Netherlands.

Questions about privacy or a request regarding your data? Email hallo@fasola.nl or use our contact form.

• For your order: name, billing and delivery address, email address, order details, and payment information received from the payment processor. We use a phone number when necessary for communication regarding the order or delivery.
• For contact and service: the data you send us, such as your name, email address, order number, message, and any photos.
• For a customer account: the data you provide and the order history linked to the account.
• For newsletters: your email address and marketing preferences, if you subscribe. You can unsubscribe via the link in the mailing.
• When using the website: technical data, such as IP address, browser, device, and website usage. Which data is processed for analysis, personalization, or marketing also depends on your cookie choices.

Without the necessary order and address data, we cannot fulfill your order. Non-essential marketing consent is not a condition for making a purchase.

For ordering, payment, delivery, and related services, we use data to fulfill the agreement. For administration and tax obligations, we process data because the law requires it.

For security, fraud prevention, and handling inquiries, we may have a legitimate interest: a secure webshop and good customer service. In doing so, we must balance your interests and privacy. For processing that requires consent, such as tracking cookies and newsletter subscriptions, we use your consent. Simply visiting the website does not constitute consent.

Our webshop runs on Shopify. To fulfill your order, data is processed by Shopify, the payment processor of your chosen payment method, and the carrier, including PostNL. We share what is necessary for their task. Parties that support the webshop, communication, or administration may also process data for their services.

Shopify Network Intelligence is enabled. Shopify combines data from this webshop with data from other Shopify stores for comprehensive services, including product improvements, advertising, and personalization. This does not grant other merchants access to your Fasola customer data. Shopify respects consent and opt-out signals provided through its privacy features.

More about Shopify's own processing can be found in the Shopify Privacy Policy. Via the Shopify Privacy Portal, you can request access or deletion and limit the use of your data for advertising purposes.

We store data as long as it is necessary for the purpose, an ongoing order, service inquiry, or complaint, and as long as a legal retention obligation applies. We keep basic data from our tax administration for seven years; a longer period may apply for certain tax regulations. We keep contact messages for as long as they are needed for handling and any follow-up questions or disputes.

For newsletters, we use your subscription until you unsubscribe. A limited record of your unsubscribe request may remain necessary to prevent you from being contacted again. Cookie retention periods vary per cookie; see the overview below.

Shopify lists the European Union as the hosting location for this store. This does not exclude international processing: Shopify and service providers may also process data outside the European Economic Area. In such cases, required safeguards apply, such as an adequacy decision or standard contractual clauses. Shopify explains this in its information on international data transfers.

We treat data confidentially and limit access to what is necessary for operations. Digital security can never offer a complete guarantee against every risk.

• Necessary cookies: for functions such as the shopping cart, checkout, login, and security. No cookie consent is required for these.
• Preferences and analytics: for remembering choices and gaining insight into website usage. For analyses that have little to no impact on your privacy, an exception to cookie consent may apply. Further processing requires consent.
• Marketing and tracking: for advertisements, personalization, and tracking behavior. This requires prior consent. Continuing to scroll or visiting the site does not constitute consent.

We use the Shopify cookie banner. There you can accept, reject, or manage preferences. The banner is configured for the Netherlands and Germany.

A video or link to an external service, such as YouTube, may also lead to data processing by that service. When using such features, read the privacy information of the respective provider.

For its webshops, Shopify mentions the cookies below, among others. Whether a cookie is present on your device depends on the features used and your choices. This is not a complete inventory of all potential external apps.

• cart: stores shopping cart information, maximum two weeks.
• _shopify_essential: for necessary shopping, session, and checkout functions, maximum one year.
• _shopify_test: checks if cookies are working, maximum one minute.
• localization: for country settings, maximum one year.
• _shopify_analytics: for analysis, maximum one year.
• _shopify_marketing: for marketing data, maximum one year.

The current names, functions, and durations of Shopify cookies can be found in the Shopify cookie policy.

You can request access to, correction of, deletion of, restriction of use of, or transfer of your data, insofar as the GDPR provides for this. You can object to processing based on a legitimate interest. You can always object to the use of your data for direct marketing. You can withdraw consent; this does not affect the lawfulness of previous use.

Email your request to hallo@fasola.nl. We may ask for information to carefully verify that the request comes from you. Do not send a full copy of your ID document right away.

In principle, we respond within one month. For complex requests, the legal extension of up to two months may be necessary; we will inform you within the first month and explain why. We cannot simply erase data that we are legally required to keep.

Are you not satisfied with the handling? Discuss it with us. You can also file a complaint with the Dutch Data Protection Authority.

If our services or data processing change, we will update this statement. The date of the last change is at the top. A change to the statement does not replace consent when it is required for new processing.