Privacy Policy

1. Introduction

Penviro is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website sluzarinvak.world and purchase our products. We comply with the General Data Protection Regulation (GDPR) and applicable Dutch and international data protection laws.

2. Data Controller

The data controller responsible for your personal data is:

3. Data We Collect

We collect the following categories of personal data:

• Contact data: Name, email address, postal address, phone number, and message content when you submit our order form, contact form, or communicate with us.
• Transaction data: Order history, payment information (processed securely by third-party payment providers), and delivery preferences.
• Technical data: IP address, browser type and version, device information, operating system, referrer URL, pages visited, and timestamp of visits. This data may be collected via cookies where you have given consent.
• Consent records: Record of your cookie preferences, GDPR consent, and marketing opt-in status.

4. Purposes of Processing

We process your personal data for the following purposes:

• To process and fulfil your orders, including shipping and customer service.
• To respond to your inquiries and provide customer support.
• To send order confirmations and shipping updates.
• To improve our website, products, and services through analytics (where consented).
• To comply with legal and regulatory obligations, including tax and accounting requirements.
• To send marketing communications only where you have given explicit consent.

5. Legal Basis Under GDPR

We process your data based on:

• Contract: Processing necessary to perform the contract between you and us (e.g. order fulfilment).
• Legitimate interests: Website operation, security, fraud prevention, and business improvement, where these interests are not overridden by your rights.
• Consent: Analytics cookies, marketing cookies, and newsletter subscriptions. You may withdraw consent at any time.
• Legal obligation: Where we must retain data for tax, accounting, or regulatory purposes.

6. Data Retention

We retain your data only for as long as necessary:

• Order and transaction data: Up to 7 years for legal, tax, and accounting requirements in the Netherlands.
• Contact inquiries: Up to 2 years from the date of last contact.
• Cookie and consent logs: Up to 2 years.
• Analytics data: Up to 26 months where applicable.
• Marketing preferences: Until you withdraw consent or request deletion.

7. Your Rights (GDPR)

You have the following rights:

• Right of access: Request a copy of your personal data we hold.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data where no overriding legal obligation exists.
• Right to restriction: Request that we limit processing in certain circumstances.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Withdraw consent at any time for consent-based processing.

To exercise these rights, contact us at admin@sluzarinvak.world. We will respond within one month. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption (HTTPS/TLS), secure access controls, and regular security assessments. We do not sell your personal data to third parties. Data is stored on secure servers within the European Union.

9. Third-Party Processors

We may share data with trusted service providers (e.g. payment processors, shipping carriers) who process data on our behalf under strict contractual arrangements. These processors are required to comply with GDPR and applicable security standards.

10. International Transfers

If data is transferred outside the European Economic Area (EEA), we ensure adequate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

11. Children

Our website and products are not directed at individuals under 18. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated via our website or email. The "Last updated" date at the top reflects the most recent revision.

13. Contact

For questions about this Privacy Policy or your personal data: