Privacy Policy

RDM Media & Development B.V., the company behind Sfeerding, is the controller responsible for the processing of your personal data, within the meaning of the General Data Protection Regulation (GDPR).

Company

RDM Media & Development B.V.

Brand

Sfeerding

Address

Laarakkerweg 6a, 5061 JR Oisterwijk

Chamber of Commerce (KvK) number

42094621

VAT ID

NL869688765B01

Phone

085 580 8720

Email

[email protected]

For any question about your data, you can email [email protected].

When you place an order

Your name, your address, your email address and your telephone number if you enter it. Also the products you order, a note if you add one, and the status of your payment and your shipment. If you order on behalf of a business, also the business name and the VAT number if you enter it.

When you make a payment

You pay on Stripe's secure payment page. You enter your bank or card details there. We do not see those details. We are only told whether the payment was successful.

When you send a message through the contact form

Your name, your email address and your message. If you email us directly, we receive your email address and whatever you write to us.

When you visit the website

In order to display and secure the website, our servers and Cloudflare process technical data such as your IP address and browser type. Only if you accept cookies do we also collect usage statistics with Google Analytics (see the section on cookies). We do not track you on other websites.

• Carrying out your order: printing, payment, dispatch and customer service. Legal basis: performance of the contract (Article 6(1)(b) GDPR).
• Answering your message. Legal basis: our legitimate interest in answering questions (Article 6(1)(f) GDPR). If your question is about your order, the legal basis is performance of the contract.
• Our bookkeeping and tax returns. Legal basis: legal obligation (Article 6(1)(c) GDPR).
• Securing the website and preventing abuse, such as spam through the contact form. Legal basis: our legitimate interest in a secure website (Article 6(1)(f) GDPR).

We do not use your data for newsletters or advertising and we never sell it. We do not take decisions about you that are based solely on automated processing.

We share data only with parties we need in order to deliver your order and to help you:

• Stripe processes the online payments.
• MyParcel and PostNL receive your name, delivery address and email address in order to deliver your parcel and send you the track & trace details.
• Resend sends the emails from our contact form: your message to us and the confirmation to you.
• Microsoft provides our email (Microsoft 365). Your messages and emails to us arrive there.
• WeFact is our invoicing software. We use it to create the invoice for your order, with your name, address, email address and what you ordered.
• Cloudflare delivers our website securely and protects it against abuse.
• Hosting: the website and our shop environment, in which your order and your basket are stored, run on servers in the European Union.

Parties that process data on our behalf may use it only for us. We make the agreements with them that the GDPR requires. Beyond that, we pass on data only if the law obliges us to.

Stripe, Resend, Microsoft and Cloudflare are American companies or belong to an American company. As a result, data may be processed outside the European Economic Area. This happens only with the safeguards the GDPR requires, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

• Orders, invoices and the related emails: 7 years. That is how long we must keep our records for the Dutch Tax and Customs Administration (Belastingdienst).
• Messages that do not lead to an order: up to 24 months after our last contact.
• Your IP address when you use the contact form: we count how many messages have been sent from an IP address in the last 10 minutes, to prevent abuse. This happens only in the server's working memory. We do not store the IP address.

Sfeerding does not place advertising cookies or tracking cookies. We only place analytics cookies with your consent: on your first visit a cookie notice therefore asks whether you accept or decline them. We keep your choice in your browser and you can change it at any time through “Cookie settings” at the bottom of every page. If you accept, we load Google Analytics. It places analytics cookies (_ga and _ga_…) and sends data about your visit to Google, such as the pages viewed, the type of device and browser and your approximate location. Google is an American company, so this data may also be processed outside the European Union. If you decline or make no choice, Google Analytics is not loaded. Advertising features are switched off.

The website does keep two items of data in your browser's local storage (localStorage), so that your basket works:

• sfeerding-cart: the number of your basket, so that your basket is kept. We delete it after a completed order.
• sfeerding-cart-count: the number of products in your basket, for the figure at the top of the website.

Otherwise this data stays in your browser until you delete it yourself. When you pay, you go to Stripe's payment page. Stripe may place its own functional cookies there to process the payment securely and to prevent fraud. You can always delete cookies and stored data through your browser settings.

The website uses encrypted connections only (https). Only staff who handle your order or your question can access your data. If you think your data is not properly secured or that it is being misused, email us straight away at [email protected].

You have the right to:

• access your data;
• have incorrect data corrected;
• have your data erased, in so far as we are not legally required to keep it;
• have the processing restricted;
• object to processing based on our legitimate interest;
• receive your data in a commonly used format or have it transferred to another party.

Send your request to [email protected]. We will respond within one month. To prevent someone else from requesting your data, we may ask you to show that the request comes from you.

If you disagree with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl). We would like to hear from you first, so that we can resolve it.

If we change anything about how we process data, we will update this Privacy Policy. The current version is always on this page. This version was last updated on 12 November 2026. See also our Terms and Conditions.

This page is a translation of the original Dutch version.