P.G.C. Hajenius B.V., Chamber of Commerce number (KvK) 33184094 (“we” or “us”), is responsible for P.G.C. Hajenius, including the online store https://www.hajenius.com/nl/webshop (the “Webshop”), and is the seller of the products available in the Webshop. This privacy statement describes how P.G.C. Hajenius B.V. processes your personal data when you use our Webshop.

1. Data Controller

The legal entity responsible for processing your personal data is:

P.G.C. Hajenius B.V.
Chamber of Commerce number (KvK): 33184094
Rokin 96
1012 KZ Amsterdam
The Netherlands
Email: info@hajenius.com
Phone: +31 20 623 74 94

2. Contact Details

If you have any questions about how we process your personal data, you can contact us by phone at +31 20 623 74 94 or by email at info@hajenius.com.

3. Purpose and Legal Basis for Processing Personal Data

To order products available in the Webshop, you are required to provide the following information: your name, address, email address, phone number, credit card details, and details related to the ordered products.

The personal data you provide is processed by us for the purpose of delivering the products you ordered, including authorizing your payment.

Additionally, your personal data is processed for the following purposes: to comply with legal and contractual obligations arising from applicable data protection laws and standards imposed by payment method issuers, to establish and maintain technical and operational security measures, to process your requests and complaints, to investigate and report suspected breaches of personal data, to establish, exercise, or defend legal claims, to handle inspections and inquiries from regulators, to resolve disputes between data providers and third parties, and finally, to analyze product sales to improve our marketing and sales.

The legal basis for processing your personal data is one or more of the following:

• Processing is necessary for the performance of a contract in accordance with Article 6(1)(b) of the General Data Protection Regulation (GDPR).
• Processing is necessary to comply with a legal obligation in accordance with Article 6(1)(c) GDPR.
• Processing is necessary for the purposes of our legitimate interests in accordance with Article 6(1)(f) GDPR.

We collect your personal data, data from the institution that issued your payment method (for payment authorization), and from other entities within the STG Group (in case of a complaint).

4. Recipients

The data we receive is shared with external suppliers, including processors and third parties that host and support our website, the institution that issued your payment method, the financial institution we use to process payments, and other entities within the STG Group involved in handling complaints.

Your payment details are not stored permanently but are securely transmitted to the issuer of your payment method and the payment beneficiary.

5. Retention Periods

We retain your personal data only for the purposes described in this privacy statement and no longer than 5 years, unless a longer retention period is necessary for the establishment, exercise, or defense of legal claims.

6. Your Rights

Subject to the requirements and exceptions under applicable data protection laws, you have the following rights:

• The right to access, correct, or delete your data.
• The right to object to the processing of your personal data based on our legitimate interests as described below.
• The right to request restriction of processing of your personal data.
• The right to request a copy of your personal data in a commonly used format.
• The right to lodge a complaint with the Dutch Data Protection Authority. Contact details can be found here: https://autoriteitpersoonsgegevens.nl/nl/zelf-doen/privacyrechten/klacht-indienen-bij-de-ap

You can exercise these rights by contacting P.G.C. Hajenius B.V. via email at info@hajenius.com or by phone at +31 20 623 74 94.

7. Right to Object to Processing Based on Legitimate Interests

Based on your personal circumstances, you have the right to object at any time to the processing of your personal data based on our or a third party’s legitimate interests in accordance with Article 6(1)(f) GDPR. If you object, we will no longer process your personal data unless we demonstrate that our interests outweigh your interests, rights, and freedoms, or where processing is necessary for the establishment, exercise, or defense of legal claims.