Privacy Statement

1. About This Privacy Policy
: Due Amanti BV respects your privacy and processes personal data in accordance with the GDPR and the Belgian Law of July 30, 2018. In this policy, you can read about what data we collect, why, for how long, and what rights you have.

2. Data Controller
: Due Amanti BV, Oostendestraat 15, 8620 Nieuwpoort, Belgium
Email: webshop@dueamanti.be • Tel.: +32 (0) 58 79 02 60
Showroom: Krommebeekpark 26, 8800 Roeselare, Belgium.

3. What personal data?
Identification (name, address, email, phone), purchase and loyalty card data, payment information (via Mollie), communications (email/form), newsletter (Mailchimp), B2B contact (company name, VAT number, contact person), technical data (IP address, cookies—see cookie policy). No special categories.

4. Purposes
: (1) online store orders and deliveries, (2) loyalty card, (3) newsletter/marketing (Mailchimp), (4) customer service, (5) B2B relationships, (6) billing/legal compliance, (7) website optimization (cookies), (8) securing our forms against spam and automated abuse. No automated decision-making or profiling.

5. Legal Bases
: Contract, legal obligation, legitimate interest (service/marketing/IT), consent (newsletter). You can withdraw your consent via the unsubscribe link or by emailing marketing@dueamanti.be.

6. Retention
periods Customer data: 7 years (accounting). Newsletter: until unsubscribed. B2B: for the duration of the business relationship. Cookies: see cookie policy. Data is subsequently deleted or anonymized.

7. Sharing with Third Parties (Processors)
Only what is necessary, under a contract: Mollie (payments), Mailchimp (email), Midelco (hosting/online store), Cloudflare (form security), logistics (delivery), accountant. Not sold or rented. Within the EEA or in accordance with the EU–US Data Privacy Framework.

8. Security
: SSL/HTTPS, access control, strong passwords/2FA where relevant, updates, and logging.
Our forms are secured with Cloudflare Turnstile, which checks in the background whether a visitor is a human or a bot. You will not be shown a puzzle or image. To do this, Cloudflare processes limited technical data from your browser (IP address, TLS fingerprint, User-Agent, and the site key), solely to detect and block bots—not to identify, profile, or track you. Legal basis: our legitimate interest in preventing spam and abuse. More information is available in Cloudflare’s Turnstile Privacy Addendum.

9. Your Rights
: Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Exercise these rights via marketing@dueamanti.be. Response within one month.

10. Complaints
Data Protection Authority (GBA), Drukpersstraat 35, 1000 Brussels, Belgium • +32 (0)2 274 48 00 • contact@apd-gba.be • gegevensbeschermingsautoriteit.be.

11. Cookies
See our separate cookie policy.

12. Changes
We may update this policy; the most recent version is always available on our website.