Privacy Policy

Privacy Policy

About our privacy policy

Atelier Steps cares a lot about your privacy. We therefore only process data that we need for (the

improve) our services and handle the information we collect about you and your use of

We have collected your data for commercial purposes.

third parties.

This privacy policy applies to the use of the website and the services provided by Atelier

Steps. The effective date for the validity of these terms and conditions is 12/12/2025, with the publication of a new

version, the validity of all previous versions expires. This privacy policy describes what information we collect about you.

are collected, what this data is used for and with whom and under what conditions this data is shared

data may be shared with third parties. We also explain to you how we process your data.

store and how we protect your data against misuse and what rights you have with regard to your

personal data provided to us.

If you have any questions about our privacy policy, please contact our privacy officer, you

You will find the contact details at the end of our privacy policy.

About data processing

Below you can read how we process your data, where we store it (or have it stored), which

security techniques we use and who has access to the data.

WooCommerce

Our online store is developed with WooCommerce software. Personal data that you provide for our

services provided to us are shared with this party. WooCommerce has access to your

data to provide us with (technical) support, they will never use your data for any other purpose

purpose. WooCommerce is obliged, based on the agreement we have concluded with them, to provide appropriate

to take security measures. These security measures consist of the application of SSL encryption and

a strong password policy. WooCommerce uses cookies to collect technical information

with regard to your use of the software, no personal data is collected and/or stored.

WooCommerce reserves the right to share collected data within its own group to

to further improve services.

WooCommerce hosting

Our online store was developed with WooCommerce software, we chose WooCommerce for our web hosting.

MyDomain. Personal data that you provide to us for the purpose of our services will be

shared with this party. MyDomain has access to your data to provide us with (technical) support,

They will never use your data for any other purpose. MyDomain is based on the agreement that we

have entered into an agreement with them and are obliged to take appropriate security measures. These security measures

consist of the application of SSL encryption and a strong password policy. Backups are performed regularly.

created to prevent data loss.

MyDomain

We purchase web hosting and email services from MijnDomein. MijnDomein processes personal data on behalf of

us and does not use your data for its own purposes. However, this party may collect metadata about the

use of the services. These are not personal data. MijnDomein has appropriate technical and

organizational measures taken to prevent the loss and unauthorized use of your personal data

prevent. MyDomain is obligated to maintain confidentiality under the confidentiality agreement.

Outlook

We use Outlook services for our regular business email traffic. This party has

appropriate technical and organizational measures taken to prevent misuse, loss and corruption of your and our data

To prevent data loss as much as possible. Hotmail does not have access to our mailbox, and we treat all our email correspondence confidentially.

Payment processors

Mollie

We use the platform of

Mollie. Mollie processes your name, address and residence details and your payment details such as your bank account or

credit card number. Mollie has taken appropriate technical and organizational measures to protect your

to protect personal data. Mollie reserves the right to use your data to

to further improve services and, in that context, to share (anonymised) data with third parties.

All the above mentioned guarantees regarding the protection of your personal data are also

applicable to the parts of Mollie's services for which they engage third parties. Mollie stores your

data for no longer than is permitted by law.

Reviews

Shipping and logistics

PostNL

When you place an order with us, it is our responsibility to have your package delivered to you. We use

PostNL's services for carrying out deliveries. For this purpose, it is necessary that we have your name,

Share address and residence details with PostNL. PostNL only uses this data for the purpose of

execution of the agreement. In the event that PostNL engages subcontractors, PostNL will share your data

also available to these parties.

DHL

When you place an order with us, it is our responsibility to have your package delivered to you. We use

DHL's services for carrying out deliveries. For this purpose, it is necessary that we have your name and address

and place of residence information with DHL. DHL only uses this information for the purpose of carrying out the

agreement. In the event that DHL uses subcontractors, DHL will also provide your data to these parties.

order.

Purpose of data processing

General purpose of the processing

We use your data solely for the purpose of providing our services. This means that the purpose of the

processing is always directly related to the order you place. We do not use your data for

(targeted) marketing. If you share data with us and we use this data for purposes other than your

request - to contact you at a later time, we will ask for your explicit permission to do so. Your

data will not be shared with third parties, other than for accounting and other administrative purposes

to meet obligations. These third parties are all bound by confidentiality under the agreement

between them and us or an oath or legal obligation.

Automatically collected data

Data automatically collected by our website is processed for the purpose of our

to further improve services. This data (for example your IP address, web browser and

operating system) are not personal data.

Cooperation with tax and criminal investigations

In certain cases, Atelier Steps may be required to do so on the basis of a legal obligation

sharing your data in connection with tax or criminal investigations by government authorities. In such a

In this case we are forced to share your data, but we will do so within the possibilities that the law offers us.

to oppose it.

Retention periods

We store your data for as long as you are our client. This means that we store your client profile until you

Indicate that you no longer wish to use our services. If you inform us of this, we will

also consider it as a request to be forgotten. This also means that we will not keep your data for longer than two years.

from the last point of contact or transaction, unless there is a legal justification for this.

basis. Based on applicable administrative obligations, we must invoice you

(personal) data to be stored, so we will store this data for as long as the applicable term runs.

However, employees no longer have access to your client profile and documents that we receive as a result

have produced your order.

Your rights

Under applicable Dutch and European legislation, you as a data subject have certain rights with

regarding the personal data processed by or on behalf of us. We explain below which

these rights are and how you can exercise these rights. In principle, we send to prevent abuse

transcripts and copies of your data only to your email address already known to us. In the event that you

If you wish to receive data at a different email address or, for example, by post, we will ask you to

legitimize. We keep a record of completed requests, in the case of a request to be forgotten

We administer anonymized data. You will receive all transcripts and copies of data in the

machine-readable data format that we use within our systems. You have the right at any time to request

to file a complaint with the Dutch Data Protection Authority if you suspect that we have processed your personal data in a

use wrong way.

Right of inspection

You always have the right to access the data that we (have) process and that relate to your person or

can be traced back to this. You can submit a request to that effect to our contact person for

Privacy matters. You will receive a response to your request within 30 days. If your request is granted,

We will send you a copy of all data with an overview of the processors to the email address known to us.

who have this data, stating the category under which we have this data

stored.

Right of rectification

You always have the right to access the data that we (have) process and that relate to your person or

that can be traced back to this, to have it adjusted. You can submit a request to this effect to our contact person

for privacy matters. You will receive a response to your request within 30 days. If your request is granted

We will send you a confirmation that the data has been changed to the email address we have on file for you.

Right to restriction of processing

You always have the right to request the data that we (have) process that relates to your person or that is used for that purpose.

traceable, to limit. You can submit a request to that effect to our contact person for

Privacy matters. You will receive a response to your request within 30 days. If your request is granted,

We will send you a confirmation to the email address we have on file that the data will not be processed until you lift the restriction.

take longer to process.

Right to portability

You always have the right to access the data that we (have) process and that relate to your person or

traceable to this, to have it carried out by another party. You can submit a request to that effect to

our contact person for privacy matters. You will then receive a response to your request within 30 days. If your

If your request is granted, we will send you copies of all data to the email address we have on file.

about you that we have processed or that has been processed on our behalf by other processors or third parties. To all

In such a case we will most likely no longer be able to continue providing services because the security

linking of data files can then no longer be guaranteed.

Right to object and other rights

In certain cases, you have the right to object to the processing of your personal data.

by or on behalf of Atelier Steps. If you object, we will immediately stop processing the data.

pending the handling of your objection. If your objection is justified, we will send you transcripts and/or copies

of data that we (have) process available to you and then permanently cease processing. You

also has the right not to be subject to automated individual decision-making or profiling.

subject. We do not process your data in such a way that this right applies. Are you from

If you believe this to be the case, please contact our privacy officer.

Cookies

Third-party cookies

In the event that third party software solutions use cookies, this is stated in this

privacy statement.

Changes to the Privacy Policy

We reserve the right to change our privacy policy at any time. However, you will always find the most up-to-date information on this page.

recent version. If the new privacy policy has consequences for the way in which we already collect data,

with regard to your processing, we will inform you of this by email.

Contact details

Atelier Steps

Lankforst 3101 6538JH Nijmegen Netherlands E info@ateliersteps.nl