Privacy Policy

Personal data is processed via our webshop. Zelesta attaches great importance to the careful handling of personal data. In this privacy policy, we explain which personal data we process, for what purposes, on what legal bases, with whom we share data, how long we retain data, and what rights you have.

In our processing, we comply with the General Data Protection Regulation (GDPR), the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data, and, for cookies and electronic communications, the applicable Belgian e-privacy rules. This means, among other things, that we only process personal data for clear and legitimate purposes, do not process more data than necessary, take appropriate security measures, and respect your privacy rights.

Data Controller

Ecom Nomad B.V., trading as Zelesta, located at Amersfoortsestraat 65, 3769 AE Soesterberg, registered with the Chamber of Commerce under number 83117083, is the data controller within the meaning of Art. 4(7) GDPR for the processing activities described in this privacy policy. For privacy-related questions, you can contact us at info@zelesta.nl.

Use of Personal Data

We process personal data that you provide to us yourself, data generated when using our webshop, and data necessary for ordering, payment, delivery, return processing, customer service, administration, security, analytics and marketing.

We may process the following data, among others: name, address, place of residence, email address, phone number, invoice address, delivery address, order details, order number, payment status, return details, communication data, IP address, cookie ID, online identifiers, device data and website behaviour.

Overview of Processing Activities

Order, payment and delivery

Data: name, address, email address, phone number, invoice address, delivery address, order details, payment status and order number. Purpose: processing and delivering your order, payment and any returns. Legal basis: performance of the agreement and legal obligations. Recipients: payment providers, fulfilment partners, delivery services, return platforms, customer service and IT suppliers. Retention period: as long as necessary for performance, warranty, complaint handling and evidentiary purposes; invoice and payment data generally for 10 years for tax administration purposes.

Customer service and contact

Data: name, contact details, order details and the content of your message. Purpose: answering questions, handling complaints and providing support with orders or returns. Legal basis: performance of the agreement or legitimate interest in good customer service. Retention period: as long as necessary for responding, follow-up, complaint handling and evidentiary purposes.

Newsletter and email marketing

Data: email address, name if provided, subscription status, unsubscribe status and interaction with messages where permitted. Purpose: sending commercial messages about Zelesta's products and services. Legal basis: consent or, for existing customers, the statutory exception for the company's own similar products or services where applicable. Retention period: until unsubscription, withdrawal of consent, or as long as the existing customer relationship justifies it.

Website analytics

Data: IP address, cookie ID, online identifiers, device data, browser data and usage data. Purpose: analysing and improving the webshop. Legal basis: consent, unless analytics is configured in a privacy-friendly manner and no consent is required. Retention period: in accordance with cookie settings and the cookie policy.

Advertising, retargeting and social media

Data: cookie ID, online identifiers, website behaviour, advertising interactions and any hashed customer data if customer audiences are used. Purpose: displaying, measuring and optimising advertisements. Legal basis: consent where legally required. Retention period: in accordance with cookie settings, advertising platforms and the cookie policy.

Administration and legal obligations

Data: invoice details, payment details, order details and correspondence where necessary. Purpose: administration, tax record-keeping obligations, legal obligations and evidentiary purposes. Legal basis: legal obligation and legitimate interest. Retention period: generally 10 years for tax data, unless a longer retention period is necessary due to a dispute or legal obligation.

Processing Orders

When you place an order with us, we process the personal data necessary to confirm, pay for, deliver, return and administratively process the order. Where necessary, we share this data with parties involved in payment, fulfilment, delivery, return processing, customer service, administration and IT support.

Advertising and Newsletter

We may send you commercial messages if you have given your consent. In addition, we may send existing customers emails about our own similar products or services, provided we obtained your email address directly in connection with a purchase, you were given the opportunity to object to this free of charge and easily when your email address was collected, and every email includes a clear option to unsubscribe. You can unsubscribe or object to direct marketing at any time.

Contact Form and Newsletter

If you contact us, we process the data you provide in order to handle your question or request. If you subscribe to the newsletter, we use your email address to send you the newsletter. You can unsubscribe at any time via the unsubscribe link in the newsletter.

Publication

We do not publish your customer data.

Advertisements

Our webshop may use advertising and tracking technologies, such as pixels or third-party advertising cookies. Advertising and tracking cookies, pixels and similar technologies are only placed or read after you have given your consent. More information can be found in the cookie policy and cookie settings.

Disclosure to Third Parties

We may share personal data with parties necessary for the execution of your order, payment, delivery, customer service, return processing, administration, IT support, analytics, security, fraud prevention and marketing. We only do so to the extent necessary and on the basis of a valid legal basis, such as performance of the agreement, a legal obligation, legitimate interest or consent where required.

We conclude a data processing agreement with parties that process personal data on our behalf. Where a party is an independent data controller, we make appropriate arrangements regarding the protection of personal data. Social media platforms and advertising partners may also process personal data as independent data controllers in accordance with their own privacy terms.

International Transfers

Some suppliers or advertising partners may process personal data outside the European Economic Area. In that case, we ensure an adequate level of protection, for example based on an adequacy decision, standard contractual clauses, or other appropriate safeguards within the meaning of the GDPR.

Cookies

Our webshop uses cookies and similar technologies. Strictly necessary cookies are required for the website to function properly and may be placed without consent. For non-essential cookies, such as certain analytical cookies, preference cookies, advertising cookies and tracking cookies, we request your active consent in advance via our cookie banner.

Non-essential cookies are only placed after you have given your consent. Continued use of the website does not constitute consent. You can change or withdraw your consent at any time via the 'Change cookie settings' link at the bottom of every page. Withdrawing consent is just as easy as giving it.

More information about the cookies used, the parties involved, the purposes, retention periods, and the ability to change or withdraw consent can be found in the cookie policy and/or cookie settings.

Google Analytics

We may use Google Analytics to gain insight into the use of our webshop. To the extent this involves placing or reading cookies or similar technologies that are not strictly necessary, we request your consent in advance via the cookie banner. If Google Analytics is linked to advertising, remarketing or campaign measurement purposes, this only occurs after you have given your consent.

Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access and unauthorised modification. This includes access restrictions, secure connections, appropriate authorisations, supplier agreements, logging where appropriate, and periodic review of security measures.

Retention Periods

We do not retain personal data longer than necessary for the purpose for which it was collected, unless we are legally required to retain data for longer. We generally retain invoice, payment and accounting data for 10 years based on Belgian tax and accounting record-keeping obligations. We retain order, delivery, return, warranty and customer service data as long as necessary for performance of the agreement, statutory warranty, complaint handling and evidentiary purposes, generally up to 3 years after completion of the order or last customer contact, unless a longer retention period is necessary due to a dispute, legal obligation or tax record-keeping obligation. We retain newsletter data until you unsubscribe or withdraw your consent. We retain cookie data in accordance with the retention periods set out in the cookie policy or cookie settings.

Third-Party Websites

This privacy statement does not apply to third-party websites accessible via links or buttons on our webshop. We are not responsible for how these third parties handle personal data. Please review the privacy statement of these third parties before using their websites or services.

Changes to This Privacy Statement

We may amend this privacy statement. The most current version is available on our website. In the event of material changes, we will inform you in an appropriate manner, for example via our website or by email where appropriate.

Your Rights

Insofar as provided for by the GDPR, you have the right to access, rectification, erasure, restriction of processing, data portability and objection to processing. You also have the right to withdraw previously given consent. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

You have the right at all times to object to the use of your personal data for direct marketing. Upon receipt of your objection, we will stop using your data for this purpose.

You can send your request to info@zelesta.nl. To prevent misuse, we may ask you to adequately identify yourself. We generally respond to your request within one month. In certain cases, we may extend this period in accordance with the GDPR.

Data Protection Authority

If you have a complaint about the processing of your personal data, we are happy to help. You can contact us at info@zelesta.nl. You also have the right to lodge a complaint with the Belgian Data Protection Authority (GBA/APD), Drukpersstraat 35, 1000 Brussels, contact@apd-gba.be.

For its webshop and marketing activities, Zelesta works with various categories of service providers, including payment providers, delivery services, fulfilment partners, return platforms, customer service and IT suppliers, email marketing software, analytics platforms and advertising platforms.

For advertising, retargeting and campaign measurement purposes, Zelesta may, depending on your cookie settings, work with parties including Alphabet/Google, Meta/Facebook/Instagram and DPG Media.

Non-essential cookies, pixels and similar tracking technologies are only used after you have given your consent.