Privacy Statement

Version 2026

At ParfuMaria, we highly value your privacy. We only process personal data that is necessary for providing our services and we handle this information with care and confidentiality. In this Privacy Statement, we explain which personal data we process, why we process it, how we protect it and what your rights are.

Table of Contents

1. Who is responsible for processing your personal data?
2. Which personal data do we process?
3. Why do we process your personal data?
4. Legal basis for processing
5. Sharing your personal data
6. International transfers of personal data
7. Retention periods
8. Cookies
9. Newsletter
10. Security of your personal data
11. Your privacy rights
12. Changes to this Privacy Statement
13. Contact

Article 1. Who is responsible for processing your personal data?

ParfuMaria is the data controller responsible for the processing of personal data as described in this Privacy Statement.

ParfuMaria processes personal data only to the extent necessary for providing its services, fulfilling contractual obligations, complying with legal obligations and improving its services.

If you have any questions regarding this Privacy Statement or the processing of your personal data, you may contact ParfuMaria using the contact details published on the Website.

Article 2. Which personal data do we process?

Depending on how you use our Website or services, ParfuMaria may process the following categories of personal data:

• first and last name;
• company name (where applicable);
• billing and delivery address;
• telephone number;
• e-mail address;
• payment details;
• order history;
• correspondence by e-mail, WhatsApp or via the contact form;
• information provided when booking a Private Shopping appointment;
• information provided when subscribing to our newsletter;
• information required for handling complaints, returns or warranty claims.

ParfuMaria does not process personal data that is not necessary for the purposes described in this Privacy Statement.
 

Article 3. Why do we process your personal data?

ParfuMaria processes your personal data solely for purposes that are necessary to provide its services in a professional and efficient manner.

Your personal data may be used for, among other things:

• processing and delivering your order;
• processing payments;
• sending order confirmations, invoices and shipping information;
• responding to your questions and requests;
• providing customer service;
• handling returns, complaints and warranty claims;
• scheduling and managing Private Shopping appointments;
• sending newsletters, where you have subscribed to receive them;
• sending review requests following a completed order;
• complying with legal obligations;
• protecting our Website, systems and services;
• improving our services where necessary for the proper operation of our Website and business activities.

ParfuMaria does not sell your personal data to third parties.

Article 4. Legal basis for processing

ParfuMaria processes personal data only where there is a lawful basis for doing so under the General Data Protection Regulation (GDPR).

Depending on the circumstances, your personal data may be processed on one or more of the following legal grounds:

• the performance of a contract;
• compliance with a legal obligation;
• your consent, for example when subscribing to our newsletter;
• the legitimate interests of ParfuMaria, such as improving our services, preventing fraud, protecting our systems, handling complaints and safeguarding our business operations, while always carefully balancing these interests against your privacy rights.

Where the processing of personal data is based on your consent, you may withdraw that consent at any time.

Withdrawal of your consent does not affect the lawfulness of any processing carried out before the consent was withdrawn.
 

Article 5. Sharing your personal data

ParfuMaria shares your personal data with third parties only where this is necessary for the performance of the Agreement, the provision of our services or compliance with a legal obligation.

Depending on the services you use, your personal data may be shared with, among others:

• CCV Shop, for processing orders;
• payment service providers, including PayPal, Klarna, iDEAL, Bancontact and credit card providers, for processing payments;
• carriers, including PostNL and DHL, for delivering your order;
• Mailchimp, for sending newsletters to subscribers;
• Salonized, for scheduling and managing Private Shopping appointments;
• service providers acting on behalf of ParfuMaria for sending review requests following a completed order;
• IT service providers and hosting providers, where necessary for the operation, maintenance and security of our systems;
• government authorities or supervisory bodies where ParfuMaria is legally required to do so.

ParfuMaria does not sell your personal data to third parties and only shares personal data that is necessary for the relevant purpose.

Where a third party processes personal data on behalf of ParfuMaria, ParfuMaria ensures that, where required by law, an appropriate data processing agreement has been concluded or that other suitable contractual safeguards are in place.

Article 6. International transfers of personal data

Some of the service providers used by ParfuMaria may process personal data outside the European Economic Area (EEA).

This may include, among others, Mailchimp, Meta (Instagram/Facebook) and certain international payment service providers.

Where personal data is transferred outside the EEA, ParfuMaria ensures that such transfers take place in accordance with the requirements of the General Data Protection Regulation (GDPR).

Where personal data is transferred to a country that is not subject to an adequacy decision by the European Commission, appropriate safeguards will be implemented, including the use of the European Commission's Standard Contractual Clauses (SCCs) or any other lawful transfer mechanism permitted under the GDPR.

ParfuMaria carefully selects its service providers and requires them to implement appropriate measures to protect personal data.
 

Article 7. Retention periods

ParfuMaria does not retain personal data for longer than necessary for the purposes for which it was collected or processed, unless a longer retention period is required or permitted by law.

The retention period depends on the purpose for which the personal data was collected. As a general rule:

• personal data required for the performance of an Agreement is retained for as long as necessary to fulfil that Agreement;
• invoices and administrative records are retained for the statutory retention period applicable under Dutch law;
• personal data provided for newsletter subscriptions is retained until the subscriber unsubscribes;
• correspondence relating to enquiries, complaints, warranty claims or returns is retained no longer than necessary for proper handling and to comply with any applicable legal obligations.

After the applicable retention period has expired, personal data will be securely deleted or anonymised, unless ParfuMaria is legally required to retain it for a longer period.

Article 8. Cookies

ParfuMaria uses cookies and similar technologies to ensure the proper functioning of the Website, improve the user experience and enable certain functionalities.

When you first visit our Website, you will be informed about our use of cookies and, where required by law, your consent will be requested before non-essential cookies are placed.

The Website may use, among others:

• Functional cookies, which are necessary for the proper operation of the Website and the ordering process;
• Preference cookies, which remember your selected preferences;
• Third-party cookies, where you have given your consent or where such cookies are necessary for the operation of third-party services integrated into the Website.

You can delete or restrict cookies through your browser settings. Please note that disabling cookies may affect the functionality of certain parts of the Website.

Further information about the cookies used by ParfuMaria and your cookie preferences can be found in the Cookie Banner and, where applicable, the Cookie Policy published on the Website.

Article 9. Newsletter

ParfuMaria sends newsletters only to individuals who have expressly subscribed to receive them.

Every newsletter contains an unsubscribe link allowing you to withdraw your subscription easily at any time.

Your e-mail address will be used solely for sending newsletters and related communications.

Article 10. Security of your personal data

ParfuMaria has implemented appropriate technical and organisational measures to protect personal data against loss, unauthorised access, unauthorised disclosure, alteration or destruction.

Personal data is accessible only to persons who require access in order to perform their duties.

Although ParfuMaria takes appropriate security measures, no method of electronic transmission or digital storage can be guaranteed to be completely secure. ParfuMaria continuously evaluates and improves its security measures where appropriate.

Article 11. Your privacy rights

Subject to applicable law, you have the right to:

• request access to your personal data;
• request correction of inaccurate personal data;
• request deletion of your personal data;
• request restriction of the processing of your personal data;
• object to the processing of your personal data;
• receive your personal data in a structured, commonly used and machine-readable format or request its transfer to another organisation (data portability);
• withdraw your consent at any time where the processing is based on your consent.

If you wish to exercise any of these rights, you may contact ParfuMaria using the contact details published on the Website.

ParfuMaria will handle your request carefully and respond within the period prescribed by applicable law.

If you believe that ParfuMaria is processing your personal data in breach of applicable privacy legislation, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Article 12. Changes to this Privacy Statement

ParfuMaria reserves the right to amend this Privacy Statement.

The most recent version will always be published on the Website. We recommend reviewing this Privacy Statement regularly to stay informed of any updates.

Where a material change affects the way in which ParfuMaria processes personal data, affected individuals will be informed where required by law.

Article 13. Contact

If you have any questions regarding this Privacy Statement or the way in which ParfuMaria processes your personal data, please contact us using the contact details published on the Website.

ParfuMaria will handle your question or request carefully and respond as soon as reasonably practicable.

Last updated: July 2026