Preamble

This Privacy Policy (“Policy”) articulates the commitment of KallisToys B.V. (“the Vendor”, “we”, “us”, “our”) to safeguard the privacy and protection of personal data collected or processed through our digital platforms, including but not limited to our website, mobile applications, and online services. This Policy is crafted in strict adherence to the General Data Protection Regulation (GDPR) and aims to provide transparency regarding our data processing practices.

Article 1: Scope of Data Collection

1.1. We collect personal data that is essential for the provision of our services, enhancement of user experience, and for commercial purposes. This includes, but is not limited to, user identification data, contact information, transactional data, and data derived from the use of cookies and similar technologies.

1.2. Personal data is collected through various means such as user registrations, transactions, voluntary submissions, and automated tracking mechanisms.

Article 2: Purpose and Legal Basis for Processing

2.1. Personal data is processed for specific purposes including service provision, user account management, order processing, customer support, personalized user experience, and marketing communications, in alignment with the consent provided by the user or based on the legitimate interest of the Vendor.

2.2. The legal basis for processing personal data under GDPR includes user consent, contractual necessity, compliance with legal obligations, protection of vital interests, and the legitimate interests pursued by the Vendor or a third party.

Article 3: Third-Party Data Sharing and International Transfers

3.1. Personal data may be shared with third-party service providers for purposes such as payment processing, data analytics, advertising, and service enhancements, under strict data protection agreements.

3.2. International transfers of personal data are conducted in compliance with GDPR requirements, ensuring adequate levels of data protection.

Article 4: User Rights Under GDPR

4.1. Users have the right to access, rectify, erase, restrict processing of, object to the processing of, and request data portability of their personal data.

4.2. Users have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

4.3. Users have the right to lodge a complaint with a supervisory authority concerning the processing of their personal data.

Article 5: Data Security and Retention

5.1. We implement robust technical and organizational measures to ensure the security of personal data, protecting it against unauthorized or unlawful processing, accidental loss, destruction, or damage.

5.2. Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, in accordance with our data retention policy and GDPR requirements.

Article 6: Policy Updates and User Consent

6.1. This Policy may be updated periodically to reflect changes in our data processing practices or regulatory requirements. Users will be notified of significant changes through our digital platforms.

6.2. By using our services, users consent to the collection and use of personal data as outlined in this Policy. Users are encouraged to review this Policy regularly to stay informed of our privacy practices.

Codicil

This Privacy Policy is designed to uphold the principles of transparency, accountability, and user empowerment, in compliance with GDPR. We are committed to protecting the privacy and security of our users’ personal data and to processing it in a lawful, fair, and transparent manner.