Privacy Policy

The data controller for the processing of personal data is:

MR Tradingservice B.V.

Vlasveen 28-6, 9301 PT Roden, Netherlands

Chamber of Commerce: 91945488 · VAT: NL865826584B01

Email: contact@spankmachine.com · Phone: +31 50 783 69 69

We process the following categories of personal data when you place an order, create an account, contact us or use our website:

• First and last name
• Delivery and billing address
• Email address
• Phone number (optional)
• Company name and VAT number (only for business orders)
• Order history and invoice details
• Payment information (processed by Mollie — we do not store card details)
• IP address and technical data of your visit (functional cookies)

We process your personal data for the following purposes, on the basis stated:

• Performing the sales agreement (basis: performance of contract, art. 6(1)(b) GDPR)
• Processing payments (basis: performance of contract)
• Shipping your order (basis: performance of contract)
• Providing customer service (basis: performance of contract and legitimate interest)
• Complying with legal obligations such as tax retention (basis: legal obligation, art. 6(1)(c) GDPR)
• Optionally creating a customer account (basis: consent, art. 6(1)(a) GDPR)

We share your personal data with third parties only insofar as necessary for performance of the agreement or to comply with a legal obligation. We have data processing agreements with all of these processors in accordance with GDPR.

• Mollie B.V. (Amsterdam, Netherlands) — for processing payments
• DPD and FedEx — for shipping (name, address, email, phone for tracking)
• Our fulfilment supplier — for packing and shipping orders
• Klarna Bank AB and Riverty (only when pay-later is chosen)

If we share your data with parties outside the European Economic Area (EEA), this is done exclusively on the basis of the EU Commission-approved Standard Contractual Clauses (SCCs) or other appropriate safeguards as provided for in the GDPR.

We do not retain your data longer than necessary for the purpose for which it was collected:

• Order and invoice data: 7 years (statutory tax retention)
• Customer account data: while the account is active, up to 2 years after last activity
• Contact form correspondence: up to 2 years after last contact
• Functional cookies: maximum the duration of your browser session or as stated in our cookie policy

We take appropriate technical and organisational measures to secure your personal data against loss or unlawful processing. Our website uses an SSL certificate (HTTPS) and payments are exclusively processed via PCI-DSS certified payment provider Mollie.

Under the GDPR you have the following rights:

• Right of access to your personal data
• Right to rectification of incorrect data
• Right to erasure ('right to be forgotten')
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

To exercise your rights you can submit a request via contact@spankmachine.com. We respond within one month of receipt of your request. To verify your identity we may ask you to provide additional information.

If you believe we are not handling your personal data carefully, you may lodge a complaint with the Dutch Data Protection Authority via https://autoriteitpersoonsgegevens.nl/. We appreciate it if you contact us first so we can find a solution together.

Our website uses functional cookies necessary for the operation of the website. We currently do not use any analytics, marketing or tracking cookies. For more information please refer to our cookie policy at /cookies.

We reserve the right to amend this privacy policy. The most current version is always available on our website. We recommend reviewing this page periodically.