Last updated: 7 May 2026 — V.O.F. PuraSangre · KvK 99714817

 

1. Data controller

The controller of personal data collected through www.purasangre.nl is:

-     Company name: V.O.F. PuraSangre

-     KvK number: 99714817 · EU VAT: NL869102722B01

-     Address: De Schans 16 28, 8231KH Lelystad, The Netherlands

-     Data protection email: purasangregourmet@purasangre.nl

-     Phone: +31 613 95 71 69

PuraSangre maintains a Record of Processing Activities in accordance with Article 30 of the GDPR, available upon request by the Autoriteit Persoonsgegevens (AP).

 

2. Personal data we collect

-     Identification and contact details: first name, surname, postal address, email address, phone number.

-     Order and billing data: billing address, purchase history, VAT number (B2B customers).

-     Delivery data: delivery address and special delivery instructions.

-     Payment data: payment method used. Card data is NOT stored by PuraSangre; it is managed exclusively by Stripe (PCI-DSS Level 1 certified).

-     Browsing data: IP address, device and browser type, pages visited, session duration, traffic source (via Google Analytics).

-     Advertising data: interaction with Meta (Facebook/Instagram) and Google Ads campaigns, via pixels and advertising cookies upon user consent.

-     Support data: content of communications via live chat, contact forms and email.

 

⚠ Users under 16 years of age PuraSangre does not intentionally collect or process personal data from users under the age of 16. The Dutch Uitvoeringswet AVG sets 16 as the minimum age for consent to personal data processing in the Netherlands. If you are a parent or guardian and become aware that your child has provided data to PuraSangre, please contact us immediately so that such data can be deleted.

 

3. Purposes and legal bases for processing

-     Management and execution of the purchase contract and shipping: performance of contract — Art. 6(1)(b) GDPR.

-     Communication of DHL tracking number: performance of contract — Art. 6(1)(b) GDPR.

-     Invoicing and compliance with tax and accounting obligations: legal obligation — Art. 6(1)(c) GDPR (retention for 7 years).

-     Customer service and claims management: legitimate interest — Art. 6(1)(f) GDPR.

-     Website analytics (Google Analytics): legitimate interest and/or consent — Art. 6(1)(a) and (f) GDPR.

-     Personalised advertising (Meta Ads, Google Ads): express consent — Art. 6(1)(a) GDPR, revocable at any time.

-     Order history in Shopify (after-sales service): legitimate interest — Art. 6(1)(f) GDPR.

-     Live chat and contact forms: performance of contract and legitimate interest — Art. 6(1)(b) and (f) GDPR.

 

4. Recipients — Data processors

PuraSangre shares data with the following data processors, bound by Data Processing Agreements (DPAs) compliant with the GDPR:

-     Shopify International Ltd. — e-commerce platform (DPA: help.shopify.com)

-     Stripe Payments Europe, Ltd. — payment processing (DPA: stripe.com/privacy)

-     DHL Express — logistics and transport

-     Google LLC — Google Analytics and Google Ads (DPA: policies.google.com)

-     Meta Platforms Ireland Ltd. — Facebook and Instagram Ads (DPA: facebook.com/privacy)

-     Live chat provider integrated at www.purasangre.nl

PuraSangre does NOT sell, transfer or rent personal data to third parties for those parties' own commercial purposes.

 

5. International data transfers

Some providers (Shopify, Stripe, Google, Meta) may process data outside the European Economic Area (EEA). PuraSangre ensures that such transfers are made under adequate protection mechanisms recognised by the European Commission: Standard Contractual Clauses (SCCs) or other equivalent mechanisms currently in force.

 

6. Data retention periods

-     Order and invoice data: 7 years (Dutch tax and accounting obligation).

-     Registered customer data: for the duration of the account and 2 additional years after closure.

-     Support and claims data: 3 years from closure of the matter.

-     Browsing and advertising data (Google Analytics, Meta Pixel): maximum 26 months (per Google's and Meta's retention policies).

 

7. Your rights as a data subject

Under the GDPR, you have the right to:

-     Access your personal data processed by PuraSangre.

-     Rectify inaccurate or incomplete data.

-     Request erasure of your data ('right to be forgotten'), except where there is a legal obligation to retain it.

-     Object to processing based on PuraSangre's legitimate interest.

-     Request restriction of processing (Art. 18 GDPR).

-     Request portability of your data in a structured format.

-     Withdraw consent at any time, without retroactive effect.

To exercise any of these rights, send an email to purasangregourmet@purasangre.nl stating the right you wish to exercise and attaching a copy of your identity document. You will receive a response within a maximum of 30 days.

 

8. Cookie policy

PuraSangre uses necessary, analytical and advertising cookies. When you first visit www.purasangre.nl, a consent banner will allow you to accept, reject or customise cookie use. The full Cookie Policy, including the detailed table of all cookies used, is available in the Legal Notice section of this website.

 

9. Complaints to the supervisory authority

If you believe the processing of your personal data does not comply with the GDPR, you have the right to lodge a complaint with the competent data protection authority in the Netherlands:

-     Autoriteit Persoonsgegevens (AP)

-     Website: www.autoriteitpersoonsgegevens.nl

-     Email: autoriteitpersoonsgegevens@autoriteitpersoonsgegevens.nl

 

V.O.F. PuraSangre · KvK 99714817 · NL869102722B01 · De Schans 16 28, 8231KH Lelystad, The Netherlands · purasangregourmet@purasangre.nl