Privacy policy Lockpickings.nl

1. Who is responsible for processing your data?

Lockpickings.nl is responsible for processing your personal data. If you have any questions after reading this privacy policy or wish to contact us, you can do so via our customer service.

2. What data do we collect?

When you visit our website or use our services, we may collect the following personal data from you:

• First and last name
• Email address
• Delivery address
• Billing address
• Phone number
• Payment details
• IP address and browser data
• Order history and product preferences

This data is only collected when you voluntarily share it with us, for example when placing an order or creating an account.

3. What do we use your data for?

We use your personal data for the following purposes:

• Processing and handling your orders
• Sending confirmation emails and order updates
• Providing customer service and answering questions
• Improving our website and services
• Sending newsletters (only with your consent)
• Informing you about products that may be of interest to you (only with your consent)
• Complying with legal obligations

4. On what basis do we process your data?

We process your personal data based on:

• Contract: The data is necessary for the execution of the contract you enter into with us (for example, delivering your order)
• Legal obligation: We are legally required to retain certain data (for example, for the tax authorities)
• Consent: For marketing purposes, we always ask for your explicit consent
• Legitimate interest: For improving our services and securing our website

5. How long do we retain your data?

We do not retain your personal data longer than necessary for the purposes for which it was collected:

• Order data: 7 years (legal retention obligation)
• Account data: until you delete your account
• Newsletter subscriptions: until you unsubscribe
• Website visit data: up to 2 years

6. Do we share your data with third parties?

We never sell your data to third parties. We only share data with carefully selected partners that are necessary for our services:

• Shipping partners: For delivering your order
• Payment services: For processing payments
• WebshopKeur: For collecting reviews (see section 12)
• Email provider: For sending confirmation emails and newsletters

All these parties have a data processing agreement with us and may only use your data for the agreed purposes.

7. How do we secure your data?

We take the protection of your data seriously and have implemented appropriate technical and organizational measures to protect your personal data against loss, unauthorized access, unwanted disclosure, and unlawful alteration:

• SSL certificate for secure connections
• Regular security updates
• Limited access to personal data (only authorized personnel)
• Secure storage of data with reliable hosting partners

8. Cookies and tracking

Our website uses functional and analytical cookies to ensure the website works properly and to analyze how visitors use the website. Marketing cookies are only placed with your consent via the cookie banner. For more information, we refer you to our cookie policy.

9. Links to other websites

Our website may contain links to other websites. This privacy policy only applies to our own website. We are not responsible for the privacy practices of third-party websites. We recommend that you read the privacy statements of those websites before providing personal information.

10. Your rights under the GDPR

You have various rights regarding your personal data. You can exercise these rights by contacting our privacy officer via our customer service. You will receive a response to your request within 30 days.

10.1 Right of access – Article 15 of the GDPR

You always have the right to access the data we (have) process that relates to you or can be traced back to you. You can make a request to this effect to our privacy officer. You will then receive a response to your request within 30 days. If your request is granted, we will send you a copy of all data we hold about you to the email address we have on file, along with an overview of the processors who hold this data, indicating the category under which we have stored this data.

10.2 Right to rectification – Article 16 GDPR

You always have the right to have the data we (have) process that relates to you or can be traced back to you, adjusted. You can make a request to this effect to our privacy officer. You will then receive a response to your request within 30 days. If your request is granted, we will send you a confirmation to the email address we have on file that the data has been adjusted.

10.3 Right to erasure – Article 17 GDPR

You have the right to have your data deleted by us. If you wish to have your data deleted, you can contact our privacy officer. We will delete your data unless there are legal obligations that require us to retain the data (for example, a tax retention obligation of 7 years).

10.4 Right to restriction of processing – Article 18 GDPR

You always have the right to restrict the data we (have) process that relates to you or can be traced back to you. You can make a request to this effect to our privacy officer. You will then receive a response to your request within 30 days. If your request is granted, we will send you a confirmation to the email address we have on file that the data will no longer be processed until you lift the restriction.

10.5 Right to data portability – Article 20 GDPR

You always have the right to have the data we (have) process that relates to you or can be traced back to you, executed by another party. You can make a request to this effect to our privacy officer. You will then receive a response to your request within 30 days. If your request is granted, we will send you copies or extracts of all data about you that we have processed or that has been processed on our behalf by other processors or third parties to the email address we have on file. In such a case, we may no longer be able to continue providing the service, as the secure connection of data files can no longer be guaranteed.

10.6 Right to object and other rights – Articles 21 and 22 GDPR

You have the right to object to the processing of your personal data by or on behalf of Lockpickings in certain cases. If you object, we will immediately cease data processing pending the handling of your objection. If your objection is justified, we will provide you with copies and/or excerpts of data that we process (or have processed) and then permanently cease processing. You also have the right not to be subjected to automated individual decision-making or profiling. We do not process your data in such a way that this right applies. If you believe this is the case, please contact our privacy officer.

10.7 Right to withdraw consent

You can withdraw your consent for the processing of personal data at any time. This does not affect processing that occurred before you withdrew your consent. For example, you can always unsubscribe from our newsletter via the unsubscribe link in every newsletter.

11. Filing a complaint with the Data Protection Authority

If you have a complaint about how we handle your personal data, we would like to hear from you. You can contact us via our customer service. You also always have the right to file a complaint with the Data Protection Authority. This is the supervisory authority for privacy protection in the Netherlands. You can contact the Data Protection Authority via www.autoriteitpersoonsgegevens.nl.

12. Reviews – WebwinkelKeur

We collect reviews through the WebwinkelKeur platform. If you leave a review via WebwinkelKeur, you are required to provide your name and email address. WebwinkelKeur shares this information with us so that we can link the review to your order. WebwinkelKeur also publishes your name on its own website. In some cases, WebwinkelKeur may contact you to provide clarification on your review.

In the event that we invite you to leave a review, we share your name and email address with WebwinkelKeur. They use this information solely for the purpose of inviting you to leave a review. WebwinkelKeur has taken appropriate technical and organizational measures to protect your personal data.

WebwinkelKeur reserves the right to engage third parties for the purpose of providing the service; we have given permission to WebwinkelKeur for this. All the aforementioned guarantees regarding the protection of your personal data also apply to the parts of the service for which WebwinkelKeur engages third parties.

13. Changes to this privacy policy

We reserve the right to make changes to this privacy policy. It is advisable to consult this privacy policy regularly so that you are aware of any changes. This privacy policy was last updated on May 27, 2026.

14. Contact

If you have any questions about this privacy policy or how we handle your personal data, you can contact us:

Lockpickings
Email: via our customer service
Website: www.lockpickwebwinkel.nl