Privacy Policy — Spadafora The Netherlands
← Back to site G.B. Spadafora Cookie Settings
Legal

Privacy Policy

Last updated: 8 October 2026

This policy explains how G.B. Spadafora B.V. (“Spadafora The Netherlands”, “we”) collects and uses personal data when you visit this website, contact us or subscribe to our newsletter, in accordance with the EU General Data Protection Regulation (GDPR).

1. Who we are

The data controller is:

G.B. Spadafora B.V.
trading as Spadafora The Netherlands
Denneweg 182, 2514 CM Den Haag, The Netherlands
Chamber of Commerce (KvK): 89724216
VAT (BTW): NL865078488B01
Email: info@gbspadafora.com

2. What data we collect and why

Contact by email or WhatsApp
Name, email address or phone number and the content of your message, used to answer your inquiry or arrange an appointment. Legal basis: your request and our legitimate interest in responding (Art. 6(1)(b) and (f) GDPR).
Newsletter
Your email address and, if you open our emails, basic engagement data (opens, clicks). Used only to send our newsletter. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the unsubscribe link in every email.
Website visits
Our hosting server automatically records technical data such as IP address, browser type and time of visit, to keep the website secure and working. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

We do not sell your data, and we do not use it for automated decision-making or profiling.

3. Who receives your data

We share data only with service providers that help us run this website and our communications, under a data processing agreement:

  • Hosting provider — SupportHost OÜ (Estonia, EU), which stores the website and server logs.
  • Mailchimp (Intuit Inc., USA) — for sending the newsletter.
  • WhatsApp (Meta Platforms Ireland Ltd.) — only if you choose to contact us through WhatsApp.

This website links to Google Maps, Instagram and spadaforagioielli.com. These are external services: once you follow a link, their own privacy policies apply.

4. Transfers outside the EU

Some providers (such as Mailchimp) may process data in the United States. These transfers are covered by the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.

5. How long we keep data

  • Inquiries: up to 2 years after our last contact, unless a longer period is required by law (for example, for purchases and invoices: 7 years under Dutch tax law).
  • Newsletter: until you unsubscribe.
  • Server logs: up to 30 days.

6. Your rights

You have the right to access, correct or delete your personal data, to restrict or object to its processing, to data portability, and to withdraw your consent at any time. To exercise these rights, email info@gbspadafora.com; we will reply within one month.

You also have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

7. Security

This website uses an encrypted (HTTPS) connection, and we take appropriate technical and organisational measures to protect your data against loss or unauthorised access.

8. Cookies

For information on cookies and to manage your preferences, see our Cookie Settings.

9. Changes to this policy

We may update this policy from time to time. The latest version is always published on this page, with the date of the last update.