Privacy Policy
Last updated: 20 september 2026
This Privacy Policy explains how función ("we", "us", "our") collects, uses, and protects your personal data when you visit https://www.funcion.nl or place an order with us. We are committed to processing your personal data in line with the EU General Data Protection Regulation (GDPR) and the Dutch Implementation Act (UAVG).
1. Data controller
The controller responsible for your personal data is:
función
KvK: 42029580
Email: hi@funcion.nl
2. What personal data we collect
Depending on how you interact with us, we may collect:
-
Contact and identity data: name, email address, postal address, phone number.
-
Order data: products ordered, order history, delivery details, returns, communications about your order.
-
Payment data: processed by our payment providers (e.g. Shopify Payments); we receive confirmation of payment but do not store full card details.
-
Account data: if you create an account, your login details and saved preferences.
-
Marketing data: email address and preferences if you subscribe to our newsletter.
-
Technical and usage data: IP address, browser type and version, device information, pages viewed, referring URL, and similar information collected through cookies and similar technologies.
3. Why we use your data and the legal basis
|
Purpose |
Legal basis |
|---|---|
|
Processing and delivering your order |
Performance of a contract |
|
Customer service and handling returns |
Performance of a contract |
|
Accounting and tax administration |
Legal obligation |
|
Sending our newsletter |
Consent (which you can withdraw at any time) |
|
Improving the website, fraud prevention, analytics |
Legitimate interest, balanced against your rights |
|
Marketing cookies and personalised advertising (currently not applicable side-wide) |
Consent |
4. Who we share your data with
We only share your data with parties that help us run the business. These include:
-
Shopify Inc. — our e-commerce platform and hosting provider.
-
Payment providers — Shopify Payments, iDEAL via Mollie/Stripe.
-
Shipping carriers — PostNL, DHL, DPD.
-
Tax authorities and other regulators — only where required by law.
We do not sell your personal data. We have data processing agreements in place with our processors where required. Where data is transferred outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
5. How long we keep your data
-
Order and invoice data: 7 years, in line with our Dutch tax-law retention obligation.
-
Newsletter subscriber data: until you unsubscribe, after which we keep a minimal record solely to honour your unsubscribe.
6. Your rights
Under the GDPR, you have the right to:
-
Request access to the personal data we hold about you.
-
Request correction of data that is inaccurate or incomplete.
-
Request erasure of your data, where one of the grounds in Article 17 GDPR applies.
-
Request restriction of processing.
-
Object to processing based on our legitimate interest.
-
Receive your data in a structured, commonly used, machine-readable format (data portability).
-
Withdraw consent at any time, where processing is based on consent.
-
Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
To exercise any of these rights, email hi@funcion.nl. We may ask for proof of identity before responding. We aim to reply within one month.
7. Cookies and similar technologies
We use cookies and similar technologies to operate the website, remember your preferences, analyse traffic, and (with your consent) deliver relevant marketing. You can manage your preferences via the cookie banner shown on your first visit, and change them later.
Functional cookies (needed for the site to work, like your shopping cart) are placed without consent. Analytical and marketing cookies are only placed after you opt in.
8. Security
We take appropriate technical and organisational measures to protect your personal data against loss or unlawful processing. These include encryption of data in transit (HTTPS), access controls, and use of certified processors. No system is 100% secure; if you suspect misuse of your data, please contact us immediately.
9. Children
Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16 without parental consent. If you believe we have, please contact us and we will remove the data.
10. Changes to this policy
We may update this Privacy Policy from time to time. The version date at the top reflects the most recent change. Material changes will be communicated through our website or by email where appropriate.
11. Contact
Questions or concerns about your personal data? Email us at hi@funcion.nl.