​Last update: June 2026

​

Welcome to our websites paulienvandenbrande.com and paulienvandenbrande.be (the "Website"). Please read our Privacy Policy carefully. This Privacy Policy forms an integral whole with our General Terms and Conditions of Sale https://www.paulienvandenbrande.com/terms-conditions-of-sale and our General Terms and Conditions of Use https://www.paulienvandenbrande.com/terms-conditions-of-use.

​

Paulien Van den Brande (hereinafter "PVDB" or "we"), a Belgian company with its registered office at Nieuwe Sint-Annadreef 50, 8200 Brugge (Belgium), registered at the Crossroads Bank for Enterprises under number 1032270139, is the controller of your Personal Data.

​

PVDB attaches great importance to your privacy and protects your Personal Data by applying the General Data Protection Regulation (EU Regulation 2016/679, hereinafter "GDPR"), as well as the legislation concerning electronic communications and other applicable legal provisions.

​

For any questions about this Privacy Policy or the way we process your Personal Data, you can contact us at any time at info@paulienvandenbrande.com.

​

1. What personal data do we collect and why?

​

This section explains exactly what Personal Data we collect, in which situations, and for what purposes.

​

1.1 Online account

​

When creating a personal account on the Website, you provide the following information: first name, last name, e-mail address, and password. It is also possible to sign in and connect to your account via Facebook or Google Connect. In that case, we will receive your details from that service, namely your public profile with name and e-mail address, via the authorisation procedures used by the service.

Creating an account is based on your consent. You can change or delete your account at any time in accordance with section 9 of this Privacy Policy.

​

1.2 Orders and deliveries

​

When you place an order on our Website, we process your first name, last name, telephone number, billing and/or delivery address, and payment details.

We use this information to finalise your payment, to deliver your order, and to keep you informed about the status of your order. We may also keep a record of your purchase history.

The processing of your Personal Data in the context of an order is necessary for the performance of the purchase agreement.

​

1.3 Questions and complaints

​

When you contact us directly by e-mail, telephone, letter, or via the contact form on the Website, we process your contact details and the content of your correspondence.

We only use this information to respond as appropriately as possible to your question or complaint. In addition, we may use your e-mail address to send out surveys to improve our service.

The communication of this information is based on your consent. The further storage and use of your Personal Data for this purpose is based on the legitimate interest of PVDB.

​

1.4 Marketing communications

​

When you subscribe to our newsletter, you provide the following details: first name, last name, e-mail address, country, and language. We may compile customised product information based on your account details, such as your wish list, previous purchases and orders, and based on cookies used by our Website.

​

When you have given your consent, your contact details are kept in our customer system to inform you about our actions, promotions, benefits, and events. We may create target groups based on e-mail addresses, mobile phone numbers, or visitors of our Website, and approach them with personalised ads through channels such as Facebook and Instagram.

You will also receive certain information as an existing customer of PVDB if we notice that you are interested in or benefit from our services or products. In doing so, we base ourselves on the legitimate interest of PVDB.

​

You can unsubscribe from marketing communications at any time by clicking the 'unsubscribe' link in any of our e-mails, or by contacting us at info@paulienvandenbrande.com.

​

1.5 Events

​

If you participate in a PVDB event, we may register your first name, last name, and e-mail address. During events there may also be a photographer present to capture the atmosphere, and photos may be posted on our social media afterwards.

​

Your registration for an event is based on your consent. The publication of photos on social media is based on the legitimate interest of PVDB for online visibility. You can always withdraw your consent in accordance with section 9 of this Privacy Policy, or request that a photo be removed by contacting us at info@paulienvandenbrande.com.

​

2. Legal basis

​

We process your Personal Data on one of the following legal grounds:

• Consent: you have given us your express consent (e.g. by ticking a box or clicking). You can withdraw your consent at any time. Please note that withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal.

• Contract: the processing is necessary for the performance of the agreement you have entered into with us.

• Legitimate interest: PVDB has a justified commercial interest in processing your data that is balanced and does not disproportionately affect your privacy. You can object to such processing at any time by contacting us.

• Legal obligation: the processing is required by applicable law or regulation.

• Vital interests: the processing is necessary to protect the vital interests of you or a third party.

 

3. How long do we keep your personal data?

​

All Personal Data are stored no longer than necessary for the purposes described in this Privacy Policy, or than legally required. For orders and purchase history, we keep your Personal Data for the duration of the contractual relationship and for 10 years thereafter, in order to comply with our accounting and tax obligations. Correspondence relating to questions and complaints is kept for 2 years from the date of the correspondence. Personal Data processed for marketing communications is kept for 3 years from the date of your last activity. Where you exercise one of your data rights, we keep a record of your request for 5 years from the date of that request. Personal Data processed for fraud prevention and security purposes is kept for the duration of the applicable limitation period. Where we are required to retain data to comply with a legal obligation, we keep it for as long as required by the applicable law or regulation.

In all cases, Personal Data may be retained for a longer period if there is a legal or regulatory reason to do so, or for a shorter period if you object to the processing and there is no longer a legitimate reason to retain it. 

​

When determining the appropriate retention period, we take into account the nature and sensitivity of the data, the potential risk of harm, the purposes for which it is processed, and any applicable legal, regulatory, tax, or accounting requirements.

​

In all cases, Personal Data may be retained for a longer period if there is a legal or regulatory reason to do so, or for a shorter period if you object to the processing and there is no longer a legitimate reason to retain it.

​

Where we no longer need to process your Personal Data, we will delete it from our systems. Where immediate deletion is not possible (for example, because data is stored in backup archives), we will securely isolate it from further processing until deletion is possible.

​

4. What if you do not provide your personal data?

​

Providing certain Personal Data (such as your name, e-mail address, delivery address, means of payment, and telephone number) is necessary for us to process your order, provide the services you request, or fulfil our legal obligations.

​

If you refuse to provide the Personal Data required for these purposes, we may not be able to process your order or provide the requested service.

​

Any additional Personal Data beyond what is strictly necessary is optional and has no impact on your use of the Website or your ability to purchase products. We will always indicate which fields are mandatory by marking them with an asterisk (*).

​

5. With whom do we share your personal data?​

​

PVDB does not share your Personal Data with third parties, except in the following situations:

Service providers and processors: third-party companies that provide services on our behalf, including hosting and IT services, payment processing, order delivery, customer relationship management (CRM), and marketing services. These providers are only permitted to process your Personal Data in accordance with our instructions.

​

Legal successors and affiliated companies: in the context of a merger, acquisition, or restructuring, for the same purposes as set out in this Privacy Policy.

​

Professional advisers: including legal, financial, and IT advisers who assist us in running our business.

​

Public authorities: government agencies, courts, law enforcement, fraud prevention agencies, or other regulatory bodies, where required by law or in connection with the investigation of unlawful activities.

​

Other third parties: with your prior consent.

Personal Data will not be disclosed to any other third parties or transferred without informing you, and in any case only in accordance with applicable laws.

​

6. International transfers

​

The Personal Data we collect from you is currently held within the European Union ("EU"). The Website is operated by PVDB from Belgium and targets consumers located in EU Member States as well as Switzerland.

​

Where Personal Data is transferred to countries outside the EU, PVDB will take the necessary measures to ensure that your Personal Data is protected to the same standard as within the EU. These measures may include standard contractual clauses approved by the European Commission, binding corporate rules, or other approved certification mechanisms. Copies of the applicable safeguards can be provided upon request.

​

7. How do we protect your personal data?

​

PVDB has taken appropriate technical and organisational security measures to protect your Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

​

However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. We cannot guarantee that unauthorised third parties will never be able to defeat our security measures. Transmission of Personal Data to and from our Website is at your own risk, and you should only access the Website within a secure environment.

If you know or suspect that anyone other than you has accessed your account or Personal Data, please notify us immediately at info@paulienvandenbrande.com.

​

8. Your rights

​

In accordance with the GDPR, you have the following rights with regard to your Personal Data. You can exercise any of these rights by contacting us at info@paulienvandenbrande.com or by sending a letter to Nieuwe Sint-Annadreef 50, 8200 Brugge, Belgium. We will respond to your request within one month. In complex cases, we may require additional time and will inform you accordingly.

​

Right to be informed: PVDB strives to be transparent by providing the necessary information about the processing of your Personal Data through this Privacy Policy.

​

Right to access: You have the right at any time and free of charge to access your Personal Data and to request a copy of the Personal Data that PVDB holds about you.

​

Right to rectification: If the Personal Data we hold about you is incorrect or incomplete, you have the right to ask us to correct or complete it. You are responsible for the accuracy of the data you provide yourself.

​

Right to erasure: In certain cases, you have the right to request the deletion of your Personal Data. We will delete your Personal Data without undue delay if we have no legal or legitimate reason to continue its processing. Please note that we may not always be able to comply where we have a legal or regulatory obligation to retain the data.

​

Right to restriction of processing: In certain cases, you have the right to ask us to limit the processing of your Personal Data. This means we may store the data but may not process it further. This right applies where: (i) you contest the accuracy of the data; (ii) the processing is unlawful but you do not want us to erase it; (iii) we no longer need it but you require it for legal claims; or (iv) you have objected to our use of your data.

​

Right to data portability: You have the right to receive your Personal Data in a structured, commonly used, and machine-readable format, and to have it transferred to another controller. This right only applies to data processed on the basis of your consent or a contract, and where processing is carried out by automated means.

​

Right to object: You have the right to object to the processing of your Personal Data where we rely on legitimate interests as the legal basis. You also have the absolute right to object to the processing of your Personal Data for direct marketing purposes, after which we will no longer process it for those purposes.

​

Right to withdraw your consent: You can withdraw your consent at any time, for example by unsubscribing from our newsletter or marketing communications. Please note that withdrawal does not apply to processing previously carried out by PVDB, and it may take a short period of time to process your request.

​

Right not to be subject to automated decision-making: We do not use your Personal Data for automated decision-making, including profiling, as defined under the GDPR. No decisions about you are made solely by automated means without human involvement.

​

Right to lodge a complaint: If you believe that PVDB does not process your Personal Data lawfully, you have the right to lodge a complaint with the Belgian Data Protection Authority (www.gegevensbeschermingsautoriteit.be). You may also appeal to the Consumer Mediation Service at www.consumentenombudsdienst.be, or use the EU online dispute resolution platform at http://ec.europa.eu/consumers/odr/.

​

9. Minors

​

Our Website is not intended for, and should not be used by, children under the age of 18. We do not knowingly collect Personal Data from minors. If we become aware that Personal Data from a person under 18 has been collected, we will take reasonable steps to delete it promptly. If you become aware of any such data, please contact us at info@paulienvandenbrande.com.

​

10. Links to third-party websites

​

Our Website may contain links to third-party websites and services. Please note that those websites have their own privacy policies, and we do not accept any responsibility or liability for them. We recommend that you read the privacy policy of every website you visit.

​

11. Contact Us

​

You can contact PVDB at any time with questions, concerns, or requests relating to this Privacy Policy or your Personal Data:

• By e-mail: info@paulienvandenbrande.com

• By post: Nieuwe Sint-Annadreef 50, 8200 Brugge, Belgium

Applicable law and jurisdiction: This Privacy Policy is governed by Belgian law. The competent courts of Belgium have exclusive jurisdiction to rule on any dispute arising from the interpretation or implementation of this Privacy Policy, without prejudice to any rights the consumer may have under applicable EU regulations.

​

12. Updates to this privacy policy

​

We may update this Privacy Policy at any time, including where amendments are made to legal provisions or regulations governing data protection. The updated version will be indicated by an updated date at the top of this Privacy Policy and will be effective as soon as it is accessible on the Website. We therefore recommend that you check this page regularly.

​

This Privacy Policy has been last updated in June 2026.

​

© Paulien Van den Brande, 2026. All rights reserved.