Aroneus SRL, Rue de Hodimont 51, 4800 Verviers, Belgique. Business / VAT number: BE0730644283. For any question regarding your personal data: silav@openkurd.com.
2. Data collected
We only collect the data necessary to fulfil your order: name, email address, postal address, preferred language. Payment data (credit card) is processed directly by Stripe and is never stored on our servers.
3. Purposes
Your data is used to: (a) process and deliver your order, (b) issue invoices, (c) provide after-sales service, (d) reply to your requests, (e) comply with our legal obligations (accounting, tax).
4. Legal basis
Processing is based on the performance of the sales contract (art. 6.1.b GDPR) and on compliance with our legal obligations (art. 6.1.c GDPR), notably in accounting and tax matters.
5. Recipients
Your data is shared only with: Stripe Payments Europe, Ltd. (payment), Cloudflare, Inc. (hosting), our carrier (delivery), and our accountant (tax obligations).
6. Transfers outside the EU
Stripe and Cloudflare may process certain data in the United States. These transfers are governed by the European Commission’s Standard Contractual Clauses, ensuring a level of protection equivalent to GDPR.
7. Retention period
Order-related data is kept for 10 years from the end of the commercial relationship, to comply with our accounting obligations (art. III.86 of the Belgian Code of Economic Law).
8. Your rights
You have the right to access, rectify, erase, restrict, port, and object to the processing of your data. To exercise these rights, write to silav@openkurd.com.
9. Cookies and local storage
The site does not use analytics or advertising cookies. Only your cart and language preference are kept in your browser’s localStorage, which does not require your consent.
10. Right to lodge a complaint
You may lodge a complaint with the Belgian Data Protection Authority (APD/GBA): Rue de la Presse 35, 1000 Brussels — autoriteprotectiondonnees.be.