Privacy Policy
Last updated: 19 October 2026
At Koffiearabica, we handle your personal data with care. This privacy policy explains what data we process, why we do so, and what rights you have. We comply with the General Data Protection Regulation (GDPR).
Who is responsible
Sidha Technology & Trading B.V., trading as Koffiearabica
Wartelstraat 2, 8223 EH Lelystad
Chamber of Commerce no. 9044679
E-mail: info@sttlelystad.nl · Telephone: 0320-237930
What data we process
- When you place an order: name, address, email address, telephone number, order details and payment status. We do not see your full bank or credit card details; these are processed by the payment provider.
- When you have an account: your login details, addresses and order history.
- When you contact us or request service: the information you provide, such as your name, contact details, machine type and description of the problem.
- For the newsletter: your email address and subscription.
- When you visit the website: technical data such as your IP address, browser and device, and data collected through cookies. See our cookie policy.
Why we use your data
| Purpose | Legal basis |
|---|---|
| Processing, shipping and invoicing your order | Performance of the contract |
| Keeping you informed about your order (order confirmation, track & trace) | Performance of the contract |
| Handling warranty claims, service and repairs | Performance of the contract |
| Answering your questions | Legitimate interest |
| Sending a reminder if you have not completed your order | Consent (sign-up for email) |
| Sending the newsletter and offers | Consent |
| Improving and securing the website | Legitimate interest |
| Complying with the law, such as statutory tax record-keeping requirements | Legal obligation |
Who we share data with
We never sell your data. We only share it when necessary:
- Shopify, the platform our online store runs on.
- Payment providers to process your payment.
- Carriers to deliver your package.
- Our accountant and the Dutch Tax and Customs Administration, when required by law.
We have agreements in place with parties that process data on our behalf to protect your data. Some service providers, such as Shopify, may process data outside the European Union. This only happens with appropriate safeguards as required by the GDPR.
How long we retain data
- Order and invoice data: 7 years, due to statutory tax record-keeping requirements.
- Your account data: for as long as your account exists.
- Contact and service requests: up to 2 years after they have been handled.
- Newsletter: until you unsubscribe.
Security
We take appropriate measures to protect your data, such as using a secure connection (https) and restricting access to data within our company.
Your rights
You have the right to access, correct or have your data deleted. You can object to the use of your data, request that its use be restricted, and have your data transferred. You can withdraw your consent at any time, for example, using the unsubscribe link at the bottom of each newsletter.
Send your request to info@sttlelystad.nl. We will respond within one month. To verify that the request is from you, we may ask you to confirm your identity.
Complaints
Are you unhappy with how we handle your data? Let us know and we will work with you to find a solution. You also have the right to lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).
Changes
We may amend this privacy policy. The latest version is always available on this page.