1. Controller
The controller of your personal data is Genisis Businesses en services, KvK number 42118561, VAT identification number NL005508454B08, Hubert Duyfhuysstraat 44, 3553 VX Utrecht, Nederland. Contact: contactus@b2ystore.eu.
B2Y operates as a B2C online store. We process personal data to present products, respond to requests, process purchases, arrange delivery, provide support and comply with legal obligations.
2. Data we collect
We may collect identity and contact data, delivery data, purchase data, payment data processed by Stripe, support messages, communication preferences, technical data and browsing data needed for the site to work.
B2Y does not store full card details. Payments are processed by Stripe.
3. Purposes and legal bases
We process data to perform the purchase contract, provide customer support, comply with fiscal and accounting obligations, protect service security, respond to lawful requests and send communications where consent or another applicable lawful basis exists.
- Contract performance: purchase, delivery, confirmation and support.
- Legal obligation: accounting, taxation and responses to competent authorities.
- Legitimate interest: security, abuse prevention and operational improvement.
- Consent: marketing and non-essential cookies, where applicable.
4. Payments and subprocessors
Payments are processed via Stripe. We may also use hosting, email, database, operational analytics and logistics providers. These providers process data only as needed to provide their services.
5. Retention
Fiscal and accounting data: 7 years, under the Dutch fiscale bewaarplicht (Article 52 AWR).
Account and support data: while the account or customer relationship is active and for the period needed to defend legal claims. Marketing data: until consent is withdrawn or a valid objection is made. Technical and security data: for the period needed for security, diagnostics and abuse prevention.
6. International transfers
Where providers process data outside the European Economic Area, B2Y requires an appropriate legal basis, such as an adequacy decision or standard contractual clauses, where applicable.
7. Data subject rights
You may exercise rights of access, rectification, erasure, restriction, portability, objection and withdrawal of consent through the contact address in this policy.
You may complain to the Autoriteit Persoonsgegevens (AP) in the Netherlands or to the supervisory authority of your country of habitual residence.
8. Contact
Privacy requests should be sent to contactus@b2ystore.eu or by post to Genisis Businesses en services · KvK-nummer 42118561 · BTW-identificatienummer NL005508454B08 · Hubert Duyfhuysstraat 44, 3553 VX Utrecht, Nederland.