PRIVACY STATEMENT TRIPLEFABRICS B.V.
Unified for: TripleFabrics / AfdekShop / Watersport4all
Effective date: January 21, 2026
DATA CONTROLLER
TripleFabrics B.V.
Londenweg 26, 9744 TX Groningen, The Netherlands
Chamber of Commerce (KvK): 64429059
VAT: NL855662475B01
Contact e-mail: info [att] triplefabrics [dot] com
Data Protection Officer (DPO): Mr. Muntinga — reachable via info [att] triplefabrics [dot] com
1. SCOPE
This privacy statement applies to all individuals whose personal data TripleFabrics processes in the context of the activities and webshops operating under the trade names TripleFabrics, AfdekShop and Watersport4all (hereinafter jointly: “we”, “us”, “TripleFabrics”). This statement applies to all websites, webshops, quotations, (unsolicited) e‑mail approaches, social media contacts and business contacts.
2. WHAT PERSONAL DATA DO WE PROCESS?
Depending on the purpose and the moment of contact, we process for example:
- Identity data: first and last name, salutation
- Contact details: e‑mail, telephone number, company name, job title, billing and delivery address
- Business data: Chamber of Commerce number (KvK), payment details, order information
- Transaction data: order, invoice, payment and delivery information
- Online data: IP address, cookies, click and browsing behaviour, device and browser information
- Communication data: content of e‑mails, quotations, service chat, social media messages and telephone notes
- Other data you provide (for example via contact forms, reviews or when creating an account)
We do not collect special (sensitive) personal data unless you voluntarily and explicitly provide these. Persons under 16 years of age require parental/guardian consent; we do not actively request this.
3. WHERE DO WE OBTAIN PERSONAL DATA?
- Directly from you (orders, registrations, contact forms, quotation requests)
- From your organisation (for B2B contacts)
- Automatically via our websites (cookies and similar techniques)
- From third parties such as logistics partners, review tools or social media platforms when necessary for the performance of the agreement
4. PURPOSES & LEGAL BASES
a. Performance of the agreement (contract)
Processing orders, deliveries, invoicing and customer service. (Legal basis: performance of a contract.)
b. Legal obligations
Retaining administration for fiscal and legally required retention periods. (Legal basis: legal obligation.)
c. Direct marketing and (unsolicited) business e‑mail approaches
We contact businesses and business contacts by e‑mail with commercial offers and information. For this business direct marketing we rely on a legitimate interest and/or — where applicable — consent. We perform a prior Legitimate Interest Assessment (LIA) and always provide an easy and direct way to object (opt‑out / unsubscribe).
d. Newsletter and commercial mailings (consent or legitimate interest)
We send newsletters only to persons who have explicitly given consent or where a legal exception applies. Every commercial e‑mail contains a clear unsubscribe link.
e. Functional and analytical purposes (cookies)
Functional cookies are necessary for the site; analytical and tracking cookies are only placed after your consent. (Legal basis: consent for tracking cookies; necessary cookies based on legitimate interest.)
f. Security and fraud prevention
Detection of fraud, liability restrictions and security measures. (Legal basis: legitimate interest / legal obligation.)
5. COLD ACQUISITION / BUSINESS E‑MAIL (HOW WE DO THIS AND YOUR RIGHTS)
We may send you, as a business contact person, an unsolicited e‑mail with a business offer. We do this carefully and only in situations where our interest in making contact is reasonable and where it is unlikely to result in a disproportionate intrusion into your privacy.
- Legal basis: legitimate interest (LIA performed and documented).
- Each e‑mail states: who is making contact, the purpose of the message, and a clear unsubscribe option (unsubscribe link or reply with “STOP”).
- If you object, we will respect this immediately and remove you from our marketing lists.
Note: we do not name specific marketing tools or providers. We may use external providers and have data processing agreements in place with them.
6. COOKIES AND SIMILAR TECHNOLOGIES
We use:
- Necessary cookies: without these the site will not function properly.
- Functional cookies: to remember preferences.
- Analytical cookies: for anonymous website analysis.
- Tracking/advertising cookies: only after explicit consent.
Visitors are shown a clear cookie banner with categories and an opt‑in mechanism for tracking cookies on their first visit.
7. SHARING WITH THIRD PARTIES / PROCESSORS
We share personal data with external parties when necessary for the performance of our services (e.g. payment providers, carriers, review platforms, hosting, IT service providers). We conclude data processing agreements with these parties that include technical and organisational measures.
8. TRANSFERS OUTSIDE THE EU/EEA
If personal data is processed outside the EU/EEA, we do so only with appropriate safeguards (e.g. standard contractual clauses or adequate internal measures). Specifications per provider are available on request.
9. RETENTION PERIODS
- Customer and order data: up to 7 years (tax retention obligation). See belastingdienst.nl
- Marketing/contact lists: 2 years after last contact unless consent indicates otherwise.
- Account data: while the account is active, plus up to 2 years thereafter unless a legal retention obligation applies.
- Logs and security data: 6–13 months, unless required for investigation.
10. YOUR RIGHTS
You have rights under the GDPR: access, rectification, erasure, restriction of processing, data portability, objection to processing and withdrawal of consent. For objections to direct marketing, an immediate stop is required.
Requests can be sent to: info [att] triplefabrics [dot] com We respond within the legally prescribed period (usually within 4 weeks; an extension is possible in exceptional cases).
11. SECURITY
We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access and unlawful processing. Think of encryption during transmission, access to systems on a need‑to‑know basis and periodic audits.
12. AUTOMATED DECISION‑MAKING AND PROFILING
We do not carry out automated decision‑making with legal effects for data subjects. If profiling takes place, this will be separately indicated in the relevant context and the legal basis and effects will be explained.
13. COMPLAINTS AND DATA BREACHES
If you have a complaint about our processing of personal data you can contact info [att] triplefabrics [dot] com You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
In case of a data breach, this will be reported to the supervisory authority and affected parties in accordance with the GDPR within 72 hours.
14. CHANGES TO THIS STATEMENT
We may amend this privacy statement. We publish the date of the last modification at the top of the statement and — in case of material changes — we will inform registered customers by e‑mail.
WEBWINKELKEUR
We collect reviews via the WebwinkelKeur platform. If you leave a review through WebwinkelKeur you are required to provide your name, place of residence and e‑mail address. WebwinkelKeur shares this information with us so that we can link the review to your order. WebwinkelKeur also publishes your name and place of residence on its own website. In some cases WebwinkelKeur may contact you to request clarification of your review. When we invite you to leave a review we share your name and e‑mail address with WebwinkelKeur. They use this data only for the purpose of inviting you to leave a review. WebwinkelKeur has implemented appropriate technical and organisational measures to protect your personal data. WebwinkelKeur reserves the right to engage third parties for the provision of the service; we have given WebwinkelKeur permission to do so. All safeguards regarding the protection of your personal data mentioned above also apply to the parts of the service for which WebwinkelKeur engages third parties.