1. Who are we?

GOED3D is responsible for the processing of personal data as described in this privacy policy. We respect your privacy and ensure that personal information is treated confidentially and with care in accordance with the General Data Protection Regulation (GDPR).

2. What data do we process?

We process personal data when you use our website, place an order, create an account or contact us.

2.1 For orders (physical and digital)

  • First and last name

  • Address details

  • Email address

  • Phone number (optional)

  • Order and payment details

  • IP address

  • Download history of digital products

2.2 When creating an account

  • Name

  • Email address

  • Password (stored encrypted)

  • Order history

  • Download rights

2.3 Upon contact

  • Data that you enter in an email or contact form

2.4 Automatically collected data

  • IP address

  • Browser and device data

  • Visitor behavior via Google Analytics

  • Cookies and similar technologies

3. Objectives and foundations

We process personal data for:

a. Execution of the agreement

  • Processing and shipping orders

  • Delivery of digital downloads

  • Customer service and warranty

  • Processing payments via Mollie

b. Legal obligations

  • Storage of invoices (7-year tax retention obligation)

c. Legitimate interest

  • Website security (Wordfence)

  • Fraud prevention in downloads

  • Analysis of website usage

d. Consent

  • Non-essential cookies and tracking (Google Analytics, reCAPTCHA)

4. Digital downloads

When purchasing digital products:

  • it is recorded which files have been downloaded;

  • limits or security measures may apply;

  • IP address is stored to prevent misuse.

This information will only be used for delivery and fraud prevention.

5. Who we share data with

We only share personal data with necessary parties:

  • Mollie – payment processing (iDEAL | Wero, Apple Pay, etc.)

  • PostNL - delivery of physical products

  • VDX.nl – hosting of the website

  • Google – Analytics, Tag Manager and reCAPTCHA

  • Wordfence – security

  • WooCommerce/WordPress – technical platform

Where necessary, processing agreements have been concluded with these parties.
We never sell personal data to third parties.

6. Retention periods

  • Order and invoice details: 7 years (legal obligation)

  • Account information: until deleted by user

  • Download logs: maximum 5 years

  • Analytics data: 26 months

  • Comments: Unlimited (unless requested to be removed)

7. Security

We take appropriate measures such as:

  • SSL encryption

  • password hashing

  • firewall and malware protection

  • limited access to personal data

  • regular updates and backups

8. Your rights

You have the right to:

  • access to your data;

  • correction;

  • removal;

  • restriction of processing;

  • portability;

  • withdraw consent;

  • filing a complaint with the Dutch Data Protection Authority.

You can send requests to: info@goed3d.nl

9. Google Analytics and Google Tag Manager

We use Google Analytics via Google Tag Manager to gain insight into the use of our website.

The following guarantees apply:

  • IP addresses are anonymized before storage;

  • we have disabled data sharing with Google for advertising purposes;

  • a processing agreement has been concluded with Google;

  • Analytics cookies are only placed after your permission via the cookie banner;

  • data will be kept for a maximum of 26 months.

The collected data will only be used to improve the website and increase its user-friendliness.

10. Use of Google reCAPTCHA

We use cookies on forms and login pages. Google reCAPTCHA to prevent abuse, spam and automated attacks.

reCAPTCHA can process, among other things:

  • IP address

  • browser and device data

  • mouse and click behavior

  • date and time

  • Google cookies

This processing takes place on the basis of your permission and our legitimate interest in securing the website.
The data may be processed by Google outside the EU. The standard contractual clauses apply in this case.

More information: https://policies.google.com/privacy

11. Cookies and consent

11.1 Functional cookies (no consent required)

These cookies are necessary for the functioning of the webshop:

  • shopping cart and checkout

  • logging in and account management

  • Mollie payment process

  • website security

11.2 Cookies based on consent

All non-essential cookies are only placed after you have given consent via the cookie banner, including:

  • Google Analytics

  • Google reCAPTCHA

  • any external embedded content

You can change your choice at any time via the cookie settings on the website or via your browser.

11.3 Embedded content

Pages may contain content from third parties (e.g., YouTube). These parties can place their own cookies once you have given permission.

12. Comments and media

  • Comments may include IP address for spam detection

  • Gravatar can be used for profile picture

  • Do not upload images with EXIF location data

13. Data leaks

In the event of a data breach, we act in accordance with the GDPR:

  • notification to the Dutch Data Protection Authority if necessary;

  • those involved are informed in case of high risk;

  • measures to prevent recurrence.

14. Changes

We may amend this privacy policy. The current version is always available at goed3d.nl.