Privacy Statement SourceParts.eu

Version: September 2026. This privacy statement applies to the webshop shop.sourceparts.eu.

This privacy statement is drafted in Dutch. This English translation is provided to inform the customer. Where the English text differs in interpretation from the Dutch text, the Dutch text prevails.

1. Introduction

This privacy statement explains how Aldewereld Consultancy, trading under the trade name SourceParts.eu, handles personal data of visitors and customers through the webshop shop.sourceparts.eu, in accordance with the General Data Protection Regulation (GDPR).

2. Who is the controller

2.1 The controller for the processing of personal data through shop.sourceparts.eu is:

Aldewereld Consultancy
Trade name: SourceParts.eu
Chamber of Commerce (KvK) number: 61862533
VAT identification number: NL002168402B79
Postal address: Nieuwe Hemweg 26, 1013CX Amsterdam, the Netherlands
E-mail: legal@sourceparts.eu

2.2 Aldewereld Consultancy is a Dutch sole proprietorship, not a private limited company. SourceParts.eu is a trade name of this sole proprietorship only.

2.3 No data protection officer has been appointed. For questions about this privacy statement or about the processing of personal data, the trader can be reached via legal@sourceparts.eu.

3. What personal data we process

3.1 We process the following categories of personal data, to the extent applicable to the relevant customer or visitor:

Order data: name, billing address, delivery address, ordered products, order number and order history.
Contact data: e-mail address, telephone number, and, for business customers, company name and VAT identification number.
Payment data: data required to process a payment, such as payment method and transaction status. Full card or account details are processed by the payment service provider and are not stored by us.
Delivery data: delivery address and, where relevant, contact data needed for delivery and the installation service.
Support data: data provided by the customer for a question, complaint, warranty request or withdrawal request.
Newsletter: e-mail address, if and to the extent the customer or visitor has voluntarily subscribed to a newsletter.
Technical data: anonymised or pseudonymised visit statistics through our own, self-hosted analytics.

3.2 We do not process special categories of personal data, such as health data or data concerning race or religion.

4. For what purposes and on what legal basis we process data

4.1 Order fulfilment: processing and handling orders, arranging delivery, processing payments and carrying out the installation service. Legal basis: performance of the agreement (GDPR article 6(1)(b)).

4.2 Customer service and support: answering questions and handling complaints, warranty and withdrawal requests. Legal basis: performance of the agreement and, where there is not yet an agreement, legitimate interest in good customer service (GDPR article 6(1)(b) and (f) respectively).

4.3 Newsletter: sending a newsletter, only to persons who have subscribed. Legal basis: consent (GDPR article 6(1)(a)). This consent can be withdrawn at any time using the unsubscribe link in every newsletter or via legal@sourceparts.eu.

4.4 Legal obligations: complying with tax and administrative retention obligations, including the statutory retention obligation for invoices, and validating VAT identification numbers of business customers through VIES for VAT reverse charge purposes. Legal basis: legal obligation (GDPR article 6(1)(c)).

4.5 Website improvement: analysing aggregated visitor behaviour that cannot be traced to individuals, in order to improve the webshop. Legal basis: legitimate interest, given the cookieless and non-identifying nature of this analytics (GDPR article 6(1)(f)).

4.6 Fraud prevention and security: protecting the webshop and our customers against misuse, fraud and technical incidents. Legal basis: legitimate interest (GDPR article 6(1)(f)).

5. To whom we disclose data

5.1 We share personal data only with parties that need it for the purposes described in article 4, or to whom we are legally obliged to disclose it.

5.2 Payment service provider: the external payment provider that processes the payment and receives the necessary payment and order data for that purpose.

5.3 Shipping and delivery: the party that arranges physical delivery of the order receives the name and delivery address, and, where necessary, contact data, to deliver the order.

5.4 Hosting: our webshop runs with a hosting provider established within the European Union, which acts as a processor for the technical infrastructure and storage of the webshop.

5.5 Analytics: we use a self-hosted analytics solution that runs on our own infrastructure and does not use tracking cookies, and does not collect personally identifiable data for advertising purposes.

5.6 We do not sell personal data to third parties and do not share data for third-party purposes beyond what is described in this article.

5.7 With parties that process personal data on our behalf as processors, we have data processing agreements in accordance with the GDPR, or we conclude these before processing begins.

6. How long we retain data

6.1 We retain order and invoice data for the statutory tax retention period of 7 years.

6.2 We retain customer account data for as long as the customer maintains an active relationship with us, and thereafter for a reasonable period in connection with warranty and conformity claims.

6.3 We retain contact requests and complaints no longer than necessary to handle the request and to allow for any follow-up, with a maximum of 2 years after handling.

6.4 We retain newsletter e-mail addresses until the moment of unsubscribing.

6.5 Aggregated analytics data is retained for statistical purposes and cannot be traced to individual persons.

7. Cookies

7.1 For the webshop to function, we use functional cookies or comparable techniques, for example to remember the shopping basket, the language choice and, if applicable, the login. These functional cookies are always active and do not require consent.

7.2 For website statistics, we use a self-hosted analytics solution that works without cookies: no cookie is placed on the visitor's device and no individual visitor profile is built.

7.3 Other cookies, including marketing or remarketing cookies, are only placed with the visitor's prior consent. As soon as we start using such cookies, we will implement a cookie banner with a consent mechanism and update this privacy statement, and if applicable a separate cookie statement, accordingly.

7.4 The current cookie and consent settings of the webshop determine which cookies are actually placed and under what conditions.

8. Transfers outside the European Union

8.1 Our service providers, including the hosting party, are established within the European Union. We aim to process personal data within the EU as much as possible.

8.2 If personal data is transferred to a party outside the European Economic Area in the future, we will ensure appropriate safeguards in accordance with the GDPR, such as the European Commission's standard contractual clauses.

9. Security

9.1 We take appropriate technical and organisational measures to protect personal data against loss or against any form of unlawful processing.

9.2 Payment data is processed through an external payment service provider with its own security measures, and is not fully stored by us.

10. Rights of data subjects

10.1 Every customer or visitor has the right to request from us:

Access to the personal data we process about them.
Rectification of inaccurate or incomplete data.
Erasure of personal data, insofar as no statutory retention obligation applies.
Restriction of processing.
Objection to processing, in particular where processing is based on legitimate interest.
Data portability: the transfer of data we process based on consent or agreement, in a structured, commonly used format.
Withdrawal of previously given consent, for example for the newsletter, without affecting the lawfulness of processing before the withdrawal.

10.2 A request under article 10.1 can be submitted via legal@sourceparts.eu. We respond within 1 month of receiving the request.

10.3 To make sure a request has actually been made by the data subject themselves, we may ask for additional identification.

11. Complaints

11.1 For questions or complaints about the processing of personal data, please contact legal@sourceparts.eu.

11.2 A data subject also has the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

12. Changes to this privacy statement

12.1 We may amend this privacy statement, for example following changes to our services, the use of new processors, or the introduction of cookies as referred to in article 7.3.

12.2 The most current version of this privacy statement is available at shop.sourceparts.eu.

13. Contact

Aldewereld Consultancy, trading under the trade name SourceParts.eu
Chamber of Commerce (KvK) number: 61862533
VAT identification number: NL002168402B79
Postal address: Nieuwe Hemweg 26, 1013CX Amsterdam, the Netherlands
E-mail: legal@sourceparts.eu