Privacy Statement (EU)
This privacy statement was last updated on November 2, 2026, and applies to citizens and legal permanent residents of the European Economic Area and Switzerland.
In this privacy statement, we explain what we do with the information we collect about you through https://greenfurbished.nl. We recommend that you read this statement carefully. Our data processing practices comply with the requirements of privacy laws. This means, among other things, that:
- We clearly state the purposes for which we process personal data. We do so through this privacy statement;
- We strive to limit our collection of personal data to only the personal data necessary for legitimate purposes;
- We will first ask for your explicit consent to process your personal data in cases where your consent is required;
- we take appropriate security measures to protect your personal data and require the same of parties that process personal data on our behalf;
- We respect your right to access, correct, or delete your personal data upon your request.
If you have any questions or would like to know exactly what information we have on file about you, please contact us.
1. Purpose, Data, and Retention Period
We may receive or collect personal data for a number of purposes related to our business operations, including the following: (click to expand)1.1 Contact—by phone, mail, email, and/or web forms
1.1 Contact—by phone, mail, email, and/or web forms
For that purpose, we use the following personal data:
- A first and last name
- an email address
- A phone number
- Biometric Information
- A home address or other physical address, including the street name and the name of a city or town
The legal basis on which we are permitted to process this data is:
Retention Period
The retention period is determined based on the following objective criteria: We retain contact information for as long as necessary to respond to and process the request, handle any follow-up, and address related questions or disputes. After that, the data is deleted or anonymized, unless there is a legal obligation to retain it.
1.2 Payments
1.2 Payments
For that purpose, we use the following personal data:
- A first and last name
- A home address or other physical address, including the street name and the name of a city or town
- an email address
- A phone number
The legal basis on which we are permitted to process this data is:
Retention Period
The retention period is determined based on the following objective criteria: We retain contact information for as long as necessary to respond to and process the request, handle any follow-up, and address related questions or disputes. After that, the data is deleted or anonymized, unless there is a legal obligation to retain it.
1.3 Create an Account
1.3 Create an Account
For that purpose, we use the following personal data:
- A first and last name
- A home address or other physical address, including the street name and the name of a city or town
- an email address
- A phone number
- Account name or alias
The legal basis on which we are permitted to process this data is:
Retention Period
The retention period is determined based on the following objective criteria: We retain customer account data for as long as the account is active and the data is necessary for providing our services. After the account is deleted or terminated, we delete or anonymize the data, unless legal retention requirements or ongoing obligations require further retention.
1.4 To comply with legal obligations
1.4 To comply with legal obligations
For that purpose, we use the following personal data:
- A first and last name
- an email address
- A home address or other physical address, including the street name and the name of a city or town
- A phone number
The legal basis on which we are permitted to process this data is:
To comply with a legal or regulatory obligation.
Retention Period
The retention period is determined based on the following objective criteria: We retain invoices, order data, and financial records for the legally required retention period. For Dutch basic tax records, this is generally 7 years. For transactions covered by the European OSS scheme, a retention period of 10 years applies. Upon expiration of these periods, we delete or anonymize personal data to the extent that further retention is not required by law.
1.5 Collecting and Analyzing Statistics to Improve the Site
1.5 Collecting and Analyzing Statistics to Improve the Site
For that purpose, we use the following personal data:
- IP Address
- Information about internet activity, including but not limited to browsing history, search history, and information about a consumer's interaction with a website, application, or advertisement
- Geolocation data
The legal basis on which we are permitted to process this data is:
Retention Period
The retention period is determined based on the following objective criteria: We retain analytical data in accordance with the retention periods set in Google Analytics 4. These depend on the nature of the data and the configuration of our analytics tools. Data is automatically deleted or anonymized once the applicable retention period has expired.
1.6 To be able to offer personalized products and services
1.6 To be able to offer personalized products and services
For that purpose, we use the following personal data:
- IP Address
- Information about internet activity, including but not limited to browsing history, search history, and information about a consumer's interaction with a website, application, or advertisement
- Geolocation data
The legal basis on which we are permitted to process this data is:
Retention Period
The retention period is determined based on the following objective criteria: We process data for personalized ads and offers as long as valid consent is in place. The retention periods depend on the timeframes set in our advertising and analytics tools. When consent is withdrawn, we stop the relevant tracking. Data is deleted or anonymized in accordance with the applicable retention periods.
1.7 To sell or share data with a third party
1.7 To sell or share data with a third party
For that purpose, we use the following personal data:
- IP Address
- Information about internet activity, including but not limited to browsing history, search history, and information about a consumer's interaction with a website, application, or advertisement
The legal basis on which we are permitted to process this data is:
Retention Period
The retention period is determined based on the following objective criteria: We share certain personal data with external advertising and analytics services when there is a valid legal basis for doing so. The retention periods depend on the purpose of the processing, the applicable consents, and the retention periods of the relevant service providers. If consent is withdrawn, we will cease any further data sharing based on that consent.
1.8 To provide support for services or products that a customer wishes to purchase or has purchased
1.8 To provide support for services or products that a customer wishes to purchase or has purchased
For that purpose, we use the following personal data:
- A first and last name
- A home address or other physical address, including the street name and the name of a city or town
- an email address
- A phone number
The legal basis on which we are permitted to process this data is:
Retention Period
The retention period is determined based on the following objective criteria: We retain customer data for as long as necessary to handle inquiries, orders, warranty claims, returns, and complaints. Once these matters have been resolved, the data is deleted or anonymized when further retention is no longer necessary, unless legal retention requirements or ongoing disputes require further retention.
1.9 Newsletters
1.9 Newsletters
For that purpose, we use the following personal data:
- an email address
- IP Address
The legal basis on which we are permitted to process this data is:
Retention Period
The retention period is determined based on the following objective criteria: We retain newsletter data for as long as the data subject remains subscribed. After unsubscription, we stop sending marketing messages and retain only the data necessary to honor the unsubscription and to be able to demonstrate the consent granted or the unsubscription, for as long as necessary. Copy.
2. Sharing with Other Parties
We share this data only with Processors and other Third Parties, for which consent is required.
Processors
Name:Mailchimp
Country:United States
Purpose:
Third Parties
Name:Google Ads (Google)
Country:Ireland
Purpose:To measure ad conversions, evaluate ad performance, and, with consent, serve personalized ads and remarketing.
Data:IP addresses, online identifiers, website interactions, pages viewed, and conversion data. Hashed customer data may be collected if Enhanced Conversions are used.
3. Cookies
Our site uses cookies. For more information about cookies, please see our Cookie Policy.
4. Sharing with Other Parties
We share personal data if we are required by law or by a court order, in response to a request from a law enforcement agency, to the extent permitted by other legal provisions, to provide information, or in connection with an investigation into a matter related to public safety.
If our site or organization is acquired, sold, or involved in a merger or acquisition, your information may be shared with our advisors and potential buyers and transferred to the new owners.
We have entered into a Data Processing Agreement with Google.
5. Security
The security of personal data is of great importance to us. We take appropriate security measures to prevent misuse of and unauthorized access to personal data. For example, we ensure that only those who need to know have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.
6. Third-Party Websites
This Privacy Statement does not apply to third-party websites linked to from these sites. We do not guarantee that these websites will handle your personal data in a reliable and secure manner. We recommend that you read the privacy statements of these websites before using them.
7. Changes to This Privacy Statement
We reserve the right to make changes to this privacy statement. We recommend that you review this privacy statement regularly so that you are aware of these changes. In addition, we will actively notify you of any changes whenever possible.
8. Accessing and Updating Your Information
If you have any questions or would like to know what personal information we have about you, please contact us. You can reach us using the contact information below. You have the following rights:
- You have the right to know why your personal data is needed, what happens to it, and how long it will be retained.
- Right of access: You may submit a request to access the data we process about you
- Right to Rectification and Supplementation: You have the right to supplement, correct, delete, or block your personal data at any time.
- If you give us permission to process your data, you have the right to withdraw that permission and have your personal data deleted.
- Right to data portability: You have the right to request all of your personal data from the Data Controller and to transfer it in its entirety to another Data Controller.
- Right to object: You may object to the processing of your data. We will comply with your request unless there are legitimate grounds for processing.
Please be sure to always clearly state who you are so that we can be certain we are not modifying or deleting the wrong person's information.
9. File a complaint
If you are not satisfied with the way we handle (a complaint regarding) the processing of your personal data, you have the right to file a complaint with the Dutch Data Protection Authority.
10. Contact Information
Greenfurbished
Bruistensingel 400, 5232 AG
's-Hertogenbosch
Netherlands
Website: https://greenfurbished.nl
Email: info@ex.comgreenfurbished.nl
Phone number: +31 (0) 85 333 20 10
11. Data Requests
For the most common requests, we also offer you the option of using our data request form
