Only what is necessary
We only ask for data that we need for contact, samples, orders, delivery or service.
Privacy · personal data
Privacy Policy
This is a translation of the Dutch text. In case of any discrepancy, the Dutch version prevails. Here you can read which personal data Gordijnen.com uses, what we need it for, how long we keep it and which rights you have.
Last updated: 31 October 2026
No cookie banner
We do not place tracking or advertising cookies. We count visits without cookies on our own server.
No sale of data
We do not sell personal data and we do not create commercial profiles of visitors.
You stay in control
You can request access, correction or deletion and object to processing.
In short
We handle your data with care
When you contact us, request samples or order a curtain, we need data to be able to help you. On this page you can read which data that is, why we use it and which choices you have.
Your data is there to carry out your request or order properly. Not to sell it on or to track you across the internet.
1. Who is responsible?
Gordijnen.com is a trade name and part of BlindDesign. BlindDesign is the controller for the processing of personal data via gordijnen.com and in connection with contact, sample requests, orders and service.
- Gordijnen.com, part of BlindDesign
- Noorderhoofd 95, 3846 JV Harderwijk. This is not a showroom or visiting address.
- Chamber of Commerce (KvK) 55740014 · VAT ID NL002150272B95
- Email: info@gordijnen.com
- Telephone: +31 85 273 63 78
2. Which data do we process?
Which data we process depends on what you do with us.
| Situation | Data |
|---|---|
| Contact form | Name, email address, telephone number, subject, order number, your message and any photos or files you send with it. Also the IP address from which you send the form, solely to prevent misuse of the form. |
| Free samples | Name, street, house number, postcode, town or city, email address, telephone number and the samples you choose (maximum 12). |
| Order | Name, billing and delivery address, email address, telephone number, products and sizes ordered, order number, prices, payment status and payment method. |
| Customer account | Email address, name, telephone number, address, the time of your last login and your password in encrypted form. We cannot read your password. |
| Service and guarantee | Correspondence, photos, order data, complaint, repair and guarantee data. |
| Website visits | Anonymised IP address, browser, device, pages visited, referring page and times. |
3. Purposes and legal bases
Where we rely on a legitimate interest, we weigh our interest against your privacy and limit the processing to what is really necessary.
| Purpose | What do we do? | Legal basis |
|---|---|---|
| Question or advice | Answering your question and assessing your situation. | Steps prior to entering into a contract and legitimate interest. |
| Sending samples | Processing your sample request and sending the samples to you. We do not use your address for newsletters or offers. | Carrying out your request. |
| Fulfilling your order | Making your made to measure product, payment, delivery and keeping in touch with you about the order. | Performance of the contract. |
| Customer account | Letting you log in, showing your previous orders and storing your details so that you do not have to fill them in again each time. | Performance of the contract and legitimate interest. An account is not required. |
| Service and guarantee | Handling questions, complaints, repairs and guarantee claims, and being able to demonstrate agreements. | Contract, legal obligation and legitimate interest. |
| Administration | Keeping invoices and payments for the tax authorities. | Legal obligation. |
| Security | Preventing and investigating misuse, malfunctions and unauthorised access. | Legitimate interest. |
| Website statistics | Measuring visits, ease of use and speed of the website in order to improve it. | Legitimate interest (Article 6 paragraph 1 point f GDPR). Nothing is placed on or read from your device. |
4. Photos, drawings and attachments
If you send photos, drawings or other files via the contact form, we use them to assess your window, situation, order or complaint. We do not publish them or use them for advertising, unless you give separate consent for that.
- Only send photos and files that are needed for your window or order.
- Make sure that no people, documents or other private matters are unnecessarily visible.
5. Ordering and payment
You put together your order on the website. This happens in your own browser: your data is only sent to us when you place the order. It then ends up in our own database, on a server within the European Union.
Payment is handled by our payment processor. You enter your payment details with that payment processor. We are only told whether the payment was successful and which method you used to pay. Your full account or card details never reach us.
After your order, we create an invoice. We keep invoices and payment data for 7 years, because the tax retention obligation requires this.
7. Who do we share data with?
We only share personal data when this is necessary for the purposes above. We make agreements on confidentiality and security with parties that process data on our behalf. We provide the names of our processors on request. Otherwise, we only share data if the law, a supervisory authority or a court requires it. We do not sell personal data.
- Payment processor: for handling your payment. It receives the amount, the order number and whatever is needed to process the payment.
- Hosting and technical management: the website, our database and the statistics software run on our own server within the European Union. So no data leaves for the statistics.
- Email: confirmations and messages about your request or order are delivered via a specialised email service provider, established within the European Union, which acts only on our instructions.
- Carrier: only the data needed to deliver your samples or order.
- Accounting: invoices and payments, for the legally required records.
8. Outside the European Union?
The website, the database, the statistics and email delivery all run within the European Union. So no personal data goes to countries outside the European Union. Should a service provider ever be added that does do so, we will use a legally recognised mechanism, such as an adequacy decision or the standard contractual clauses of the European Commission.
9. How long do we keep data?
We do not keep personal data for longer than necessary, unless the law or an ongoing dispute requires a longer period.
| Data | Retention period | Explanation |
|---|---|---|
| Contact request without an order | Maximum of 2 years after the last contact | For follow-up, recurring questions and proof of what we agreed. |
| Photos and attachments for advice | Maximum of 2 years | Longer if they relate to an order, guarantee case or complaint. |
| Order and invoice data | 7 years | Tax retention obligation for the accounts. |
| Guarantee and complaints | Until the case is closed, and after that for as long as reasonably necessary | For example for a guarantee or a dispute. |
| Customer account | Until you delete the account | Your orders and invoices are kept after that because of the statutory retention obligation, but the link to your account is removed. |
| Visit data | 180 days | After that, only totals remain. |
| Technical security logs | 30 days | Longer only in the event of a specific security incident. |
10. Security
We take appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. The website can only be reached via an encrypted connection, and access to customer data is limited to people who need it for their work.
We never store customer account passwords in readable form, only encrypted. So we cannot view or send you your password. If you have forgotten it, you will receive a link with which you can set a new password yourself.
If you suspect misuse or a data breach, please contact us as soon as possible via info@gordijnen.com.
11. Your privacy rights
You can ask us for access to, correction, erasure, restriction or transfer of your personal data. You can also object to processing based on our legitimate interest, such as the website statistics, and withdraw consent you have previously given. Send your request to info@gordijnen.com. We may ask for additional information to make sure the request comes from you.
We do not take decisions about you that are made solely by a computer.
12. Question or complaint about privacy
If you have a question or complaint about privacy, please contact us first via info@gordijnen.com or +31 85 273 63 78. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
13. Changes
This privacy statement may change if our website, services or legislation change. This page always shows the most recent version. The date at the top shows when it was last updated.
Not sure what to choose?
Just ask us
Call +31 85 273 63 78 or send a message. For an existing order, your order number helps us look into it more quickly.