We understand that the security and confidentiality of the data of our members, subscribers, visitors, and customers are of utmost importance. That is why we take data protection seriously and are committed to protecting your personal data throughout your use of the website www.enroush.nl (“the Website”) and our services.

1. General Information

This Privacy Policy (“Policy”) explains how Enroush Benelux B.V., a company incorporated and operating under the laws of the Netherlands, with its registered office at Westerplantage 5, 8911 DC Leeuwarden, The Netherlands, registered with the Dutch Chamber of Commerce under number 96171251 (hereinafter referred to as “Enroush Benelux” or the “Company”), collects, processes, and protects your personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and applicable Dutch data protection laws.
Personal data means any information relating to an identified or identifiable natural person.

Joint Controllers
Enroush Benelux acts as a Joint Controller together with:
ENROUSH SRL, a company incorporated under Romanian law, having its registered office at Frunzei Street no. 26, 021534 Bucharest, Romania, registered with the Trade Registry under no. J2017000295404.
Enroush Benelux and ENROUSH SRL jointly determine certain purposes and means of processing personal data, particularly in relation to:
E-commerce platform hosting
Order and subscription management
Customer support services
IT infrastructure and backend systems
Invoicing systems administration
Marketing communications (email and SMS)
Operational and technical support
The parties have concluded a Joint Controller Agreement in accordance with Article 26 GDPR. The essence of this arrangement is available upon request.
If you wish to contact us regarding your personal data or this Policy, you may do so at:
Enroush Benelux B.V.
Westerplantage 5
8911 DC Leeuwarden
The Netherlands
Email: privacy@enroush.nl
For product returns, please use:
Efulfilment Europe BV t.a.v. Enroush
Wittevrouwen 21
1358 CD Almere
The Netherlands

2. Principles of Processing Personal Data

We process personal data in accordance with the following principles:
Lawfulness, fairness, and transparency
Purpose limitation
Data minimisation
Accuracy
Storage limitation
Integrity and confidentiality
Accountability
Enroush Benelux and ENROUSH SRL, as Joint Controllers, take responsibility for compliance with applicable data protection laws.

3. Purposes and Legal Bases for Processing

We process your personal data for the following purposes:
a) Performance of a Contract
To process, validate, ship, invoice and manage orders, returns, subscriptions and customer service.
Legal Basis: Article 6(1)(b) GDPR.
b) Marketing Communications
To inform you about promotional campaigns, product launches, and updates.
Legal Basis: Article 6(1)(a) GDPR (consent).
c) Legal Compliance
To comply with tax, accounting, and regulatory obligations and to cooperate with competent authorities.
Legal Basis: Article 6(1)(c) GDPR.
d) Service Improvement and Analytics
To analyse user behaviour, preferences, and trends to improve our products and services.
Legal Basis: Article 6(1)(a) GDPR (where consent is required via cookie settings).
e) Responding to Inquiries
To respond to your questions, feedback and requests.
Legal Basis: Article 6(1)(f) GDPR (legitimate interest).
f) User-Generated Content
To store and use social media content shared about Enroush for promotional purposes.
Legal Basis: Article 6(1)(a) GDPR.
If we intend to process your personal data for purposes other than those listed above, we will provide prior notice.

4. Categories of Personal Data Collected

We may collect and process the following categories of personal data:
Name and surname
Company name (where applicable)
VAT number (where applicable)
Email address
Phone number
Billing and delivery address
Payment details (no full card data stored directly by us)
Order and subscription information
IP address and device data
Browser and usage data
Social media profile information (if publicly shared)
User-generated content
We ask that you do not provide special categories of personal data (such as health data, political opinions, religious beliefs, etc.) unless legally required.

5. How We Collect Personal Data

We collect personal data:
Directly from you (orders, contact forms, account registration)
When you create a user account
Through cookies and tracking technologies (where consent is required)
Through social media interactions
Through customer support communications
You may access and update certain personal data via your account settings.

6. Retention Period

We retain personal data only as long as necessary for the purposes for which it was collected.
Examples:
Accounting and tax records: up to 7 years (as required under Dutch law)
Contract-related data: for the duration of the contractual relationship and applicable limitation periods
If you delete your account, certain data may be retained where required by law or for legitimate business purposes.
Withdrawal of marketing consent does not affect prior lawful processing.

7. Disclosure of Personal Data

We may disclose personal data to:
Payment processors
Logistics and shipping providers
IT and hosting providers
Customer support platforms
Marketing and analytics providers
Professional advisors (legal, tax, accounting)
All processors act under binding data processing agreements.

8. International Transfers

Personal data may be processed jointly with ENROUSH SRL in Romania. Romania is a Member State of the European Union; therefore, no additional transfer mechanism is required for transfers within the EU.

Where personal data is transferred outside the EU/EEA, appropriate safeguards will be implemented, such as Standard Contractual Clauses (SCCs).

9. Your Rights

Under the GDPR, you have the following rights:
Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Right to object
Right to withdraw consent
Right not to be subject to automated decision-making
Right to lodge a complaint
You may lodge a complaint with:
Autoriteit Persoonsgegevens
www.autoriteitpersoonsgegevens.nl
To exercise your rights, contact: privacy@enroush.nl
We will respond within one month.

10. Minors

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from minors without appropriate parental consent.

11. Data Security

We implement appropriate technical and organisational measures to protect personal data against:
Accidental loss
Unauthorised access
Unlawful processing
Alteration or destruction
are trained in data protection procedures.

Cookies

Enroush Benelux B.V.