Menu
Your Cart

Privacy Policy

 

Privacy Policy – Blackout Music NL

1. Data Controller

The following entity is the data controller responsible for the processing of personal data as described in this privacy policy:

Company name: Vals B.V. (trading as Blackout Music NL and Black Sun Empire)
Address: Nijverheidsweg 27e, 3534 AM, Utrecht, The Netherlands
Chamber of Commerce (KvK) number: 92876730
VAT number: NL866202237B01
Email: info@blackoutmusic.nl

2. Personal Data We Collect

We collect and process only the personal data that is strictly necessary for the purposes described in this policy. This may include:

  • First and last name

  • Email address

  • Phone number (if voluntarily provided)

  • Billing and shipping address (only when placing an order)

  • Payment details (handled securely by third-party payment providers)

We do not collect or process personal data beyond what is necessary for these purposes.

3. Purpose and Legal Basis for Processing

Your personal data is processed exclusively for communication related to Blackout Music NL and for order fulfillment. We rely on the following legal bases under the GDPR:

  • Performance of a Contract: Processing and delivering orders, handling payments, and providing customer support.

  • Consent: Sending updates or responding to inquiries (including newsletters where applicable).

  • Legitimate Interest: Communicating with existing customers about similar products or services, provided that you are given a clear and easy option to opt out at any time.

  • Legal Obligation: Retaining transaction data for tax and accounting purposes.

We do not use your data for profiling, resale, or unrelated marketing activities.

4. Data Retention Periods

We retain personal data only for clearly defined and limited periods:

  • Order and invoice data: 7 years (legal obligation).

  • Customer service communications: Up to 1 year after resolution.

  • Email communication data: Until you unsubscribe or request deletion.

5. Sharing Personal Data (Processors)

We only share personal data with third parties where strictly necessary to provide our services, such as payment providers (e.g., Mollie, Stripe, PayPal), hosting providers, and shipping services.

Payment providers may act as independent data controllers for payment processing.

All third parties are bound by data processing agreements in accordance with GDPR where applicable. We do not sell your data.

6. International Data Transfers

If any of our processors are located outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, and where necessary, additional safeguards to ensure an adequate level of data protection.

7. Cookies

We only use cookies that are necessary for the functioning of the website (functional cookies). Non-essential cookies (analytical or marketing) are only placed after your explicit consent via our cookie banner.

You can manage or withdraw your consent at any time via the cookie settings on our website.

8. Your Rights Under GDPR

You have the right to access, rectify, or erase your personal data. You also have the right to restrict processing, object to processing, and the right to data portability.

To exercise these rights, contact info@blackoutmusic.nl. We will respond within 30 days.

You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

9. Communication and Unsubscribing

You can unsubscribe from our communications at any time by:

  1. Clicking the 'unsubscribe' link in our emails.

  2. Sending a request to info@blackoutmusic.nl.

10. Data Security

We implement appropriate technical and organizational measures, including SSL encryption, access controls, and secure data storage practices, to protect your personal data against unauthorized access, loss, or misuse.

11. Changes to This Privacy Policy

We reserve the right to update this policy to remain compliant with applicable laws.

12. Website Usage Data

We may collect limited technical data such as IP address, browser type, and device information for security and functionality purposes. This data is not used for profiling.