www.wallsharks.com

Privacy policy

WALLSHARKS

Privacy Policy

Version: September 11, 2026

This privacy policy is intended for visitors, customers, and other persons whose personal data is processed by Wallsharks. Wallsharks processes personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy legislation.

1. Controller

Wallsharks is the controller for the personal data processed via wallsharks.com, orders, customer contact, business contacts, and associated services.

Wallsharks
Wikkebeek 17
5501 EW Veldhoven
The Netherlands

Chamber of Commerce (KvK): 93349254
Email for privacy inquiries: support@wallsharks.com

2. What personal data do we process?

Depending on your contact with Wallsharks, we may process the following data, among others:

Name and form of address.
Billing and shipping address.
Email address and phone number.
Order, payment, return, and invoice details.
Data that you provide yourself via contact forms, email, or other communication.
Data about your preferences and communication choices, for example, your subscription to a newsletter.
Technical data, such as IP address, browser, device, language settings, and data about your use of the website, insofar as these are considered personal data under the GDPR.
Data required for delivery and shipping, such as address details and contact information.

3. For which purposes and on what legal grounds?

We process personal data only for clear and legitimate purposes. Depending on the situation, the legal basis is:

Performance of the contract: for example, for processing an order, payment, delivery, return, or customer service.
Legal obligation: for example, for tax administration, invoicing, and complying with legal requests.
Legitimate interest: for example, for security, fraud prevention, improving our services, and handling disputes, while balancing the interests and rights of data subjects.
Consent: for example, for certain newsletters or non-essential cookies where consent is required.

We do not collect more personal data than is necessary for the relevant purpose.

4. With whom do we share personal data?

Wallsharks does not sell or rent personal data to third parties.

We only share personal data when necessary for our services, when an external party processes personal data on our behalf, when you have given your consent, or when we are legally required to do so.

Examples include Shopify, Sendcloud, carriers, payment service providers, e-Boekhouden.nl, WebwinkelKeur, our business email provider, and other service providers necessary for the performance of our business activities.

5. Shopify

Our webshop runs on Shopify. Shopify processes personal data necessary for the functioning of the webshop, including data you provide when placing an order or creating and using a customer account.

Shopify may process personal data as a service provider and may, depending on the Shopify services used, process personal data outside the European Economic Area. Such transfers must take place on the basis of appropriate legal safeguards.

More information about Shopify's privacy and data processing is available in Shopify's privacy documentation.

6. Sendcloud and carriers

We use Sendcloud to process and organize shipments. When you place an order, the data necessary for shipping – such as name, delivery address, email address, phone number, and order or shipping details – may be passed on to Sendcloud via our systems.

When processing our customers' personal data in the context of the integration, Sendcloud generally acts as a processor on behalf of Wallsharks. The processing takes place on the basis of the applicable data processing agreements.

Via Sendcloud, data may subsequently be processed by the carrier performing the shipment, for example for delivery, tracking, and customer service regarding the shipment.

We limit the data shared for shipping to what is necessary for the shipping process.

7. Payment services

For payments, we may use Shopify Payments and/or other payment methods offered during checkout, such as iDEAL, credit card, PayPal, Apple Pay, Google Pay, Shop Pay, and Klarna, insofar as these are available at the time of the order.

The chosen payment service provider processes the payment data required to perform the payment. Wallsharks does not receive and store more payment data than is necessary for administration, customer service, and legal obligations.

8. WebwinkelKeur, e-Boekhouden.nl, and business email

WebwinkelKeur: when you post a review or are invited to post a review, name, email address, order information, and review data may be processed to perform the review service and link it to an order.

e-Boekhouden.nl: for our administration, we process necessary data, including name, address, order, and invoice details. This data is processed to perform our financial administration and legal obligations.

Business email: for business email communication, we may use an external email provider. Personal data in correspondence is processed exclusively for conducting and managing business communication and services.

9. Newsletters and marketing

When you sign up for a newsletter, we process your email address and, if you have provided it, your name to send the newsletter.

Newsletters are sent on the basis of consent when consent is legally required. You can unsubscribe at any time via the unsubscribe option in the newsletter or by contacting us.

Unsubscribing from marketing communication does not affect necessary communication regarding an existing order or contract.

10. Cookies and similar technologies

Wallsharks uses necessary cookies and similar technologies to ensure the website functions properly, for example for shopping cart functionality, security, language, and session preferences.

For analytical, marketing, or other non-essential cookies, we ask for prior consent via our cookie settings where legally required.

You can change your cookie preferences or withdraw consent via the cookie settings on the website. Withdrawing consent does not affect the lawfulness of processing that occurred prior to the withdrawal.

We may use, among other things, Shopify analytics and, if activated and permitted based on your cookie preferences, Google Analytics or similar analytical tools. The exact current cookie settings and providers are listed in Wallsharks' cookie policy.

11. Transfers outside the EEA

Some service providers we use may process personal data outside the European Economic Area. When this occurs, we ensure that an appropriate legal basis and appropriate safeguards are in place, such as an adequacy decision or standard contractual clauses approved by the European Commission, insofar as required.

We attempt to limit international transfers as much as possible to what is necessary for our services.

12. Retention periods

We do not retain personal data longer than necessary for the purpose for which it was collected, unless a legal retention obligation or another legitimate interest requires a longer retention period.

For tax administration in the Netherlands, a general legal retention obligation of 7 years applies. Data that is part of the administration is therefore retained for that period, insofar as necessary.

Data not subject to a legal retention obligation is deleted or anonymized when it is no longer needed for the purpose for which it was collected, taking into account any ongoing disputes, claims, or other legal obligations.

For newsletters, we retain your data until you unsubscribe or until the data is no longer necessary for the relevant purpose, except for data we must retain to demonstrate your prior consent or unsubscription.

13. Security

Wallsharks takes appropriate technical and organizational measures to protect personal data against loss, unauthorized access, alteration, disclosure, and other unlawful use.

We limit access to personal data to persons and service providers who need this data for their work.

14. Your privacy rights

Depending on the circumstances and the exceptions in the GDPR, you have the following rights:

Right to access your personal data.
Right to rectification of incorrect or incomplete personal data.
Right to erasure of personal data when there is a legal ground for this.
Right to restriction of processing.
Right to data portability when legally applicable.
Right to object to certain processing, particularly processing based on legitimate interest.
Right to withdraw previously given consent.
Right not to be subject to solely automated decision-making with legal effects or similarly significant consequences, insofar as applicable.

You can send a request to support@wallsharks.com. To protect your privacy, we may ask for sufficient information to verify your identity. We will not ask for more identification data than is necessary.

In principle, we will respond to a privacy request within one month. In complex cases, this period may be extended within the legal conditions.

15. Complaints

If you have a complaint about the processing of your personal data, please contact us first via support@wallsharks.com.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the competent privacy supervisor in the country where you live or work.

16. Changes

We may change this privacy policy if our services, data processing, or applicable legislation change. The most recent version will be published on wallsharks.com.

When a change has significant consequences for how we process personal data, we will inform affected parties appropriately where legally required.

17. Contact

For questions about this privacy policy or the processing of your personal data, please contact us via: