Data controller Aan het Fornuis Address: Effer 24, 5684 KV Best, the Netherlands KVK: 42178554 · VAT ID: NL005560233B82 Email: info@aanhetfornuis.nl
Last amended: 1 November 2026
1. What this statement covers
This statement sets out which personal data we process when you visit our website or order a book, why we do so, and what rights you have.
We sell cookbooks. We do not sell data, and we do not use your data to build profiles or target advertising.
2. What data we process
2.1 When you order
| Data | Why |
|---|---|
| Name | to put the order in your name and issue the invoice |
| Email address | to send the confirmation, the invoice and the download link |
| Billing address | legally required on the invoice |
| Delivery address | only for printed books, in order to deliver them |
| Order details | which books, in which language, for what amount |
| Payment status | to know whether payment succeeded |
| Consent to immediate delivery | to be able to demonstrate your agreement (see right of withdrawal) |
For an order containing only digital books we do not ask for a delivery address.
2.2 Payment data
Your bank or card details never reach us. They are processed directly by our payment provider, Mollie. We only see whether a payment succeeded, by which method and for what amount.
2.3 When you visit the site
| Data | Why |
|---|---|
| Technical logs (IP address, browser, pages requested) | to keep the site working and prevent abuse |
| Functional cookies | to remember your basket and language choice |
We use no analytics or advertising cookies and do not track you across websites.
2.4 An account
If you have an account, it holds your name, email address, address, order history and download links, so that you can find them yourself.
3. Legal basis
| Purpose | Basis |
|---|---|
| Fulfilling and delivering your order | performance of the contract |
| Invoicing and bookkeeping | legal obligation (tax retention) |
| Customer service | performance of the contract / legitimate interest |
| Security and fraud prevention | legitimate interest |
| Newsletter, if introduced | your consent |
4. Who we share data with
We use a small number of parties that process data on our behalf. A data processing agreement is in place, or will be put in place, with each of them.
| Party | Role | What they receive |
|---|---|---|
| Mollie B.V. (Netherlands) | payments | name, email address, amount, payment details |
| Gelato ASA (Norway) | printing and shipping of printed books | name and delivery address, and which book |
| STRATO GmbH (Germany) | website hosting | technical logs and the data held on the server |
| PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) | payments via PayPal | name, email address, amount |
Gelato receives only what is needed to print and deliver. If you order only digital books, nothing goes to Gelato at all. Gelato may have the printing carried out by a press in your region; your address is then passed to that printer purely in order to deliver.
Beyond this we share data only where the law requires it.
5. Transfers outside the EU
Our processors are located in the European Economic Area or operate under conditions permitted by the GDPR. We only ship printed books within Europe, and Gelato has them printed within Europe.
6. How long we keep data
| Data | Period |
|---|---|
| Invoices and order records | 7 years (Dutch tax retention obligation) |
| Account data | for as long as you have the account, then up to 1 year |
| Download links | for as long as your account exists, so you can find your books |
| Technical logs | a few months at most |
| Customer service correspondence | 2 years |
7. Security
The site runs exclusively over a secure connection (https). Download links are personal and not guessable. Access to the shop’s administration is restricted and password-protected.
8. Your rights
You have the right to:
- access your data;
- have it corrected;
- have it erased (insofar as we are not legally required to keep it);
- have processing restricted;
- object to processing based on legitimate interest;
- receive your data in a common file format (data portability);
- withdraw consent you have given, without affecting what was done before.
Email info@aanhetfornuis.nl. We respond within one month. To avoid handing data to the wrong person, we may ask for additional information that helps us establish that it is you.
9. Making a complaint
If you disagree with how we handle your data, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): autoriteitpersoonsgegevens.nl. You may also complain to the supervisory authority in your own country of residence.
10. Changes
We may update this statement. The current version is always on aanhetfornuis.nl, with the date of last amendment at the top.