Privacy statement

Last updated: 1 January 2026

Effe Een Spel (trading as Kapitein Spel) processes personal data of customers and visitors of kapiteinspel.nl. In this privacy statement we explain which data we process, why we do so, how long we keep it and which rights you have. We handle your data with care and comply with the General Data Protection Regulation (GDPR).

Who we are

Kapitein Spel is a trade name of Effe Een Spel, a general partnership (vennootschap onder firma). We are the controller for the processing of your personal data.

• Name: Effe Een Spel (trading as Kapitein Spel)
• Address: Mildijk 38, 4214 DS Vuren, the Netherlands
• Chamber of Commerce (KvK) number: 91788854
• Email: [email protected]
• Phone: +31 88 023 3555

Do you have questions about your privacy or would you like to submit a request regarding your data? Please email [email protected].

Which data we process and why

Below we set out, per purpose, which data we process and on which legal basis under the GDPR we do so.

Handling your order

When you place an order, we process your name, delivery and billing address, email address and phone number. If you place a business order, you may choose to provide a company name as well. We use this data to process and deliver your order and to contact you about it.

Legal basis: performance of the contract.

Payment

For payment we process the data needed to complete the transaction. The payment itself is handled by our payment provider. We do not store full payment details such as your card number.

Legal basis: performance of the contract and compliance with a legal obligation.

Your account

You can create an account with us, but you do not have to. You can also order as a guest. If you create an account, we store your details and order history so that you can find them again easily and do not have to re-enter them each time.

Legal basis: performance of the contract and your consent.

Invoicing and administration

We process order and invoice data for our administration. We are legally required to keep this data for a set period.

Legal basis: compliance with a legal obligation.

Newsletter

If you sign up for our newsletter, we process your email address to send it to you. You can unsubscribe at any time via the unsubscribe link at the bottom of every newsletter or by emailing [email protected]. After you unsubscribe, we no longer send you the newsletter.

Legal basis: your consent.

Reviews

You can leave a review about a product you bought from us. You can also leave a review about Kapitein Spel as a business via Trustpilot. For a product review we process the data you enter yourself, such as your name or display name and your rating. Reviews via Trustpilot are handled by Trustpilot, which is responsible for that processing. See their privacy statement for more information.

Legal basis: your consent.

Customer service

If you contact us, for example by email or phone, we process the data you give us in order to answer your question.

Legal basis: performance of the contract and our legitimate interest in helping you well.

Website, security and fraud prevention

We process limited technical data to keep our website working properly and securely and to prevent misuse.

Legal basis: our legitimate interest in a secure and functioning website.

Statistics

With your consent, we use analytical cookies to measure how our website is used, so that we can improve it. You can read more about this in our Cookie Policy.

Legal basis: your consent.

Who we share your data with

We do not sell your data. We only share it with parties that help us deliver our services. We have made agreements with these parties about careful and secure processing of your data (data processing agreements). Among others, we work with:

• Mollie, for handling payments
• Monta, for storing and shipping orders. For delivery, Monta uses carriers including DPD, UPS, DHL, PostNL and GLS
• Klaviyo, for our email marketing and newsletter
• Microsoft, for our business email and for sending confirmation emails
• Algolia, for the search function on our website
• Google, for measuring website statistics and showing a map of our location
• Sevalla (Kinsta) and Upstash, for the hosting and technical operation of our website

We may also share data where we are legally required to do so, for example at the request of a competent authority.

Transfers outside the European Economic Area

Some of our partners are located outside the European Economic Area (EEA) or process data outside the EEA, for example in the United States. Where this happens, we make sure your data remains adequately protected. We do this on the basis of a valid transfer mechanism, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

How long we keep your data

We do not keep your data longer than necessary for the purposes for which we process it.

• Order and invoice data: 7 years, due to the statutory tax retention obligation
• Account data: until you close your account
• Newsletter data: until you unsubscribe
• Customer service correspondence: up to 2 years after your question is resolved
• Reviews: for as long as they are published
• Analytical data: up to 14 months

Your rights

Under the GDPR you have the following rights:

• The right to access your personal data
• The right to rectify inaccurate data
• The right to erasure of your data
• The right to restrict processing
• The right to data portability
• The right to object to processing
• The right to withdraw your consent, where processing is based on consent

You can submit a request by emailing [email protected]. We respond within the statutory period. To verify your identity, we may ask you for additional details.

Automated decision-making

We do not make decisions about you based on automated processing that has significant effects on you.

Security

We take appropriate technical and organisational measures to protect your data against loss and against unlawful processing.

Cookies

Our website uses cookies. How we do this and which cookies we place is explained in our Cookie Policy.

Filing a complaint

If you disagree with how we handle your data, we would like to hear about it at [email protected]. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes

We may update this privacy statement. The most recent version is always available on our website. At the top of this page you can see when the statement was last updated.