Privacy Policy — Variété.ist

Last updated: January 2026

1) Who is responsible for your data

Controller: Variété.ist (sole proprietorship, registered in The Netherlands)

  • KVK: 98975129

  • VAT: NL005367041B85

  • Registered city: The Hague, The Netherlands (no public visit address)

  • Contact: info@variete.ist

This Privacy Policy explains how personal data is collected and used when you visit the Variété.ist website or place an order.

2) What personal data is collected

Depending on how you interact with the Website, the following data may be processed:

A) When you place an order

  • Name

  • Email address

  • Billing and shipping address

  • Order details (items purchased, edition details, price, currency)

  • Optional contact details you provide for delivery (e.g., phone number if a carrier requires it)

B) Payments
Payment is processed via Squarespace checkout and its payment processing partners. Variété.ist does not receive or store full card details. Payment-related personal data is processed by the payment processor (Stripe in connection with Squarespace Payments).

C) When you contact customer service

  • Your email address and the content of your message (and any attachments)

D) Website/technical data
When you browse the Website, technical data may be collected automatically (e.g., IP address, device/browser information, pages viewed, and timestamps). This is typically required for site security and basic operation and may involve cookies (see Cookie Policy). Squarespace documents the cookies used on Squarespace sites.

3) Why data is processed (purposes)

Personal data is processed for the following purposes:

  • Processing and delivering orders

  • Customer support and service communication

  • Fraud prevention, security, and maintaining Website integrity

  • Accounting and tax compliance

  • Handling returns/withdrawals (where applicable)

4) Legal bases (GDPR)

Variété.ist processes personal data on the following bases:

  • Performance of a contract (to fulfill orders, deliver products, handle service requests)

  • Legal obligation (financial administration/tax requirements)

  • Legitimate interests (security, fraud prevention, improving reliability and service)

  • Consent (only where required, such as certain non-essential cookies or optional marketing communications)

5) Sharing personal data with third parties

Personal data may be shared with trusted third parties only when necessary, such as:

  • Squarespace (website hosting and ecommerce infrastructure)

  • Payment processors (e.g., Stripe via Squarespace Payments)

  • Shipping carriers to deliver your order (name/address and, if provided, delivery contact details)

  • Professional advisers (e.g., accounting/tax) when required

Squarespace offers a Data Processing Addendum (DPA) for GDPR-related processing.

6) International transfers

Because service providers may operate internationally, personal data can be processed outside the EEA/UK/Switzerland (including the United States). Squarespace states it uses safeguards such as Standard Contractual Clauses for transfers.

7) Data retention

Variété.ist keeps personal data only as long as necessary for the purposes described above and to comply with legal obligations.

  • Order and invoice/administration records: generally 7 years (Dutch tax retention requirement).

  • Customer service correspondence: retained as long as needed to handle the request and possible follow-up, then deleted or anonymized where feasible.

8) Your rights

Depending on your location (and especially within the EU/EEA), you may have the right to:

  • Access your data

  • Correct your data

  • Request deletion (where applicable)

  • Restrict processing

  • Object to processing (in certain cases)

  • Data portability (in certain cases)

  • Lodge a complaint with a supervisory authority (in The Netherlands: the Autoriteit Persoonsgegevens)

To exercise rights, email info@variete.ist with your request. Identity verification may be requested to protect your data.

9) Security

Reasonable technical and organizational measures are used to protect personal data. Payment processing is handled by specialized providers; Squarespace notes PCI standards for payment processing partners.

10) Children

The Website is not intended for children under 16. Variété.ist does not knowingly collect data from children.

11) Changes to this policy

This policy may be updated from time to time. The current version is always published on the Website with the “Last updated” date.