Zásady ochrany osobních údajů
Version: February 2026
Applicable to: www.mrsnoep.nl
1. Who are we?
This privacy policy applies to the processing of personal data by:
Company name: Candy Company
Trade name: Mr Snoep
Legal form: Sole proprietorship
Registered address:
Jelle Zijlstraweg 204
1689 ZX Zwaag
Netherlands
Chamber of Commerce number: 95541748
VAT number: NL005160287B23
Email: klantenservice@mrsnoep.nl
Phone: +31 6 29557531
Candy Company is the data controller within the meaning of the General Data Protection Regulation (GDPR).
2. Which personal data do we process?
We process among others the following personal data:
- First and last name
- Address data
- Email address
- Phone number
- Payment data
- IP address
- Order history
- Account data
- Browsing behavior on our website
- Data about click and purchase behavior
3. For which purposes do we process personal data?
We process personal data based on Article 6 GDPR on the following legal grounds:
Performance of the contract
For processing orders, payments and deliveries.
Legal obligation
For tax administration and legal retention obligations.
Legitimate interest
For fraud prevention, security of our webshop and optimization of our services.
Consent
For email marketing, tracking cookies and personalized advertisements.
4. Payment providers
For processing payments we use:
- Shopify Payments
- Mollie
- Klarna
- PayPal
These parties process your payment data according to their own privacy policies. Candycompany does not store full payment card details.
5. Marketing and analysis
We use the following services:
- Google Analytics 4
- Google Ads
- Meta Pixel (Facebook & Instagram)
- ProfitMetrics
- Channable
- Xendy (email marketing)
- Trustpilot
- WebwinkelKeur
These parties may process personal data for:
- Analysis of website usage
- Conversion measurement
- Ad optimization
- Sending newsletters
- Sending review requests
Tracking and marketing cookies are only placed after explicit consent via our cookie banner.
6. Transfer outside the European Union
Some service providers, such as Google and Meta, may process personal data outside the European Economic Area (EEA).
In that case, we provide appropriate safeguards, such as:
- Standard Contractual Clauses (SCCs)
- EU-U.S. Data Privacy Framework (if applicable)
7. Retention periods
We do not keep personal data longer than necessary:
- Order and invoice data: 7 years (legal fiscal retention period)
- Account data: as long as the account is active
- Marketing data: until unsubscribe
- Analytics data: up to 26 months
8. Cookies
We use the following types of cookies:
Functional cookies
Necessary for the functioning of the webshop.
Analytical cookies
For insight into website usage (Google Analytics 4).
Marketing cookies
For personalized ads (Meta, Google Ads).
Marketing and tracking cookies are only placed after explicit consent.
You can change your cookie preferences at any time via the cookie settings on our website.
9. Your rights
Under the GDPR, you have the right to:
- Access to your personal data
- Correction of incorrect data
- Deletion of data
- Restriction of processing
- Objection to processing
- Data portability
You can submit a request via klantenservice@mrsnoep.nl.
We respond within 30 days.
You also have the right to file a complaint with the Autoriteit Persoonsgegevens or with the supervisory authority in your own EU country.
10. Security
Candy Company takes appropriate technical and organizational measures to protect personal data against loss, misuse, or unauthorized access.
The webshop is hosted via Shopify and secured with SSL encryption.
11. Automated decision-making
We use automated systems for:
- Fraud prevention
- Ad optimization
- Personalized offers
No decisions are made that have legal consequences for consumers without human intervention.
12. Changes
Candy Company reserves the right to change this privacy policy.
The most current version is always available at www.mrsnoep.nl