We understand that the security and confidentiality of the data of our members, subscribers, visitors, and customers are very important. That is why we take data protection very seriously and are committed to protecting your personal data throughout your use of the website www.enroush.fr (the “Website”) and our services.

1. General Information

This Privacy Policy (the “Policy”) explains how Enroush Benelux BV, a company incorporated and operating under Dutch law, with its registered office at Westerplantage 5, 8911 DC Leeuwarden, the Netherlands, registered with the Dutch Chamber of Commerce under number KvK 96171251 (hereinafter the “Company”), collects, processes, and protects your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

“Personal data” means any information relating to an identified or identifiable natural person (“Personal Data” or “Data”).

The Company acts as the data controller, meaning it determines the purposes and means of processing your Personal Data.

The Company undertakes to process your Personal Data lawfully, fairly, and transparently, and to ensure their security and confidentiality in accordance with the GDPR and applicable national laws.

The Company reserves the right to amend this Policy at any time. Any changes will be published on the Website. We encourage you to review this Policy regularly.

For any questions regarding your Personal Data, you may contact us at:

Enroush Benelux BV
Westerplantage 5
8911 DC Leeuwarden
The Netherlands
Email: privacy@enroush.fr

For product returns only:
Efulfilment Europe BV c/o Enroush
Wittevrouwen 21
1358 CD Almere
The Netherlands

2. Principles Relating to the Processing of Personal Data

The Company complies with the following principles:

• Lawfulness, fairness, and transparency
• Purpose limitation
• Data minimization
• Accuracy
• Storage limitation
• Integrity and confidentiality
• Accountability

3. Purposes and Legal Bases of Processing

The Company processes your Personal Data for the following purposes:

a) Performance of a contract

Processing orders, payments, deliveries, returns, warranties, and customer service.
Legal basis: Art. 6(1)(b) GDPR – performance of a contract.

b) Marketing and commercial communications

Sending promotional emails or SMS messages, newsletters, and commercial offers.
Legal basis: Art. 6(1)(a) GDPR – explicit prior consent.
Consent may be withdrawn at any time without affecting purchases.

c) Legal obligations

Accounting, invoicing, tax obligations, and cooperation with authorities.
Legal basis: Art. 6(1)(c) GDPR – legal obligation.

d) Service and user experience improvement

Statistical analysis and improvement of the Website and Products.
Legal basis: Art. 6(1)(a) GDPR – consent, where required.

e) Management of requests and complaints

Responding to inquiries, comments, and disputes.
Legal basis: Art. 6(1)(f) GDPR – legitimate interest, while respecting your rights.

f) Social media content

Use of publicly shared content with your explicit consent.
Legal basis: Art. 6(1)(a) GDPR – consent.

4. Types of Personal Data Collected

The Company may collect in particular:

• Identity data: first name, last name
• Contact details: email address, phone number, postal address
• Order and billing data
• Payment data (processed via secure payment providers)
• Browsing data: IP address, browser type, device information
• Social media data (public content with consent)

Sensitive data

The Company does not intentionally collect or process special categories of personal data within the meaning of Article 9 GDPR (racial or ethnic origin, political opinions, religious beliefs, health data, sexual orientation, criminal records).

Any sensitive data sent unintentionally will be deleted immediately.

5. Data Collection Methods

Personal Data are collected:

• Directly from you
• When creating a user account
• When placing an order
• Through forms on the Website
• Through newsletter subscription
• Through interactions on social media (where applicable)

You may modify or delete your information at any time via your user account.

6. Data Retention Periods

Personal Data are retained as follows:

• Account data: as long as the account is active
• Order data: statutory accounting period (10 years)
• Marketing data: until consent is withdrawn
• Inactive prospect data: maximum of 3 years

7. Data Recipients

Personal Data may be shared with:

• Logistics and technical service providers
• Payment service providers
• Competent authorities where required by law

The Company does not sell or rent Personal Data.

8. Transfers of Personal Data Outside the EU

Some Personal Data may be transferred outside the European Union, including to the United States.

Such transfers are carried out with appropriate safeguards, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions where applicable

9. Your Rights

In accordance with the GDPR, you have the following rights:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to object
• Right to data portability

You may exercise your rights at any time by contacting: privacy@enroush.fr

10. Use of the Website by Minors

The Website is intended for individuals aged 18 years and over.
No Personal Data of minors are intentionally collected.

11. Data Security

The Company implements appropriate technical and organizational measures to protect your Personal Data against unauthorized access, loss, or disclosure.

12. Cookies

The Website uses cookies and similar technologies.

The rules governing the use, management, and refusal of cookies are described in the Cookie Policy available on the Website.

You may print, download, or keep a copy of this Privacy Policy for your records.

ENROUSH BENELUX BV
Westerplantage 5
8911 DC Leeuwarden
The Netherlands