Last updated: November 6, 2026
At Grandsarto, we value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, place an order, or contact us.
By using our website, you acknowledge that you have read this Privacy Policy.
1. Who We Are
This website is operated by Grandsarto.
Business Name: Grandsarto
Address:
Grote Visserijstraat 25A
3026 CB Rotterdam
South Holland, Netherlands
Phone: 010 843 8224
Email: support@grandsarto.com
Grandsarto acts as the data controller for the personal information collected through this website, where applicable under the General Data Protection Regulation (GDPR).
2. Personal Information We Collect
When you visit our website, make a purchase, or contact us, we may collect the following information:
-
Full name
-
Billing and shipping address
-
Email address
-
Phone number
-
Order and purchase history
-
Payment and transaction information
-
IP address and device information
-
Browser type and website usage information
-
Information you provide when contacting customer support
We only collect personal information that is necessary for operating our business and providing our services.
3. How We Use Your Information
We use your personal information for the following purposes:
-
To process and fulfil your orders.
-
To arrange shipping and delivery.
-
To process payments and refunds.
-
To communicate with you about your purchases.
-
To respond to customer service requests.
-
To improve our website, products, and services.
-
To prevent fraud and protect website security.
-
To comply with legal and administrative obligations.
-
To send marketing communications where legally permitted and, when required, with your consent.
4. Legal Basis for Processing
Under the GDPR, we process your personal information based on one or more of the following legal grounds:
-
Contract: Processing is necessary to fulfil your order or provide requested services.
-
Legal obligation: Processing is required to comply with applicable laws and regulations.
-
Legitimate interests: Processing is necessary to protect our business, prevent fraud, or improve our services, provided your rights are respected.
-
Consent: You have given permission for specific processing activities, such as certain marketing communications or non-essential cookies.
You may withdraw your consent at any time where processing is based on consent.
5. Sharing Your Personal Information
We do not sell your personal information.
We may share necessary information with trusted third parties that help us operate our business, including:
-
Payment service providers.
-
Shipping and delivery companies.
-
Website hosting providers.
-
Website maintenance and technical service providers.
-
Customer support services.
-
Analytics and marketing providers, where permitted by law.
These providers may only process personal information as necessary to perform their services and must comply with applicable data protection requirements.
We may also disclose information when required by law or to protect our legal rights.
6. Cookies and Tracking Technologies
Our website may use cookies and similar technologies to improve your browsing experience.
Cookies may be used to:
-
Ensure the website functions properly.
-
Remember your preferences.
-
Keep items in your shopping cart.
-
Understand how visitors use our website.
-
Improve website performance.
Where required by law, we will request your consent before placing non-essential cookies on your device.
You can manage or withdraw your cookie preferences through our cookie settings or your browser settings.
7. Data Retention
We retain personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy or to comply with applicable legal obligations.
For example, certain financial and transaction records may need to be retained for statutory accounting and tax purposes under Dutch law.
When personal information is no longer required, it will be securely deleted or anonymised.
8. Data Security
We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, alteration, or disclosure.
Although we work to protect your information, no online transmission or electronic storage method can be guaranteed to be completely secure.
9. Your Privacy Rights
Under the GDPR, you may have the following rights:
-
Right of access: Request a copy of your personal information.
-
Right to rectification: Request correction of inaccurate information.
-
Right to erasure: Request deletion of your personal information where legally applicable.
-
Right to restriction: Request restrictions on certain processing activities.
-
Right to data portability: Request your information in a commonly used electronic format.
-
Right to object: Object to certain types of personal data processing.
-
Right to withdraw consent: Withdraw previously given consent at any time.
To exercise your rights, please contact us using the contact details below.
We may need to verify your identity before processing your request.
10. Third-Party Websites
Our website may contain links to external websites or services.
We are not responsible for the privacy practices, policies, or content of third-party websites.
We recommend reviewing their privacy policies before providing personal information.
11. Children’s Privacy
Our website is not intended to knowingly collect personal information from children without the required parental or legal consent.
If we become aware that personal information has been collected unlawfully from a child, we will take appropriate steps to address the situation.
12. International Data Transfers
Some of our third-party service providers may process personal information outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, we will ensure that appropriate safeguards are in place in accordance with applicable data protection laws.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, website, services, or legal requirements.
Any updates will be published on this page with a revised “Last updated” date.
We encourage you to review this page periodically.
14. Contact Us
If you have questions about this Privacy Policy, how we handle your personal information, or wish to exercise your privacy rights, please contact us:
Business Name: Grandsarto
Address:
Grote Visserijstraat 25A
3026 CB Rotterdam
South Holland, Netherlands
Phone: 010 843 8224
Email: support@grandsarto.com
Website: Grandsarto
15. Right to Lodge a Complaint
If you believe that we have not handled your personal information correctly, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Website: grandsarto.com
We encourage you to contact us first so that we can try to resolve your concerns.