Privacy Policy

Last updated: 18-02-2026

 

  1. Introduction

Welcome to Dutch Citizenshit!
We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable national data protection laws.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website: www.citizenshit.nl

 

  1. Data Controller

The data controller responsible for your personal data is:

Company Name: Map out, Citizenshit
Registered Address: Onderwijsboulevard 648-G
Email: dutch@citizenshit.nl
Company Registration Number: 70785163

 

  1. What Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Information You Provide to Us

  • Name
  • Email address
  • Phone number
  • Billing and shipping address
  • Messages submitted via contact forms

3.2 Automatically Collected Data

  • IP address
  • Browser type and version
  • Device identifiers
  • Operating system
  • Referring URLs
  • Pages visited and time spent
  • Cookies and tracking technologies

3.3 Cookies and Tracking Technologies

We use cookies in accordance with Complianz. For detailed information, please see our Cookie Policy.

 

  1. Legal Basis for Processing (Article 6 GDPR)

We process personal data only when we have a lawful basis, including:

  • Consent (Art. 6(1)(a)) – e.g., marketing communications
  • Contract performance (Art. 6(1)(b)) – to provide services or products
  • Legal obligation (Art. 6(1)(c)) – compliance with tax or regulatory requirements
  • Legitimate interests (Art. 6(1)(f)) – improving website functionality, fraud prevention

Where processing is based on consent, you may withdraw consent at any time.

 

  1. How We Use Your Data

We use personal data to:

  • Provide and manage our website
  • Process orders and deliver services
  • Respond to inquiries and support requests
  • Send administrative communications
  • Send marketing communications (with consent)
  • Improve website performance and user experience
  • Comply with legal obligations
  1. Data Sharing and Disclosure

We may share personal data with:

  • IT service providers and hosting providers
  • Payment processors
  • Professional advisers (legal, tax, accounting)
  • Regulatory authorities when legally required

All processors act under data processing agreements in compliance with GDPR Article 28.

We do not sell personal data.

 

  1. International Data Transfers

If we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Adequacy decisions
  • Other lawful transfer mechanisms under GDPR
  1. Data Retention

We retain personal data only as long as necessary for:

  • The purposes for which it was collected
  • Compliance with legal obligations
  • Resolution of disputes
  • Enforcement of agreements

Retention periods vary depending on the nature of the data and legal requirements.

  1. Your Rights Under GDPR

Under GDPR, you have the following rights:

  • Right of access (Art. 15)
  • Right to rectification (Art. 16)
  • Right to erasure (“right to be forgotten”) (Art. 17)
  • Right to restrict processing (Art. 18)
  • Right to data portability (Art. 20)
  • Right to object (Art. 21)
  • Right to withdraw consent at any time

To exercise your rights, contact: dutch@citizenshit.nl

You also have the right to lodge a complaint with your local supervisory authority.

 

  1. Data Security

We implement appropriate technical and organizational measures to protect personal data against:

  • Unauthorized access
  • Accidental loss
  • Alteration
  • Disclosure

Security measures include encryption, access controls, and secure hosting environments.

 

  1. Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects.
(If applicable, describe logic, significance, and consequences.)

 

  1. Children’s Privacy

Our website is not intended for individuals under the age of 16 (or applicable national age of consent). We do not knowingly collect personal data from children without parental consent.

 

  1. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date.

 

  1. Contact Us

If you have any questions about this Privacy Policy or how we process your personal data, please contact:

Email: dutch@citizenshit.nl

Shopping Basket