KRISMAN — Antiques · Art · Design
Last updated: 23 October 2026
KRISMAN respects your privacy and handles personal information with care.
This policy explains how we collect, use, store and share personal data when you visit our website, contact us or purchase an object.
1. Who is responsible for your data?
KRISMAN V.O.F.
Trading as by KRISMAN
Etudestraat 10
7534 ER Enschede
The Netherlands
Email: info@bykrisman.com
Chamber of Commerce number: 42199189
KRISMAN acts as the data controller for the processing described in this policy.
2. What information do we collect?
Depending on how you interact with us, we may process:
- Your name and contact details.
- Billing and delivery addresses.
- Order details, purchased objects and transaction records.
- Payment status and limited payment-related information provided by our payment service provider.
- Messages, enquiries and customer service correspondence.
- Technical information needed for website operation and security, such as IP addresses and access logs.
- Information provided when you offer an object for sale or consignment, including photographs, and sourcing wishes such as preferred style, dimensions, budget and delivery location where you choose to provide them.
We do not intentionally collect more information than is reasonably necessary for the relevant purpose.
3. Why do we use this information?
Orders and delivery
We process the information needed to manage purchases, receive payments, deliver objects and provide customer service.
Legal basis: performance of a contract.
Accounting and legal obligations
We retain transaction and accounting records where required by tax or other applicable law.
Legal basis: compliance with legal obligations.
Customer enquiries
We use contact details and correspondence to respond to requests, resolve complaints and maintain relevant business communications.
Legal basis: legitimate interests or steps taken at your request before entering into a contract, depending on the circumstances.
Website security
We may process technical information to maintain website security, detect misuse and troubleshoot problems.
Legal basis: legitimate interests, subject to applicable safeguards.
Optional marketing
If we introduce newsletters or other consent-based direct marketing, we will explain this separately and obtain consent where required.
You may withdraw marketing consent at any time.
4. Payments
Payments may be processed by an external payment service provider.
Our selected payment provider is Mollie. Online payments remain unavailable while the shop is being prepared. When payments are enabled, Mollie processes payment information under its privacy notice.
Payment information is handled according to the arrangements and privacy notices applicable to the confirmed provider.
KRISMAN does not need to receive complete card credentials to manage ordinary WooCommerce orders.
5. Who receives your information?
Where necessary, information may be shared with:
- Website hosting and technical service providers.
- Our e-commerce platform and relevant service providers.
- Payment processors.
- Delivery and specialist transport providers.
- Accountants and professional advisers.
- Public authorities where disclosure is legally required.
STRATO provides website hosting and email services. Rinkel provides our business telephone service. WordPress and WooCommerce run on our hosting; enquiry forms use Forminator. Restricted recovery copies are held on our hosting and on KRISMAN-controlled local storage. A delivery provider receives the contact and address details needed for your chosen delivery arrangement. These providers do not receive your information for their own marketing from us.
We share only information reasonably necessary for the relevant purpose and assess contractual safeguards where required.
6. International transfers
Some service providers may process or access personal data outside the European Economic Area.
Where this occurs, KRISMAN will apply legally required safeguards and provide further information about relevant transfers.
You may contact us for information about any international transfer relevant to your data and the applicable safeguards. A service involving such a transfer must not be introduced without checking the required legal basis and safeguards.
7. How long do we keep information?
We do not retain personal information longer than necessary.
Accounting records are generally retained for seven years in accordance with Dutch tax obligations, with longer periods where legally applicable.
Other correspondence and account information are kept only while needed to answer your request, perform an agreement or handle a legal claim. Security logs are kept only as long as needed for operation, troubleshooting and investigating misuse.
Website enquiries: ordinary Contact, Sell With Us and Sourcing form records and associated reference photographs are scheduled for automatic removal after 90 days. WordPress runs this clean-up through its scheduled tasks. Records needed for a resulting agreement or business administration are handled separately. This 90-day process does not automatically erase separate email or recovery copies. Access to recovery copies is restricted, and they are retained only while needed for recovery or an applicable legal purpose. They are not used for ordinary enquiry handling.
8. Cookies
Our website may use functional cookies necessary for shopping basket, checkout and other website functions.
Optional analytics or marketing technologies will be described in our Cookie Policy and used only where the relevant legal requirements are met.
9. Your rights
Subject to applicable law, you may request:
- Access to your personal data.
- Correction of inaccurate information.
- Erasure where permitted.
- Restriction of processing.
- Portability of relevant data.
- Objection to certain processing.
- Withdrawal of consent where processing depends on consent.
Please send requests to info@bykrisman.com.
We may ask for proportionate information to verify your identity. We normally respond within one month; any lawful extension and its reasons will be explained within that period.
You may also lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.
10. Security
KRISMAN takes appropriate organisational and technical measures to protect personal information.
Reference photographs submitted through our forms are stored outside the public web directory and are available through authenticated links restricted to WordPress administrators. Notifications use protected links instead of attaching copies of these photographs. Product photographs are separate public collection materials. These measures are reviewed in light of the systems and services in use.
No internet-based system can be guaranteed to be completely free from risk.
11. Children
Our website is intended for general commerce and is not specifically directed towards children.
We do not knowingly use the website to collect children’s information for targeted marketing.
12. Changes to this policy
We may update this Privacy Policy to reflect changes in law, technology or our business operations.
The latest version will be available on this website.
13. Contact
For privacy questions or requests:
info@bykrisman.com
Telephone: 053 234 0121
