www.simracewebshop.com
Version: October 28, 2025
About This Privacy Policy
Sim Race Webshop B.V. (“Sim Race Webshop,” “we,” “our,” or “us”) values your privacy. We only process personal data that is necessary for the operation and improvement of our services and treat all collected information with care. We will never sell or share your data for commercial purposes.
This policy explains what data we collect, why we collect it, on what legal basis (under the GDPR), how long we keep it, with whom we share it, and what rights you have concerning your personal data.
If you have any questions, please contact our Data Protection Contact Person (see Section 11).
1. Controller Information
Sim Race Webshop B.V.
Vlierbessenstraat 8, 1326 JH Almere, The Netherlands
CoC: 85163937 | VAT: NL863531611B01
☎️ +31 (0)85 200 6202 | ✉️ info@simracewebshop.com
2. Personal Data We Collect
Depending on your use of our website and services, we may process the following categories of personal data:
-
Customer data: name, address, country, company name, email, telephone number, order details, chosen payment/shipping method, and return/guarantee information.
-
Account data: username, encrypted password, order history, billing/shipping addresses.
-
Payment details: limited transaction reference and status (actual payment data handled by our payment providers).
-
Customer service data: messages, complaints, warranty requests, RMA information.
-
Review data: name or nickname, email (for validation), review content and date.
-
Technical information: IP address, browser type, operating system, session ID, referrer URLs, device type, usage logs.
-
Marketing and newsletter data: email address, interaction data (opens, clicks — only with consent).
We do not process special categories of personal data and do not target individuals under 16 years of age.
3. Purposes and Legal Bases
We process your data for the following purposes:
-
Order fulfillment: to process and ship your order, handle returns, and manage invoices.
Legal basis: performance of a contract; legal obligation (tax compliance). -
Customer support: to respond to questions and provide post-purchase assistance.
Legal basis: performance of a contract; legitimate interest. -
Account management: to provide secure access to your online account.
Legal basis: performance of a contract. -
Fraud prevention and security: to protect our systems, detect abuse, and maintain website integrity.
Legal basis: legitimate interest; legal obligation. -
Reviews: to collect and display verified customer feedback.
Legal basis: legitimate interest; consent if required. -
Marketing and newsletters: to send offers and updates if you have opted in.
Legal basis: consent (can be withdrawn anytime). -
Analytics and website optimization: to understand user behavior and improve functionality.
Legal basis: consent (non-essential cookies); legitimate interest for essential cookies. -
Legal obligations: to comply with bookkeeping, tax, and legal recordkeeping requirements.
Legal basis: legal obligation.
4. Sharing of Data with Processors
We only share data with carefully selected partners necessary to provide our services. These third parties act as data processors under GDPR and process data only under our instructions.
4.1 Webshop Platform
Shopify (Shopify International Ltd. / Shopify Inc.)
Hosts our webshop, processes orders, and stores transactional data securely. Data may be processed outside the EEA (see Section 6).
4.2 Email and Office Software
Microsoft 365 / Outlook (Microsoft Ireland Operations Ltd.) – used for business communication and internal document storage.
4.3 Payment Providers
Depending on your chosen payment method, limited information (name, country, order reference, transaction amount) is shared with:
-
Stripe Payments Europe Ltd.
-
Mollie B.V.
-
PayPal (Europe) S.à r.l. et Cie
These processors may use additional fraud-prevention measures and credit checks (for deferred payment options).
4.4 Shipping and Fulfillment
To deliver your orders, we share name, address, email, and phone number with logistics partners:
-
PostNL, DPD, DHL, UPS, FedEx
-
Montapacking B.V. (if warehouse fulfillment applies)
4.5 Reviews
We use:
-
WebwinkelKeur – for review invitations and collection.
-
Trustpilot – for independent feedback (if active).
4.6 Accounting
InformerOnline B.V. – used for bookkeeping and invoicing in compliance with Dutch accounting law.
We never sell or rent your personal data to any third party.
5. Data Retention
-
Order/invoice data: 7 years (legal tax retention).
-
Account data: kept as long as your account is active; deleted upon closure (invoice data retained as required by law).
-
Customer support data: up to 2 years after resolution.
-
Newsletter data: until you unsubscribe; consent logs kept for up to 6 months.
-
Analytics data: retained in accordance with your cookie settings and tool limits (max. 26 months for Google Analytics).
6. International Data Transfers
Some of our processors (e.g., Shopify, Microsoft, Stripe, Trustpilot) may transfer data outside the European Economic Area (EEA), including to the United States or Canada.
In such cases, data is safeguarded through:
-
Standard Contractual Clauses (SCCs) approved by the European Commission; and/or
-
EU-US Data Privacy Framework certification; and/or
-
additional security measures (encryption, limited access).
7. Cookies and Tracking Technologies
When you first visit our website, a cookie banner appears allowing you to accept or reject non-essential cookies.
7.1 Types of Cookies
-
Essential cookies: required for checkout, security, and cart functionality.
-
Analytical cookies (with consent): via Google Analytics 4 (IP anonymization enabled). Used to monitor site performance.
-
Marketing cookies (with consent): e.g., Google Ads, Meta Pixel, or Shopify tracking for conversion measurement.
You can modify or withdraw consent anytime through your browser or our cookie settings.
8. Security Measures
We implement robust technical and organizational security controls including TLS/SSL encryption, access restrictions, two-factor authentication (2FA) for admin areas, secure backups, and real-time monitoring. In the event of a personal data breach, we will notify the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) and affected individuals if required.
9. Your Rights (Under GDPR)
You have the following rights regarding your personal data:
-
Right of access – obtain a copy of your personal data.
-
Right to rectification – correct inaccurate or incomplete data.
-
Right to erasure – request deletion of your data (“right to be forgotten”).
-
Right to restriction – limit processing under certain conditions.
-
Right to data portability – receive your data in a machine-readable format.
-
Right to object – to processing based on legitimate interest or direct marketing.
-
Right to withdraw consent – for activities based on prior consent.
Requests can be submitted via info@simracewebshop.com. We respond within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority: www.autoriteitpersoonsgegevens.nl.
10. Legal Disclosures
We may disclose personal data where required by law or in response to valid legal requests (e.g., tax authorities or law enforcement). Such disclosures will always be limited to what is legally necessary.
11. Contact Information
Data Controller:
Sim Race Webshop B.V.
Vlierbessenstraat 8, 1326 JH Almere, The Netherlands
✉️ info@simracewebshop.com | ☎️ +31 (0)85 200 6202
Data Protection Contact:
Marco Fintelman – info@simracewebshop.com (subject: “Privacy Inquiry”)
12. Changes to This Policy
We reserve the right to update this policy. The latest version is always available on our website. Material changes will be announced via email or a visible notice on our site.
Overview of Sub-Processors
-
Shopify – e-commerce and hosting
-
Microsoft 365/Outlook – email and office suite
-
Stripe / Mollie / PayPal – payments
-
PostNL / DHL / DPD / UPS / FedEx / Montapacking – logistics
-
WebwinkelKeur / Trustpilot – customer reviews
-
InformerOnline – accounting