Privacy Policy | DISTORTED WAVE☡

This Privacy Policy explains how Distorted Waves (“we,” “us,” “our”) collects, uses, shares, and protects your personal data when you visit distortedwaves.nl, in accordance with the EU General Data Protection Regulation (GDPR) and applicable Dutch data protection law.

Data Controller – Distorted Waves is the data controller responsible for your personal data, operating under the legal entity Nadia Struiwigh. Registered address: Enteldijk 3C, 7244NL Barchem, Netherlands VAT number: NL001132782B26 Contact: music@distortedwaves.nl
Information We Collect – We may collect the following categories of personal data:

Identity and contact data, such as your first and last name, email address, phone number, date of birth, and postal address.
Order and transaction data, such as items purchased and payment confirmation. Payment details themselves are processed directly by our payment provider and are not stored by us.
Technical and usage data, such as your IP address, browser type, and the pages you visit on our website.
Shopping and order-related data collected automatically through our webshop, such as products viewed, items in your cart, and your location, IP address, and browser type, used for purposes like estimating shipping and tax.
Within our team, access to order and customer information, such as what was purchased and shipping details, is limited to those who need it to fulfil orders and provide customer support.

Purposes and Legal Basis for Processing – We process your personal data only where we have a valid legal basis to do so:

To fulfil and manage your orders and provide the products or services you request, on the basis of performance of a contract.
To communicate with you about your orders, our releases, or your enquiries, on the basis of performance of a contract or our legitimate interest.
To send you marketing emails and newsletters, where you have opted in, on the basis of your consent, which you may withdraw at any time.
To improve our website and understand how visitors use it, on the basis of our legitimate interest.
To comply with our legal obligations, such as tax and accounting requirements, on the basis of legal obligation.

Sharing Your Information – We share personal data with trusted third-party service providers who help us operate our website, process orders, manage distribution, send communications on our behalf, such as Mailchimp for email marketing, or otherwise support our business. These providers act as our data processors and are contractually bound to handle your data securely and only for the purposes we specify.

Some service providers may be located outside the European Economic Area (EEA). Where this is the case, we ensure appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses, to protect your data.

We do not sell your personal data. We only share it with third parties beyond our service providers where required by law or necessary to protect our legal rights.

Payment Processing – Payments on our webshop are processed by Stripe. When you make a purchase, information necessary to complete the transaction, such as your billing details and purchase total, is shared with Stripe. Stripe processes this data according to its own privacy policy, available at stripe.com/privacy.
Email Marketing – If you sign up for our newsletter, the information you provide, such as your first and last name, email address, phone number, and date of birth, is stored and processed by Mailchimp, our email marketing platform. We only send you marketing emails where you have given your consent, and you can unsubscribe at any time using the link included in every email we send, or by contacting us directly. Mailchimp processes this data according to its own privacy policy, available at mailchimp.com/legal/privacy.
Embedded Content – Our website may include embedded content, such as music players from third-party platforms. Embedded content behaves as if you visited the third-party website directly. These platforms may collect data about you, set their own cookies, and track your interaction with the embedded content, including if you have an account with them and are logged in.
Data Retention – We retain personal data only for as long as necessary for the purposes described in this policy. Order and invoice data may be retained longer where required by Dutch fiscal law, which generally requires financial administrative records to be kept for seven years. Where data is no longer needed, we delete or anonymise it.
Your Rights Under GDPR – You have the right to:

Access the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request erasure of your data, the “right to be forgotten,” where applicable.
Request restriction of how we process your data.
Object to processing based on legitimate interest or direct marketing.
Request a copy of your data in a portable format.
Withdraw your consent at any time, where processing is based on consent.

To exercise any of these rights, please contact us at music@distortedwaves.nl. If you are not satisfied with our response, you have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, at www.autoriteitpersoonsgegevens.nl.

Protecting Your Information – We have implemented administrative, technical, and physical safeguards to protect your personal data from unauthorised access, disclosure, or destruction. However, no method of data transmission or storage is completely secure, and we cannot guarantee absolute security.
Cookies and Tracking Technologies – Our website may use cookies or similar technologies to support functionality and understand site usage. Where required by law, we will request your consent before placing non-essential cookies.

Our website uses LiteSpeed Cache to improve loading speed. This may involve temporarily storing cached copies of web pages. Cached files are automatically deleted on a schedule and are not accessed by any third party except as necessary for technical support.

Children’s Privacy – Our website is not directed at children, and we do not knowingly collect personal data from individuals under the age of 16, in line with the age of consent under Dutch and EU data protection law.
Changes to This Privacy Policy – We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Material changes will be communicated by email or via a notice on our website.
Contact Us – If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at music@distortedwaves.nl.

Last updated: 06/07/2026