1. Introduction
Legumi (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data.
This Privacy Statement explains:
what personal data we collect
how we use it
on what legal basis
how long we retain it
what rights you have
This statement has been drawn up in accordance with the General Data Protection Regulation (GDPR).
2. Who is responsible?
The data controller is:
Legumi B.V.
Amsterdam, The Netherlands
Email: privacy@legumi.nl (example)
3. What personal data do we collect?
We may process the following categories of personal data:
a. Data you provide yourself
Name
Email address
Phone number
Address details
Payment details
b. Automatically collected data
IP address
Browser and device information
Cookies and tracking data
Website behavior
c. Data from third parties
Payment providers
Logistics partners
4. For what purposes do we use your data?
We process personal data for:
✔️ Order processing and delivery
✔️ Customer service
✔️ Marketing (if consent given)
✔️ Improving our website
✔️ Fraud prevention and security
✔️ Legal obligations
5. Legal Bases (GDPR Art. 6)
We process personal data on the basis of:
Performance of a contract (e.g., order)
Legal obligation (tax administration)
Legitimate interest (optimization, security)
Consent (marketing, cookies)
6. With whom do we share data?
We may share your data with:
Payment providers (e.g., Stripe, Mollie)
Delivery services (e.g., PostNL, DHL)
Hosting and IT partners
Analytics and marketing tools
All parties are contractually obligated to protect your data.
7. International transfers
If data is processed outside the EEA, we ensure appropriate safeguards such as:
Standard Contractual Clauses (SCCs)
8. Retention periods
We do not retain data longer than necessary:
Order data: 7 years (legally required)
Account data: as long as the account is active
Marketing data: until consent is withdrawn
9. Your rights
You have the right to:
Access your data
Correct data
Have data erased
Restrict processing
Object
Data portability
Withdraw consent
Additionally, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
10. Cookies
Legumi uses cookies for:
Functional operation
Analysis (e.g., Google Analytics)
Marketing (only with consent)
You can always adjust your cookie settings.
11. Security
We take appropriate technical and organizational measures, such as:
SSL encryption
Restricted access to data
Secure servers
12. Minors
Our services are not aimed at individuals under the age of 16.
13. Changes
We may amend this Privacy Statement.
The most recent version will always be available on our website.
14. Contact
For questions or requests: