Privacy Statement Webbags B.V.

To sell our products, improve our services, and communicate with you personally as a data subject, Webbags B.V., trading as The Chesterfield Brand (hereinafter referred to as “Webbags”), processes personal data. As a data subject, you choose to provide personal data to Webbags yourself—for example, when you order a product via our website or subscribe to our newsletter. We also process your personal data when you visit our website.

Webbags is the data controller with regard to this personal data. We consider it important to handle your data with care and comply with privacy legislation, such as the General Data Protection Regulation (“GDPR”). This privacy statement describes how Webbags processes your personal data, how we handle it, and what your rights are.

If this privacy statement changes, it will be updated on this page. Please check back regularly.

What personal data does Webbags process and for what purposes?

Webbags processes the following personal data: name, address, city, phone number, email address, billing address, gender, date of birth, and IP address. We also process your payment information, such as your bank account number, and any other personal data you provide to us or that we obtain in the context of the purposes mentioned below.

We collect this data when you purchase products, visit our website, or subscribe to our newsletter.

We process personal data for the following purposes:

• Processing orders on our website;
• Delivering products;
• Handling product returns;
• Responding to inquiries submitted via the contact form on our website;
• Managing our (financial) administration;
• Sending newsletters;
• Advertising purposes;
• Statistical analysis;
• Recruitment and selection of employees;
• Fulfilling our legal and regulatory obligations.

Our website uses cookies. A cookie is a small text file placed on your computer, tablet, or smartphone when you visit our site. For more information about the cookies we use, please refer to our cookie policy.

On what legal grounds does Webbags process your personal data?

Webbags processes the above-mentioned personal data solely based on the following legal grounds as outlined in Article 6 of the GDPR:

• Compliance with a legal obligation;
• Performance of a contract;
• Consent you have provided;
• A legitimate interest.

With whom is personal data shared?

Webbags only shares your personal data with third parties when necessary for the sale of our products or our services, and only in line with the purposes stated above.

We enter into data processing agreements with third parties who process personal data on behalf of and under the instructions of Webbags. These agreements ensure that they comply with GDPR obligations. Such parties may include those involved in website hosting and management, marketing and customer communication, payment and billing processes, customer service, and data analysis and optimization.

We also share data with third parties that are independently responsible for processing, such as shipping and payment service providers.

• Shipping partners: When you order a product, we share your data (name, delivery address, email, and phone number) with our shipping partners so that your order can be processed and delivered.
• Payment service providers: For payment processing, we use external providers with whom we share the necessary information, such as your name, payment details, and billing address.

How does Webbags protect your personal data?

Webbags takes the security of your personal data very seriously and ensures it is protected in accordance with the GDPR. We implement appropriate technical and organizational measures to prevent unauthorized access, loss, or misuse.

Our security measures include:

• Access control using usernames and passwords, with two-factor authentication for employees;
• Access logs to monitor data access;
• Encrypted connections (SSL/TLS) for secure data transmission;
• Regular security checks and awareness training for staff.

We continuously evaluate and improve these measures to ensure your data is protected.

If required under the GDPR, we report data breaches to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). If necessary, we will also inform you of such breaches.

How long does Webbags retain your personal data?

Webbags retains personal data no longer than necessary for the purposes outlined above or as required by applicable laws and regulations.

What privacy rights do you have?

Under the GDPR, you have the following rights. You may request to:

• Access and view your personal data;
• Correct your personal data;
• Delete your personal data (in part or in full);
• Restrict the processing of your data;
• Object to the processing of your data;
• Receive a copy of your personal data and transfer it to another party under certain conditions.

If Webbags processes your personal data based on your consent, you can withdraw this consent at any time. This does not affect the lawfulness of the data processing prior to the withdrawal.

To exercise any of these rights, please contact us. We will respond as soon as possible, and no later than one month from the date of your request. Depending on the complexity and number of requests, this period may be extended by two additional months. If extended, we will inform you within one month.

We may ask you to verify your identity before processing your request.

If you have a complaint about how we handle your data, please let us know. You may also file a complaint with the Dutch Data Protection Authority.

Contact Information

Webbags B.V. (trading as “The Chesterfield Brand”)
Amerikaweg 24
9407 TK Assen
The Netherlands
Phone: +31 (0)50 763 0889
Email: info@chesterfieldbags.com

This privacy statement was adopted on April 16, 2025.