Privacy Policy

The Rudy's Bears online store, accessible at www.rudysbears.com and based in Seneffe, Belgium, processes personal data obtained from users in order to fulfill and confirm the terms of use, process orders and deliveries, and ensure the communication required by law.

General Provisions

1. Data Controller

The Data Controller, in accordance with the General Data Protection Regulation (GDPR) (hereinafter referred to as the "Regulation"), is:

Rudy HEYEN
7180 Seneffe, Belgium

2. Contact Details

Email: privacy@rudysbears.com
Phone: +32 (0)451 / 07.24.06

3. Definition of Personal Data

Personal data means any information relating to an identified or identifiable natural person.

Source of Personal Data

1.

The Data Controller collects and processes personal data necessary for the conclusion and execution of purchase contracts made through www.rudysbears.com.

Personal data is collected during:

the creation of an order,
the processing of an order,
communication with the customer.

2.

The Data Controller only processes data necessary to identify the customer and fulfill the purchase contract.

3.

Personal data is processed for accounting, delivery, and communication purposes during the period required by law.

Personal data will not be made public or sold to third parties.

Purpose of Data Processing

The Data Controller processes personal data for the following purposes:

1.

Registration on www.rudysbears.com and management of customer orders.

2.

Execution of customer orders, including:

First name
Last name
Postal address
Email address
Telephone number

3.

Compliance with legal obligations arising from the contractual relationship between the Data Controller and the customer.

4.

Personal data is required for the performance of the purchase contract. The contract cannot be fulfilled without such data.

Data Retention Period

1.

The Data Controller retains personal data only for the period necessary to fulfill the rights and obligations arising from the contractual relationship with the customer.

Personal data is retained for three (3) years from the conclusion of the contract.

2.

The Data Controller is required to delete personal data once the legal retention period has expired.

Data Recipients and Processors

Any third party processing personal data on behalf of the Data Controller shall be considered a Data Processor.

The services provided by such processors are necessary for order fulfillment and contract execution.

The Data Controller's processors include:

Webnode AG (e-commerce platform)
Shipping carriers
Google Analytics (analytics service)

Customer Rights

In accordance with the GDPR, customers have the following rights:

Right of access to personal data;
Right to rectification of personal data;
Right to erasure ("right to be forgotten");
Right to object to processing;
Right to data portability;
Right to withdraw consent at any time by contacting us at : privacy@rudysbears.com;
Right to lodge a complaint with the relevant supervisory authority in the event of a suspected GDPR violation.

Personal Data Security

1.

The Data Controller declares that all appropriate technical and organizational measures have been implemented to ensure that personal data is processed in a manner that respects the privacy of individuals.

2.

The Data Controller has implemented appropriate technical measures to ensure the security of collected data, including:

password-protected computer access,
antivirus software,
regular computer maintenance.

Final Provisions

1.

By placing an order on www.rudysbears.com, the customer acknowledges having read and fully accepted this Privacy Policy.

2.

The customer accepts these conditions by checking the corresponding box on the order form.

3.

The Data Controller reserves the right to update or modify this Privacy Policy at any time without prior notice. The latest version will always be published on the website.

This Privacy Policy shall enter into force on June 1, 2026.