Privacy Policy

Cicikim B.V. ("Cicikim", "we", "us") takes your privacy seriously. This policy explains what personal data we collect through cicikim.com, why we collect it, how long we keep it, and what rights you have under the EU General Data Protection Regulation (GDPR) and the Dutch Uitvoeringswet AVG.

1. Who is responsible for your data?

The data controller is:

Cicikim B.V.
Dompleane 1, 8605 CP Sneek, Netherlands
[email protected]
+31 515 432 867

2. What data we collect and why

We collect only the minimum data necessary for each purpose.

Contact form submissions. When you send us a message via the contact form, we collect your name, email address, and the content of your message. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) — responding to enquiries you initiate. We retain these records for 24 months, then delete them.

Custom order enquiries. If you enquire about a custom knitting project, we collect contact details and relevant measurements or specifications you share. Legal basis: pre-contractual steps at your request (Art. 6(1)(b) GDPR). Data is kept for the duration of the project plus 12 months.

Workshop bookings. Booking a workshop requires your name, email and optionally a phone number. Legal basis: performance of a contract (Art. 6(1)(b) GDPR). We retain booking data for 12 months after the workshop date.

Analytics cookies (optional). If you accept analytics cookies, we collect anonymised usage data (pages visited, session duration, approximate region). We do not collect your IP address in identifiable form. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time via the cookie banner.

Essential cookies. We place a single cookie to remember your cookie-consent preference. No consent is required for this cookie because it is strictly necessary for the site to function as you have chosen.

3. How we use your data

We use the data listed above only for the stated purposes. We do not sell, rent or exchange personal data with third parties for marketing purposes. We do not use your data to build profiles or make automated decisions about you.

4. Sharing with third parties

We may share data with the following categories of processors, all bound by data processing agreements:

• Email hosting provider (message delivery and storage)
• Web hosting provider (server infrastructure)
• Analytics service (if consent given — anonymised data only)

We do not transfer personal data outside the European Economic Area (EEA). If that changes, we will update this policy and implement appropriate safeguards.

5. Your rights under GDPR

As a data subject you have the right to:

• Access — request a copy of the data we hold about you (Art. 15)
• Rectification — ask us to correct inaccurate data (Art. 16)
• Erasure — request deletion of your data where there is no overriding legal basis (Art. 17)
• Restriction — ask us to temporarily limit how we use your data (Art. 18)
• Data portability — receive your data in a machine-readable format (Art. 20)
• Objection — object to processing based on legitimate interest (Art. 21)
• Withdraw consent — withdraw any previously given consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

6. Data security

We use TLS encryption for all data in transit. Access to personal data is restricted to the people who need it to respond to your enquiry. We review our security practices annually.

7. Cookies

For a full list of cookies we use and their purpose, see our Cookie Policy.

8. Children's privacy

Our website is aimed at adults purchasing for children. We do not knowingly collect personal data from children under 16. If you believe a child has submitted data to us, please contact us and we will delete it promptly.

9. Changes to this policy

We may update this policy when our practices change or when required by law. The "last updated" date at the top of this page will reflect any changes. Material changes will be announced via a notice on the website.

10. Contact

Questions about this policy or your data: [email protected] or Dompleane 1, 8605 CP Sneek, Netherlands.