Privacy Policy

1. Data Administrator
Nemelien is owned and operated by Robsha Investment, a company registered in the Netherlands.

  • Registration number: 92978312
  • VAT number: NL004989908B58
  • Address: Westerweg 47B, 1445 AC Purmerend, Netherlands

2. Scope of processed data
We process personal data necessary for order fulfillment and the operation of the store, including:

  • identification and contact data needed to fulfill orders,
  • payment information to the extent required for transaction processing,
  • user account data, if created,
  • technical data related to the use of the site, such as IP address, type of device or browser, and visit duration,
  • data provided as part of the newsletter subscription – only after user consent.

3. Purposes and legal bases for processing
Personal data is processed for the purpose of:

  • concluding and executing sales contracts,
  • processing payments and maintaining accounting documentation,
  • communicating with customers, including handling complaints, returns, and inquiries,
  • fulfilling legal obligations,
  • statistical analysis and marketing activities – only after obtaining user consent.

Legal bases:

  • art. 6 sec. 1 lit. b GDPR – performance of a contract,
  • art. 6 sec. 1 lit. c GDPR – legal obligation,
  • art. 6 sec. 1 lit. a GDPR – user consent,
  • art. 6 sec. 1 lit. f GDPR – legitimate interest of the administrator.

4. Data recipients
Data may be shared with third parties only to the extent necessary to provide services, including payment operators, courier companies, and IT and hosting service providers.

The store operates on the Shopify platform, which may involve transferring data outside the European Economic Area. Shopify implements appropriate data security measures in accordance with GDPR.
Details: Shopify Privacy Policy.

5. Payment data
Payment information is processed in accordance with applicable security standards, including PCI-DSS, and is stored only for the period necessary to complete transactions and legal obligations.

6. Analytical and marketing tools
The site uses Google Analytics (Google Ireland Ltd.) to analyze visit statistics, anonymized IP addresses, and user behavior on the site. Processing is based on consent given through the cookie banner, which can be withdrawn at any time.
Opt-out option: Google Analytics – opt-out.

7. Cookies
The site uses cookies necessary for its operation. Analytical and marketing cookies are used only after obtaining user consent. Cookie preferences can be changed at any time through the consent banner.
More information: Shopify Cookies Policy.

8. Data security
The administrator implements appropriate technical and organizational measures to protect data, including SSL/TLS encryption and secure servers, in accordance with GDPR.

9. Retention period
Personal data is retained for the time necessary to achieve the purposes for which it was collected, and then in accordance with legal requirements.

10. User rights
Users have rights provided for in GDPR, including:

  • access to personal data,
  • rectification of data,
  • deletion of data,
  • restriction of processing,
  • data portability,
  • objection to processing,
  • withdrawal of consent at any time.

To exercise these rights, please contact the administrator at: info@nemelien.com.

11. Data transfer outside the EU/EEA
In the case of data transfer outside the EU/EEA, appropriate legal safeguards are applied, including standard contractual clauses or adequacy decisions in accordance with GDPR.

12. Changes to the privacy policy
The Privacy Policy may be periodically updated. The current version of the document is always available on the site. Users will be informed of significant changes if required by law.