Privacy policy

Version 20 October 2026

Who is responsible?

EcomVision is responsible for processing personal data through Isla Calma (islacalma.eu). Dutch Chamber of Commerce number 90328000; Rumpenerstraat 4-A, 6443 CD Brunssum, the Netherlands. Contact: info@ecomvision.nl, +31 (0)85 800 9990.

Ordering, payment and delivery

We process your name, email address, telephone number, billing and delivery addresses, ordered items, quantities, amount, and order and payment status to fulfil your order and handle service, returns and refunds. Necessary order details are required to perform the contract. You check out as a guest; a customer account is not required. For our tax administration, we process data on the basis of legal obligations.

PAY.nl processes payments. The integration provides the order, contact, address and technical data needed for the transaction, including the IP address. We receive the transaction reference and payment status. For data processing by PAY.nl, including fraud prevention and statutory checks, see PAY.nl’s privacy policy. Your bank or payment method may apply its own privacy terms.

For delivery, we provide the necessary name, address and contact details and shipping information to PostNL, DHL, Correos or another suitable carrier. The choice depends on the items, origin and delivery addresses, quantities and packaging. The selected carrier may also use these details for delivery notifications and tracking.

Contact and withdrawal

For questions or withdrawal requests, we process the information you send, such as contact details, order number and your explanation, to handle your request. The legal basis is performance of the contract, a legal obligation or our legitimate interest in handling questions and complaints carefully. Only send information necessary for that purpose.

Hosting, email and security

The shop uses WordPress, WooCommerce and WPML and is hosted by OVHcloud. Administrators have access for maintenance and order handling. Email is sent through the hosting service; incoming service messages may be processed in Google/Gmail through our email forwarding. Our service providers receive the data needed for their task. For services that process data outside the European Economic Area, the applicable legal transfer mechanisms and agreements are relevant; see also the privacy information provided by OVHcloud and Google.

Technical data, such as IP address, browser type, time, requested page and error messages, may be needed for operation, security and troubleshooting. We have a legitimate interest in this. The website uses HTTPS and administration requires login. Backups are made to restore data in the event of a failure.

Cookies and preferences

The shop uses functional storage to remember your basket, session, language and country choices. WooCommerce uses cookies including woocommerce_cart_hash, woocommerce_items_in_cart and wp_woocommerce_session_; basket cookies last for the browser session and the shop session normally lasts up to two days. WPML may store a language preference. Isla Calma stores an explicit language and country choice in isla_language_choice and isla_country_choice for up to one year. You can delete cookies through your browser; this may remove your basket and preferences.

A country estimate may be made locally using the IP address to offer an appropriate shop display. You can change the language and country yourself. This does not determine your precise location. Any non-essential analytics or marketing functions may operate only in accordance with the applicable consent choice. Newsletter subscription is separate from ordering and can be withdrawn using the unsubscribe option.

Retention periods

We retain data for as long as necessary for its purpose. We generally retain ordinary service enquiries for up to 12 months after resolution; correspondence about complaints and returns for up to 24 months after resolution, unless an ongoing dispute or legal obligation requires longer retention. Data forming part of the basic tax records is generally subject to a seven-year period; where a specific statutory rule requires ten years, that period applies. Not all contact or technical data is subject to that tax retention obligation.

Temporary shop sessions expire automatically. For technical logs and backups, the period depends on incident resolution and the recovery cycle of the service used. We periodically review whether data is still necessary. Deleted data may temporarily remain in a backup; that copy is not used for daily processing. We do not promise automatic deletion of all order or email data.

Your rights

You can contact info@ecomvision.nl to request access, correction, deletion, restriction or portability of your data, and to object to processing based on a legitimate interest. You may withdraw consent; this does not affect the lawfulness of earlier processing. Rights may be limited, for example, by a statutory retention obligation. We may request specific information to verify your identity and generally respond within one month. You can lodge a complaint with the Dutch Data Protection Authority or the competent supervisory authority in your country of residence.

Changes

If our data processing changes, we update this statement. The version date is shown at the top.

Optional visitor statistics

We load Google Analytics for visitor statistics only after your consent. Google receives technical visit data, including the page visited, browser information and the IP address required for the connection. We do not add customer data, form contents or order data to this measurement. URL query parameters and the referring page are not sent. Google Signals and advertising personalisation are disabled. The measurement code is not loaded on basket, checkout or account pages.

Your consent choice is stored locally in your browser for up to 180 days under isla_analytics_consent_v1. After consent, Google may set the cookies _ga and _ga_6QEVNMBKWG, with a configured lifetime of 180 days. You can change or withdraw your choice through Cookie preferences at the bottom of the shop pages. On withdrawal, we remove these Analytics cookies and reload any page on which the measurement code was active; your basket and language choice are retained. This does not automatically delete earlier measurements from Google Analytics. Read also Google’s privacy policy.