Privacy Policy
This Privacy Policy applies whenever you visit the Sangal website, use our webshop or mobile app, or access any other online platform where Sangal products and services are offered and available for purchase.
The Policy is managed by Sangal Gaming Group B.V., acting as the data controller. Throughout this document, the terms “Sangal,” “we,” “our,” and “us” refer to Sangal Gaming Group B.V. In addition to this Privacy Policy, please also review our Cookie Policy and General Terms & Conditions, which together outline the framework of your online experience with us.
At Sangal, we take your privacy seriously. We only process the personal information necessary to operate, deliver, and enhance our website, products, and services. Your data is always handled responsibly, and we will never share it with third parties for commercial gain.
This Privacy Policy explains the types of personal data we collect from you, how we use that information, and under what circumstances it may be shared with trusted third parties. It also outlines how your data is stored, the measures we take to protect it from misuse, and the rights you have regarding the personal information you share with us.
This Policy takes effect on 19 September 2025. Whenever a new version is published, it will replace and override all previous versions.
If you have any questions about this Privacy Policy, please reach out to our Privacy Officer using the contact details provided at the end of this document.
Section 1 – Personal Information We Collect
In this section, we outline the categories of personal data we may collect from you, how this information is processed, where it is handled, and who may have access to it.
Categories of Personal Data When You Visit the Website
When you access our Website, certain data about your device and browsing behavior is collected automatically. This may include details such as your web browser, IP address, time zone, and the cookies stored on your device. As you continue to browse, we also gather information about the specific pages or Products you view, the websites or search terms that directed you to our Website, and how you interact with our pages. Collectively, we call this “Device Information.”
We collect Device Information through the following technologies:
- Cookies – Small data files stored on your device that often contain a unique anonymous identifier. We use functional, analytical, tracking, and advertising cookies. To learn more about cookies and how you can manage or disable them, please see our Cookie Policy.
- Log files – Records of actions that occur on the Website, including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps. These data points (such as IP address, browser type, and service provider) are anonymous when considered on their own.
- Web beacons, tags, and pixels – Electronic tools that help us understand how you navigate and interact with the Website.
Categories of Personal Data When Purchasing Through the Website
When you place an order, or attempt to do so, through our Website, we may collect certain personal information from you, including but not limited to:
- Full name
- Billing and shipping addresses
- Payment details (such as bank account or credit card information)
- Email address and phone number
- Order-specific information, such as gender, sizes, or product preferences
- Any comments, suggestions, feedback, or other messages you provide
We refer to this type of information collectively as “Order Information.”
Special and/or Sensitive Personal Data
Our Website and services are not intended for individuals under the age of 16 unless they have parental or guardian consent. While we cannot always verify the age of every visitor, we strongly encourage parents to monitor their children’s online activities to prevent the collection of personal data without consent.
If you believe that we have inadvertently collected personal data from a minor without proper consent, please contact our Privacy Officer using the details provided at the end of this Policy. We will delete the information promptly upon verification.
Section 2 – Purpose and Legal Grounds of Data Processing
General Purpose of Processing
We use the Order Information collected from you primarily to fulfill any orders placed through our Website. This includes, but is not limited to:
- Preparing and executing contracts
- Processing your payment details
- Organizing shipping and delivery
- Providing invoices and order confirmations
- Communicating with you about your orders and notifying you of updates to our Policies, Products, or Services
- With your consent or in line with your preferences, sending newsletters, promotional information, or other communications related to our Products and Services
We use the Device Information we collect to help improve, optimize, and secure our Website. For example, this data allows us to analyze how visitors interact with our site and evaluate the effectiveness of our marketing and advertising efforts.
We do not use your data for targeted marketing or promotional purposes unless we have your consent, or if you are already an existing customer and have agreed to receive communications. If we wish to contact you using your data at a later time outside of your request, we will always seek your explicit consent first.
Your personal data is not shared with third parties, except as outlined in this Policy or where required to meet administrative, legal, or regulatory obligations. Any third parties with access to your data are bound by confidentiality and data protection obligations, either through contractual agreements, oaths, or legal requirements.
In some situations, we may be legally required to share your data for governmental, tax, or criminal investigations. When this occurs, we are obligated to comply, though we will seek to challenge such requests within the limits of applicable law whenever possible.
Legal Grounds
The processing of Order Information is necessary to fulfill the contract between you and Sangal, such as when you place an order through our Website. If we wish to process personal data beyond what is required to fulfill the contract, we will first obtain your explicit consent.
The processing of non-anonymous Device Information relies on your consent. For example, we request permission for tracking cookies through the cookie banner displayed when you visit our Website. Non-essential cookies are restricted for visitors from Europe.
In certain cases, we may process personal data to comply with legal obligations or to pursue legitimate business interests. When processing is based on legitimate interest, we carefully balance our needs against your privacy rights and will provide an explanation of our decision when requested.
Section 3 – Third Parties
We may share your personal data with trusted third parties (“processors”) who assist us in managing and using your information as described in this Policy. The following sections provide more details about these processors and how they handle your data.
Webshop Software
Our online store is hosted on WooCommerce, which provides the e-commerce platform that allows us to offer and sell our products and services. WooCommerce may access certain data to provide technical and operational support, but your personal information will never be used by WooCommerce for other purposes. WooCommerce is required to maintain appropriate security measures under the Data Processing Addendum we have in place with them.
WooCommerce also uses cookies to collect technical information about how their software is used. These cookies do not collect or store personal data. WooCommerce may share aggregated or anonymized data within its group to improve its services, but this does not affect your privacy.
All the safeguards described in this Privacy Policy regarding the protection of your personal data also apply to any third-party services used by WooCommerce. By accessing or purchasing through our Website, you also agree to WooCommerce’s Privacy Policy for customers.
Email & Mailing Lists
When you sign up for our newsletter, we ask for your consent to process your personal data. We use Mailchimp, integrated through WooCommerce, to manage our email communications.
Your information (such as your name and email address) is used exclusively for sending newsletters, updates, and promotional content related to our website. Mailchimp does not use your personal information for its own purposes.
Every newsletter email we send includes an unsubscribe link at the bottom. Clicking this link will immediately stop all future communications from us.
Mailchimp securely stores your personal data under a Data Processing Agreement (DPA) in compliance with GDPR.
For more details, you can refer to Mailchimp’s Terms of Service and Mailchimp’s Privacy Policy.
Payment Processors
We use Stripe as our payment processor to handle transactions made on our webshop. When you make a purchase, Stripe may collect and process certain personal data such as your name, phone number, billing address, and payment information for the sole purpose of completing your payment securely. We do not have access to or store your full card details on our servers.
Stripe operates under strict security standards and complies with applicable data protection and payment regulations, including PCI DSS requirements. All payment data is transmitted securely and processed only to facilitate your transaction.
For more details, please refer to Stripe’s Privacy Policy.
Storing (Personalised) Products
If you order personalised products, we may need to share certain information with the storage or production facility, including your first name, surname, size, order number, and shipping address.
These facilities are prohibited from using your personal data for any other purpose and must maintain appropriate security measures under a data processing agreement with us. All the protections described in this Privacy Policy also apply to these facilities.
Dispatch & Logistics
When you place an order with us, we rely on external carriers to deliver your products. To fulfill this service, we share your first name, surname, and shipping address with the carriers. These details are used exclusively to complete the delivery.
If a carrier engages subcontractors to assist with delivery, your information may also be shared with them, strictly for the purpose of performing the delivery. All the data protection safeguards described in this Privacy Policy also apply to any subcontractors involved.
Other Third Parties
Our Website may include links or instructions directing you to third-party websites. Please note that we do not control the collection or use of personal data by these third parties, whether with or without your consent. We encourage you to review the privacy policies of these external websites before providing any personal information.
Section 4 – International Data Transfers
We may transfer your personal data outside the European Economic Area (EEA), including to Türkiye and the United States, where some of our processors and designers operate. In all cases, we ensure that the level of data protection provided in the EEA is maintained.
Transfers to Türkiye are based on the adequacy decision of the European Commission, while transfers to the United States are protected through data processing agreements and the use of the latest Standard Contractual Clauses (SCCs) adopted by the European Commission.
We take all necessary measures to ensure that transfers outside the EEA are secure and compliant. You may request a copy of the SCCs at any time by contacting us. For further questions regarding international data transfers or to invoke the SCCs as a third-party beneficiary, please refer to the contact details provided in Section 9.
Section 5 – Retention Period
We retain your personal data only for as long as necessary to fulfill the purposes described in this Policy or as required by law. For example, under Dutch legal requirements, invoices and financial or administrative records must be kept for a minimum of seven (7) years. Accordingly, we will retain such data for the duration of the applicable legal period.
Section 6 – Protection of Personal Data
We take the security of your personal data very seriously and implement appropriate measures to prevent misuse, loss, unauthorized access, disclosure, or improper alterations. These measures include, for example, firewalls, secure backups, and protected internet connections.
When your data is shared with third parties, we ensure that they are bound by confidentiality and data protection obligations, either through contractual agreements, oaths, or legal requirements.
If you believe your personal data is not adequately protected or suspect any misuse, please contact our Privacy Officer immediately.
Section 7 – Your Rights
Under applicable European data protection laws, you have specific rights as a data subject regarding the personal data we process on your behalf. This section explains these rights and how you can exercise them.
To protect your data, we only provide copies or reproductions of your information to the email address we have on record. If you wish to receive your data at a different email address or by post, we may ask you to verify your identity. We also maintain a record of completed requests and handle anonymized data for requests to be forgotten.
You will receive all copies or reproductions of your data in a commonly used electronic format or in writing, upon request. We aim to respond to your request as quickly as possible, but no later than 30 days. You may submit your requests at any time to our Privacy Officer, and we will work with you to find a solution.
If you believe that we are processing your personal data improperly, you also have the right to file a complaint with the Dutch Data Protection Authority (AP) or the relevant data protection authority in your country of residence.
Right of Access
You have the right to access the personal data we process about you or that can be linked to you. If your request is approved, we will provide a copy of all relevant data to the email address we have on record, along with a list of the processors handling your data and the categories in which it is stored.
Right of Rectification
You have the right to request correction or updating of any inaccurate personal data we hold about you. Once your request is fulfilled, we will send a confirmation to the email address we have on record, verifying that your data has been corrected or updated.
Right to Erasure
You have the right to request that your personal data, which we process or can be linked to you, be deleted without undue delay. If your request is approved, we will erase all personal data we have collected about you, subject to any legal retention requirements that may prevent immediate deletion. If such requirements apply, we will inform you accordingly.
Right to Restriction of Processing
You have the right to restrict the processing of your personal data that we hold or can be linked to you. If your request is approved, we will send a confirmation to the email address we have on record, stating that your data will no longer be processed until you choose to lift the restriction.
Right to Data Portability
You have the right to request that the personal data we process about you, or that can be linked to you, be transferred to another party. If your request is approved, we will provide copies of all relevant data, including data processed on our behalf by other processors or third parties, to the email address we have on record.
Data will be delivered in a structured, commonly used, and machine-readable format. Please note that providing your data in this way may prevent us from continuing to offer certain Services, as the secure connection for your data cannot be guaranteed once transferred.
Right to Object and Other Rights
You may withdraw your consent for data processing or object to the processing of your personal data by or on behalf of Sangal at any time. Upon receiving a valid objection, we will immediately halt processing while assessing the matter.
If your objection is upheld, we will provide you with copies of your personal data and permanently cease processing it. You also have the right not to be subject to automated decision-making or profiling. While we do not currently process your data in this way, if you believe otherwise, please contact our Privacy Officer as described in Section 9.
Section 8 – Amendments to the Privacy Policy
We reserve the right to update or amend this Privacy Policy at any time. The most current version will always be available on this page. If changes affect how we already process your personal data, we will notify you by email.
Section 9 – Contact Details
For any questions regarding our privacy practices, to make a complaint, or to exercise your rights, please contact us:
Sangal Gaming Group B.V.
Email: [email protected]
Privacy Officer Email: [email protected]