Privacy Policy

1 · Controller

OBEE EXTRACTS
Keizersgracht 520-H
1017 EK Amsterdam, Netherlands
info@obeeextracts.com

Represented by the owner, Rishiekumar Jagai
Chamber of Commerce (KvK) number 86328611

Data protection officer
We have not appointed a data protection officer.

2 · Scope

This policy explains how we process personal data when you visit www.officialobee.com and when you subscribe to our newsletter. Our online shop is not yet open; this policy will be extended before it opens. Processing is governed by Regulation (EU) 2016/679 (GDPR) and the Dutch GDPR Implementation Act (UAVG).

3 · What we process, why, and on what legal basis

3.1 Server log files

When you access the site, your browser automatically transmits data that our platform provider stores in log files: IP address, date and time, page requested, referrer URL, browser type and version, operating system. We do not merge this data with other sources and we do not use it to identify you.

• Purpose: delivering the site, security, troubleshooting
• Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in a stable and secure website
• Retention: log data is kept only for as long as it is needed for the purposes above and is then deleted by our platform provider

3.2 Age verification

Before you can access the site you must confirm that you are 18 or older. Your confirmation is stored in a cookie on your device. We do not store your date of birth.

• Purpose: protection of minors, compliance with our legal obligations
• Legal basis: Art. 6(1)(c) GDPR — legal obligation
• Retention: 30 days in the cookie obee-age-ok

3.3 Newsletter and prize draws

If you subscribe, we process your email address and the fact that you confirmed you are 18 or over. If you enter as a trade visitor we also process your company name, VAT identification number, country, city and contact person. We use a double opt-in procedure: you receive a confirmation email and the subscription — and, where applicable, your entry to a prize draw — only becomes active once you click the link in it. We log the time of registration, the time of confirmation and the IP address used, in order to demonstrate that you consented. Emails are sent through Brevo (Sendinblue SAS, France) on our behalf.

• Purpose: information about our products, the launch of our store and related offers; administration of prize draws we run
• Legal basis: Art. 6(1)(a) GDPR — consent
• Withdrawal: at any time via the link in every email or by writing to info@obeeextracts.com. Withdrawal does not affect the lawfulness of processing carried out before it.
• Retention: your email address is stored for as long as your subscription is active. Records relating to a prize draw are deleted six months after the draw. After you unsubscribe we keep the record of your consent and its withdrawal for a further 3 years in order to demonstrate that the processing was lawful, and then delete it.

We measure whether emails are opened and which links are clicked, in order to tailor future emails. This measurement is covered by the consent you give when subscribing.

3.4 Contact form

If you write to us through the contact form, we process the name, email address and message you provide in order to answer your enquiry. The message is delivered to our contact address and stored by our platform provider.

• Purpose: answering your enquiry
• Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in responding, or Art. 6(1)(b) GDPR where your enquiry relates to a contract
• Retention: until your enquiry is settled and any statutory retention periods have expired

3.5 Cookies and analytics

We set cookies that are technically necessary for the site to work. These include the cookie that stores your age confirmation and the session cookies set by our platform. They are set without your consent because the site cannot function without them.

Beyond that we use the analytics function built into our platform in order to measure how the site is used — page views, traffic sources, approximate region derived from the IP address. These cookies are set only after you have agreed to them in our consent banner. You can change or withdraw your choice at any time through the banner, and withdrawal takes effect for the future. We do not use advertising or retargeting cookies.

• Legal basis: Art. 6(1)(a) GDPR and Article 11.7a of the Dutch Telecommunications Act for non-essential cookies; Art. 6(1)(f) GDPR for essential cookies

The cookies currently in use are:

Cookie	Provider	Purpose	Duration
obee-age-ok	OBEE EXTRACTS	stores your confirmation that you are 18 or over	30 days · essential
session and consent cookies	Shopify	maintaining your session, storing your cookie choice	session to 12 months · essential
analytics cookies	Shopify	measuring page views and traffic sources	up to 12 months · consent required

We also store your choice to dismiss or complete a prize draw entry in your browser's local storage, so that the window is not shown to you again. This is not a cookie and is not read by us.

An itemised, up-to-date list of every cookie our platform sets, including the exact names and durations, is available in the consent banner on this site.

4 · Processors and recipients

We work with the following service providers, each under a data processing agreement pursuant to Art. 28 GDPR:

Service	Provider	Purpose	Location
Website platform	Shopify International Ltd., Ireland	hosting the site, log files, analytics, contact form	EU
Email marketing	Sendinblue SAS (Brevo), France	newsletter, double opt-in, prize draw entries, delivery measurement	EU
Domain and DNS	GoDaddy	domain administration	EU / US

Some of our processors form part of corporate groups with entities outside the European Economic Area. Where personal data is transferred to a third country, that transfer takes place on the basis of the European Commission’s adequacy decision for the EU–US Data Privacy Framework or, failing that, on standard contractual clauses pursuant to Art. 46(2)(c) GDPR. You may request a copy of the safeguards in place from us at any time.

Beyond this we disclose data only where we are legally obliged to do so, or where it is necessary to establish, exercise or defend legal claims.

5 · Your rights

You have the right to:

• access the personal data we hold about you (Art. 15)
• rectification of inaccurate data (Art. 16)
• erasure (Art. 17)
• restriction of processing (Art. 18)
• data portability (Art. 20)
• object to processing based on legitimate interests (Art. 21)
• withdraw consent at any time with effect for the future (Art. 7(3))

To exercise any of these rights, write to info@obeeextracts.com. We will respond within one month.

You also have the right to lodge a complaint with a supervisory authority. The competent authority for us is:

Autoriteit Persoonsgegevens
Postbus 93374, 2509 AJ Den Haag, Netherlands
autoriteitpersoonsgegevens.nl

You may also complain to the supervisory authority of your habitual residence.

6 · Obligation to provide data

You are not obliged to provide personal data. Confirming your age is a condition of accessing the site. Without an email address we cannot send you the newsletter or enter you into a prize draw. There are no other consequences if you do not provide data.

7 · Automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

8 · Changes

We will update this policy when our processing changes. The version in force is the one published on this page.

Version 1.1 · 10 September 2026