Privacy Policy

1. Who We Are

Olyve is operated as a sole proprietorship (eenmanszaak) registered in the Netherlands.

• Trade Name: Olyve
• Address: Keurenplein 41, 1069CD Amsterdam, Netherlands
• Email: contact@olyve.eu
• Website: olyve.eu

2. What Data We Collect

We collect the minimum amount of data necessary to provide our services:

For Buyers:

• Email address — to send purchase confirmation and download links
• Country — to calculate the correct VAT rate
• IP address — for fraud prevention and VAT validation
• Payment data — processed securely by Mollie (we do not store card details)

For Creators (Sellers):

• Email address — for account login and notifications
• Name — for your public creator profile
• Payment details — for payouts (processed securely)

3. Why We Process Your Data

We process your personal data for the following purposes:

• To process purchases and deliver digital products
• To calculate and remit VAT to EU tax authorities (legal obligation)
• To send transaction emails (receipts, download links)
• To prevent fraud and abuse
• To provide customer support

Legal basis: Contract performance (Art. 6(1)(b) GDPR), Legal obligation (Art. 6(1)(c) GDPR), and Legitimate interest (Art. 6(1)(f) GDPR) for fraud prevention.

4. Data Sharing

We share your data only with the following third parties, all of which are EU-based or GDPR-compliant:

• Mollie (Amsterdam, NL) — payment processing
• Postmark — transactional emails
• Hetzner (Germany) — hosting and data storage

We do not sell your data to third parties. We do not use your data for advertising.

5. Data Storage & Security

All data is stored on servers located in the European Union (Germany). We use encryption in transit (HTTPS) and at rest. Access to personal data is restricted to authorized personnel only.

6. Data Retention

• Transaction data: 7 years (Dutch tax law requirement)
• Creator accounts: Until account deletion requested
• Download tokens: 48 hours after purchase

7. Cookies

We use only essential cookies required for the website to function (e.g., authentication). We do not use analytics cookies or tracking pixels. We do not use marketing or advertising cookies.

8. Your Rights

Under the GDPR, you have the following rights:

• Right of access — request a copy of your data
• Right to rectification — correct inaccurate data
• Right to erasure — request deletion of your data
• Right to portability — receive your data in a portable format
• Right to object — object to processing based on legitimate interest

To exercise these rights, contact us at contact@olyve.eu.

9. Complaints

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify registered users of significant changes via email. The "last updated" date at the top of this page indicates when the policy was last revised.