At Fatboy the Original B.V. ('Fatboy', 'we', 'us'), we keep things simple and clear. We collect your personal data only when we have a good reason, we protect it properly, and we tell you exactly what is going on. This statement explains which personal data we process, on what legal basis, for how long, and what rights you have.

We process personal data in accordance with the General Data Protection Regulation (GDPR) and the Dutch Implementation Act (UAVG).

Fatboy the Original B.V. is the data controller for all processing activities described in this statement.

•       Trade name: Fatboy the Original B.V.

•       Address: Het Zuiderkruis 3, 5215 MV 's-Hertogenbosch, the Netherlands

•       Chamber of Commerce: 18067153

•       Email: serviceteam@fatboy.com

•       Data Protection contact: serviceteam@fatboy.com

1. Account Registration

When you create an account on our webshop, we ask for your name, address, and email address. We use this information to manage your account, to save your preferences so you do not have to re-enter them on each visit, and to communicate with you about your orders, invoices, and purchases.

Legal basis: consent (Art. 6(1)(a) GDPR). Retention: until you close your account, after which data is deleted within 30 days, unless a longer retention period is required by law.

2. Order Fulfilment

To process and deliver your order, we use your name, address, telephone number, billing address, email address, payment details, and IP address. We share the necessary data with our logistics partners FedEx, DHL Global, and DHL Europlus for delivery purposes, and with our payment service provider Adyen for payment processing.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR). Payment and transaction data is retained for 7 years in accordance with the Dutch statutory fiscal retention obligation (Art. 52 AWR).

3. Newsletter and Email Marketing

We send a newsletter to keep you up to date with new products, tips, and offers. We add your email address to our subscriber list only with your prior consent. We use Deployteq to manage and send our newsletters.

Legal basis: consent (Art. 6(1)(a) GDPR). Retention: until you unsubscribe. You can unsubscribe at any time via the unsubscribe link in every newsletter or by contacting us directly.

We apply a soft opt-in for existing customers: where permitted under Art. 11.7(3) of the Dutch Telecommunications Act (Tw), we may contact you by email about similar products or services. You can object to this at any time.

4. Dealer and Professional Portal Access

If you have access to our dealer or professional portal, we record your login activity and configuration actions as part of our service delivery and for audit trail purposes.

Legal basis: consent (Art. 6(1)(a) GDPR) / performance of a contract (Art. 6(1)(b) GDPR). Retention: for the duration of the service relationship, plus any applicable statutory periods.

5. Contact Form and Customer Service

When you submit a question or request via our contact form, we process your email address, message content, and order number (if applicable). We retain this information until we are satisfied that your question has been resolved, and for a further 6 months afterwards to allow for follow-up.

Legal basis: performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR) / legitimate interests in providing adequate customer service (Art. 6(1)(f) GDPR).

6. Website Analytics and Personalisation

We collect data about how visitors use our webshop using Google Analytics. We have accepted Google's data processing agreement, we do not permit Google to use this data for other Google services, and we apply IP anonymisation.

We may also combine data to personalise the content and offers you see. If you prefer that we do not build a statistical profile, you can adjust your cookie preferences at any time via our cookie banner.

Legal basis: consent (Art. 6(1)(a) GDPR) for analytics and personalisation cookies. Functional cookies that are strictly necessary for the operation of the webshop do not require consent. Retention: up to 1 year, or shorter depending on your preferences.

7. Promotional Communications

Beyond our newsletter, we may inform you about new products or services via email and social media, subject to your preferences. You can object to direct marketing at any time: every commercial email contains an unsubscribe link; on social media, you can block us or use the platform's opt-out function; and you can also update your preferences in your account or by contacting us.

Legal basis: consent (Art. 6(1)(a) GDPR) for email marketing to prospects. For existing customers, see section 3 above.

8. Lead Generation via Social Media and LinkedIn Forms

We use lead generation forms on social media platforms, including LinkedIn, to reach individuals and business representatives who may be interested in our corporate gifting and business-to-business offering. When you complete such a form, you provide us with your name, (company) address, and email address. We use this information to send you a PDF with information about our products and services, and subsequently to approach you with a commercial gifting proposal.

Legal basis and balancing assessment:

•       Where you have actively submitted the form and ticked a consent box, we rely on consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time by emailing privacy@fatboy.com.

•       Where no explicit consent checkbox is present on a form, we rely on legitimate interests (Art. 6(1)(f) GDPR), on the basis that (i) direct B2B marketing is a commercially legitimate interest (Recital 47 GDPR; EDPB Guidelines 1/2024), (ii) the data involved is limited to basic contact information, (iii) recipients have voluntarily engaged with our advertising content, and (iv) we notify them clearly in this statement and in the form itself of our processing and their right to object. [AANNAME: a documented Legitimate Interests Assessment (LIA) must be prepared and maintained to support this basis; the balancing outcome may differ for consumer leads.]

Retention; leads who do not become customers: We retain lead data for a maximum of 12 months from the date of collection, unless you have made a purchase or entered into a business relationship with us within that period. This shorter retention period is justified because the legitimate purpose (commercial follow-up) is either fulfilled or no longer relevant within that window, and retaining the data longer would not be proportionate under Art. 5(1)(e) GDPR (storage limitation). If you become a customer, the relevant sections of this statement on order fulfilment and the customer relationship apply.

Joint controllership with LinkedIn: When Fatboy uses LinkedIn Lead Gen Forms, Fatboy and LinkedIn Ireland Unlimited Company process personal data in a shared context. For data collected through the Lead Gen Form itself, the customer (Fatboy) acts as data controller and LinkedIn acts as data processor on Fatboy's behalf. For data processed in connection with LinkedIn Page Insights, Fatboy and LinkedIn are joint controllers under a separate Joint Controller Addendum. In either context, data subjects may exercise their rights directly against Fatboy (using the contact details at the end of this statement) or against LinkedIn.

Right to object: If processing is based on legitimate interests, you have the right to object at any time on grounds relating to your particular situation (Art. 21 GDPR). You can do so by emailing info@fatboy.com. We will then cease processing unless we can demonstrate compelling legitimate grounds.

9. Location Data

We do not systematically collect GPS or precise location data. If a specific feature of our website or app requires location data, we will ask for your prior consent before collecting it. Any location data processed in connection with mapping services (such as the store locator, which relies on Google Maps / reCAPTCHA) is subject to Google's privacy policy. We have no control over how Google processes data it receives in that context; we recommend reviewing Google's privacy policy directly.

Legal basis: consent (Art. 6(1)(a) GDPR) where location data is actively collected. For data processed autonomously by Google in connection with our store locator, Google acts as an independent data controller.

10. Advertising

Our webshop may display targeted advertisements. We use data about your interactions with our website to measure whether advertisements are effective and to serve relevant content in the future. This processing requires your consent and is managed via our cookie banner.

Legal basis: consent (Art. 6(1)(a) GDPR). You can withdraw or adjust your consent at any time via the cookie settings in our website footer.

11. Social Media Plugins and Buttons

Our website includes social media buttons (Instagram, Facebook, Pinterest, YouTube). These buttons may allow the respective platforms to collect your personal data when you interact with them. We recommend reviewing the privacy policies of those platforms. Where Fatboy uses Facebook Pixel, LinkedIn Insight Tag, Pinterest Tag, or similar tracking tools, these are activated only with your consent via our cookie banner.

12. #yesFatboy; User-Generated Content

We love seeing Fatboy products in real homes. We may contact you via social media to ask whether we may use your photo on our social channels, on our website, or in other communications such as our magazine or newsletter.

By responding to our request with #yesFatboy, you confirm and consent to the following:

•       You are the owner or rights holder of the photo you have posted.

•       We may share your photo on our website.

•       We may share your photo on our social media channels: Instagram, Facebook, and Pinterest.

•       We may use your photo in other communications, including our magazine and newsletters.

•       You grant us a non-exclusive commercial licence to use your photo for commercial purposes, without further restrictions.

Legal basis: consent (Art. 6(1)(a) GDPR). We will use reasonable efforts to credit you as the creator and may link to your profile, but we are not obliged to do so. Retention: for as long as the content remains in active use, unless you withdraw consent.

Withdrawing your consent: Send an email to marketing@fatboy.com with a direct link to the photo and a request to withdraw your consent. We will remove the photo from active use as soon as reasonably practicable. Please note that withdrawal does not affect content that has already been published in a printed format (such as a physical magazine).

13. Transfers to Third Parties

We do not share your personal data with third parties other than those listed in this statement, unless we are legally required to do so (for example, by law enforcement authorities in connection with a suspected criminal offence). Our current data processors are:

•       Adyen; payment processing

•       FedEx, DHL Global, DHL Europlus; delivery

•       Deployteq; email marketing

•       Google (Analytics, Maps, reCAPTCHA) ; analytics and webshop functionality

•       LinkedIn Ireland Unlimited Company; lead generation forms and page insights

•       Zendesk; customer service platform

14. International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA), including in the United States. Where this is the case, we ensure that an appropriate transfer mechanism is in place, such as Standard Contractual Clauses (SCCs) adopted by the European Commission (Art. 46 GDPR).

15. Cookies

Our website uses cookies. Cookies are small files stored on your device that allow us to recognise you on a return visit and to improve your experience. On your first visit, our cookie banner will inform you about the cookies we use and ask for your consent where required.

We distinguish between:

•       Strictly necessary cookies: required for the webshop to function. These do not require consent.

•       Analytical cookies: used to understand how visitors use our website (e.g. Google Analytics with IP anonymisation). These require consent.

•       Marketing/tracking cookies: used to serve relevant advertising and measure campaign performance. These require consent.

You can withdraw or change your cookie consent at any time via the cookie settings link in our website footer. Refusing all non-essential cookies is as straightforward as accepting them. Note that disabling certain cookies may affect the functionality of parts of our website.

We have entered into data processing agreements with all third parties that place cookies via our website. Nonetheless, we cannot fully control how those parties process data collected via their own cookies; please review their privacy policies accordingly.

16. Security

We take appropriate technical and organisational security measures to protect personal data against loss, unauthorised access, and misuse. We keep our measures up to date and regularly review what could go wrong. Where we engage third parties to process data on our behalf, we require them to maintain equivalent standards.

17. Your Rights

Under the GDPR, you have the following rights:

•       Right of access (Art. 15): you have the right to know which personal data we hold about you.

•       Right to rectification (Art. 16): you have the right to correct inaccurate or incomplete data.

•       Right to erasure (Art. 17): you can ask us to delete your personal data, subject to legal retention obligations.

•       Right to restriction (Art. 18): you can ask us to temporarily limit processing of your data.

•       Right to data portability (Art. 20): where technically feasible, you can ask us to transfer your data to another party.

•       Right to object (Art. 21): you can object to processing based on legitimate interests or to direct marketing; in the latter case, we will always comply.

•       Right to withdraw consent (Art. 7(3)): where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at privacy@fatboy.com. We may ask you to verify your identity. Please do not send us a copy of your passport or ID document in its entirety; cover your citizen service number (BSN) and photograph. We will respond within one month; where a request is complex, we may extend this by a further two months and will inform you accordingly (Art. 12(3) GDPR).

18. Complaints

If you have a complaint about how we handle your personal data, please contact us at serviceteam@fatboy.com. We take every complaint seriously and will investigate and respond. If you are not satisfied with our response, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): www.autoriteitpersoonsgegevens.nl.

19. Changes to This Statement

We reserve the right to update this privacy statement. We recommend checking it periodically. Significant changes will be communicated to you via email or a prominent notice on our website.

Last updated: June 2026