Legal · GDPR

GDPR statement

Last updated · 1 May 2026

Concept processes the personal data of visitors from the European Union under the General Data Protection Regulation (GDPR). This statement summarises the lawful bases we rely on and the rights granted to you under that regulation.

Lawful bases for processing

We process personal data only when one of the following lawful bases applies:

  • Performance of a contract — fulfilling an order you have placed or providing an account-based service you have requested.
  • Legal obligation — meeting our tax, accounting and consumer-protection requirements.
  • Legitimate interests — improving the site, preventing fraud and communicating with existing customers in ways they would reasonably expect.
  • Consent — sending you marketing communications, where you have explicitly opted in.

Your rights under GDPR

  • Right of access — you can request a copy of the personal data we hold about you.
  • Right to rectification — you can ask us to correct inaccurate information.
  • Right to erasure — you can ask us to delete your personal data, subject to our legal obligations.
  • Right to restrict processing — you can ask us to pause processing while a question is resolved.
  • Right to data portability — you can request a machine-readable copy of the data you have provided.
  • Right to object — you can object to processing based on our legitimate interests, including direct marketing.

International transfers

Some of the service providers we work with are based outside the European Economic Area. Where personal data is transferred, we rely on standard contractual clauses or equivalent safeguards approved by the European Commission.

Complaints

If you believe we have processed your personal data unlawfully, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the supervisory authority in your country of residence.

About this document

Concept is a design showcase. No real transactions take place on this site — there is no checkout, no fulfilment, and no money changes hands. The terms below describe the standards we would apply if commerce were active, and exist as a reference for evaluating the project's editorial framing. Nothing here forms a binding agreement.
GDPR statement | Concept Store