Privacy Policy
Last updated: 2/12/2026
1. Controller
Virell is the data controller within the meaning of the GDPR.
Contact: support@virell.nl
2. Processed Data
We process:
• name
• email address
• account information
• profile information
• transaction data
• IP address
• device and usage data
• communications
• cookies
Payment card details are processed exclusively by Stripe.
3. Purposes
Data is used for:
• fulfilling agreements
• payment processing
• payouts
• customer service
• fraud prevention
• security
• legal obligations
• analysis and improvement
4. Legal Basis
Processing is based on:
• contract
• legal obligation
• legitimate interest
• consent (cookies/marketing)
5. Third Parties
Data may be shared with:
• Stripe
• hosting providers
• cloud and email services
• accountants/legal advisors
• government authorities when legally required
We do not sell data.
6. Retention Periods
• account: as long as active
• transaction data: at least 7 years (tax law)
• support data: up to 2 years
• marketing: until opt-out
7. Security
We take appropriate technical and organizational measures, including encryption and access restrictions.
No system is 100% secure; use is at your own risk.
8. Rights
Users have the right to:
• access
• correction
• deletion
• restriction
• data portability
• objection
9. Cookies
We use functional, analytical, and optional marketing cookies.
Users can disable cookies via browser settings.
10. International Transfers
Data may be processed outside the EU with appropriate safeguards (SCCs or equivalent).
11. Minors
The platform is intended only for persons aged 18 or older.
12. Changes
This privacy policy may be updated. The latest version always applies.
13. Complaints
Users may lodge complaints with the Data Protection Authority (Autoriteit Persoonsgegevens).
