Privacy policy
We use the data we collect through our website to improve our service and ultimately your experience at OGÉR. Below are some important changes:
- Easier to manage and adjust your settings in your account.
- More insight into what data we collect.
- More rights regarding your personal data.
- If you share your information with us, we will use it to help you even better and faster with all steps surrounding your purchases and to keep you informed of, among other things, our promotions and events.
1. Privacy policy
This is the Privacy Policy of OGÉR Holding BV (hereinafter "OGÉR"). OGÉR takes the protection of your personal data very seriously. We process your personal data in accordance with applicable data protection regulations, including the General Data Protection Regulation (Regulation (EU) 2016/679, hereinafter "GDPR").
In this Privacy Policy, we explain, among other things, what personal data we collect, for what purposes, and on what basis. We do this based on the various ways in which we obtain personal data. We may amend this Privacy Policy from time to time. We therefore advise you to consult it regularly. This Privacy Policy was last amended on January 28, 2026.
1.1 Who is responsible for the processing of personal data?
OGÉR is a leading brand with stores throughout the Netherlands and Belgium and various digital marketing and sales channels. The OGÉR website can be found at www.oger.nl (hereinafter the "Website").
The controller responsible for all processing of personal data mentioned below is:
OGÉR Holding BV
Kwadijkerkoogweg 23
1442 LA Purmerend
Chamber of Commerce number: 36043565
E-mail: service@oger.nl
Telephone: (+31) 853 034 636
Data Protection Officer:
For questions specifically about data protection, please contact us at: privacy@oger.nl
1.2 What personal data does OGÉR collect and for what purposes?
Overview of processing and legal bases:
We process your personal data for the following purposes:
Order processing: We use your name, address, email address, phone number, and payment information to process and ship your orders. We do this based on the performance of our contract with you (Article 6, paragraph 1, subparagraph b GDPR).
Customer account management: To manage your customer account, we process your name, email address, purchase history, preferences, and sizes. We do this based on the execution of our agreement with you (Article 6, paragraph 1, sub b, GDPR).
Sending a newsletter: We use your email address, preferences, and purchase information to send you our newsletter. This is based on your consent (Art. 6, paragraph 1, subparagraph a GDPR).
Website analysis: We analyze the use of our website using IP addresses, browsing behavior, device information, and conversions. We do this based on our legitimate interest in improving our website (Art. 6, paragraph 1, subparagraph f GDPR).
Marketing optimization (Billy Grace): To optimize our marketing efforts, we process data about your website visits, conversions, origin, and cross-channel data through Billy Grace. This is based on our legitimate interest in making our marketing more efficient (Art. 6, paragraph 1, sub f GDPR).
Personalized marketing: We use your purchase history, interests, and browsing behavior for personalized marketing. This is based on your consent (Art. 6, paragraph 1, subparagraph a GDPR).
Customer service: For our customer service, we process your contact details and correspondence via Gorgias. We do this based on the execution of the agreement and our legitimate interest in providing good service.
Tax administration: We store your name, address, invoice information, and purchase amounts for our tax administration. This is a legal requirement (Article 6, paragraph 1, sub c, GDPR).
Fraud prevention: To prevent fraud, we process your IP address, payment behavior, and order patterns. We do this based on our legitimate interest in protecting our customers and company (Article 6, paragraph 1, subparagraph f, GDPR).
1.2.1. Online shop account
We use your information to ensure you can easily place follow-up orders on the website and to process your order.
What data do we collect:
- Name and contact details
- Email address
- Shipping and billing address
- Phone number
- Purchase history
- Saved preferences (e.g. favorite sizes, payment methods)
- Login details (username, encrypted password)
What do we use this data for:
- Processing your orders
- Easily place repeat orders
- Access your order history and digital receipts
- Managing your account preferences
- Contact us about your orders
Legal basis:
The legal basis for this processing is the performance of the agreement with you (Art. 6 para. 1 sub b GDPR).
Newsletter personalization:
If you have subscribed to the newsletter, your purchase information will be used to tailor the newsletter to your interests. This is based on your consent (Art. 6 (1)(a) GDPR). You can unsubscribe from the newsletter at any time via the unsubscribe link in each email or through your account settings.
Manage your data:
Through your account on www.oger.nl you can:
- View and change your personal data
- Adjust your communication preferences
- View your order history
- Delete your account
1.2.2 Ordering as a guest
If you want to place an online order without creating an account, we ask you to enter information that we need to process the order and to contact you about your order.
What data do we collect:
- Name
- Email address
- Shipping address
- Billing address (if different)
- Phone number (for delivery)
- Payment details (these are processed directly by our secure payment service providers Mollie and Shopify Payments)
What do we use this data for:
- Processing and shipping your order
- Contact about your order (confirmation, shipping, questions)
- Customer service for questions or problems
- Tax administration (legal retention obligation)
Legal basis:
The legal basis for this processing is the performance of the agreement with you (Art. 6 para. 1 sub b GDPR).
Website usage and statistics:
We also use your data and website usage to compile (non-personally identifiable) statistics and demographic reports about the use of our website. This gives us more insight into how the service is used and allows us to improve the technology.
Examples of what we analyze:
- Which products and categories are popular
- Where visitors abandon their purchase
- Which pages perform well or less well
- Demographic information (age groups, regions – not linked to individuals)
Legal basis for analytics:
The legal basis for this is a legitimate interest of OGÉR to gain insight into the use of our services and to improve our processes (Art. 6 para. 1 sub f GDPR).
No required account:
You can always choose to order as a guest. An account is not required to make purchases at OGÉR.
2. Customer service
When you contact or use OGÉR customer service, we collect the following information as needed:
Which data:
- Email address
- Phone number
- Name, address and place of residence
- Contents of correspondence
- If you contact us via our chat, we also collect your IP address, the page you are on when you start the chat, and the referrer (the website you came from).
What do we use this data for:
We use this information to respond to your complaint, request or question as best as possible, in order to implement the agreement with you.
We store your question so we can provide you with better assistance in the future and analyze your customer satisfaction, based on OGÉR's legitimate interest in improving its services.
Legal basis:
- Performance of the agreement (Art. 6 para. 1 sub b GDPR) - to answer your question
- Legitimate interest (Art. 6 para. 1 sub f GDPR) - for improving services and customer satisfaction analysis
Chat function (Gorgias):
We use Gorgias for our live chat function. Gorgias collects technical information (IP address, page URL, referrer) to enable the chat function and to give us insight into where customers need assistance. Gorgias acts as a data processor and has a data processing agreement with OGÉR.
3. To whom does OGÉR provide your data?
OGÉR may use third-party services to process your data in accordance with this privacy statement. These third parties act as processors for OGÉR, and OGÉR ensures that these parties provide sufficient guarantees regarding technical and organizational security measures.
Third parties acting as processors for OGÉR have concluded a processing agreement with OGÉR which stipulates, among other things, that they will process your data:
- Will only process on behalf of OGÉR
- Do not use for personal purposes
- Protect with appropriate security measures
- Comply with all GDPR obligations
OGÉR will otherwise only provide data to third parties with your express consent or if it is obliged to do so by law or regulation, if it is compelled to do so as a result of legal proceedings and/or if it deems this necessary to protect its own interests.
3.1 Categories of recipients
We share your information with the following categories of trusted service providers:
Hosting & IT infrastructure:
- Shopify (webshop platform and hosting).
Payment service providers:
- Mollie
- Shopify Payments
Analytics & Marketing Intelligence:
- Billy Grace (marketing attribution and performance tracking)
- Google Analytics (website analysis)
- Google Tag Manager (manage measurement pixels and tracking codes)
Marketing & Advertising:
- Google Ads (online advertising on Google, YouTube, Display Network)
- Facebook/Meta (Facebook and Instagram ads)
Communication & Customer Service:
- Gorgias (customer support platform, live chat, ticketing system)
Shipping & Logistics:
- DHL, PostNL and other shipping partners (for order delivery)
- In Belgium: Bpost and other Belgian shipping partners
Financial & Administrative:
- Accountants and tax advisors (for legal obligations).
3.2 Billy Grace: Marketing Analytics Partner
Role of Billy Grace:
Billy Grace acts as a data processor and has a data processing agreement with OGÉR. The platform analyzes data from various marketing channels (Google, Facebook, email, etc.) to provide insights into which campaigns perform best and how we can best allocate our marketing budget.
What does Billy Grace do:
- Collects and analyzes cross-channel marketing data
- Uses AI to optimize marketing performance
- Provides attribution models (which channel gets credit for a sale)
- Generates reports on customer journey and conversions
- Advises on budget allocation between different marketing channels
How Billy Grace protects your privacy:
- Uses first-party tracking (no third-party cookies from Billy Grace itself)
- Data is processed anonymously for reporting
- Fully GDPR compliant
- Data is not shared with advertisers or other third parties
- No sale of data to third parties
- Data storage with appropriate security measures
- Does not place marketing or retargeting cookies itself
Billy Grace's Processing Agreement contains:
- Processing only according to OGÉR instructions
- Appropriate technical and organizational security measures (encryption, access control, logging)
- Confidentiality obligation for all employees with access to data
- Support in exercising your privacy rights (access, deletion, etc.)
- Obligation to report data breach to OGÉR within 24 hours
- Limited use of sub-processors (only with prior consent of OGÉR)
- Deletion or return of data after termination of collaboration.
3.3 Collaboration with other parties
OGÉR may also offer services in collaboration with other parties (e.g., special collections, co-branded events, or partnerships with brands). These parties may then be involved in executing an agreement with you. You will always be informed of this when you use such a service.
3.4 Other cases
For the rest, OGÉR only provides data to third parties:
- With your express consent
- If it is obliged to do so by law or regulation (e.g. tax obligations, court order)
- If she is forced to do so as a result of legal proceedings
- If it deems this necessary to protect its own legitimate interests (e.g. in case of fraud or abuse).
3.5 International data transfers
Transfer outside the EU:
Some of our service providers may process data outside the European Economic Area (EEA). In those cases, we ensure appropriate safeguards are in place to protect your data:
- EU Standard Contractual Clauses (SCCs): Contractual agreements approved by the European Commission that guarantee an adequate level of protection
- Adequacy decision: Countries that the EU has found to provide a comparable level of protection (such as UK, Switzerland, Canada)
- Binding Corporate Rules: For large international organizations with internal privacy rules
Transparency:
We currently primarily use service providers within the EU. Some services (such as Google, Facebook/Meta) may process data in the US under transatlantic regulations. For specific questions about international transfers, please contact service@oger.nl .
4. How do we protect your personal data?
Internally, we ensure that both our store staff and office staff understand the importance of protecting customer data. For example, employees who have access to customer data have a duty of confidentiality and training focuses on the correct and safe use of customer data and systems in which customer data is stored. In addition, we actively send processing agreements to parties we work with, which are so small that they are unable to draw up a processing agreement themselves. We therefore ensure that our partners also meet the requirements
OGÉR has taken appropriate technical and organizational measures to protect your personal data against loss or any form of improper processing. For example, we use a firewall and have taken encryption measures to prevent unauthorized third parties from accessing data. It is logged who has (had) access to the user data. The employees who have access to the data are trained in advance and instructed on how to handle this data. They are also subject to a contractual obligation of confidentiality.
5. What are your rights
5.1 Inspection and correction
If you would like to know which personal data OGÉR processes about you and for what purposes, you can contact OGÉR via service@oger.nl. You can also request changes or corrections to your data. If you are under 16 years of age, such requests must be made by your parent (or legal representative). OGÉR will respond to your request as quickly as possible, but no later than within four (4) weeks.
5.2 Objection
You can object at any time to the use of your personal data for marketing purposes and/or to receiving (further) marketing information by contacting our customer service at service@oger.nl . Emails and other messages sent by OGÉR also include an unsubscribe option. If you use this option, you will no longer receive such messages. You cannot unsubscribe from essential service messages.
5.3 Removal
If you want OGÉR to delete your personal data and/or your account, you can request this by sending an email to service@oger.nl. Some personal data may be retained after the deletion request, for example, if this is necessary for processing placed orders or if there is a legal obligation to retain the data.
5.4 Restriction of processing
If you have legitimate reasons to request a restriction of processing, for example because you dispute the accuracy of the personal data that OGÉR processes, or you have objected to the processing of personal data by OGÉR, you can request this by sending an email to service@oger.nl.
5.5 Data Portability
If OGÉR processes your personal data based on your consent and via automated means, you have the right to request that we provide you with the personal data you provided to OGÉR in a structured, commonly used, and machine-readable format. You can make this request by sending an email to service@oger.nl.
5.6 Withdrawal of consent
If processing of your personal data is based on your (explicit) consent, you have the right to withdraw this consent at any time, without affecting the lawfulness of the processing based on consent before its withdrawal.
5.7 Complaint
If you have a complaint about the use of personal data by OGÉR, you have the right to file a complaint with the Dutch Data Protection Authority.
6.Cookies
We strive to provide you with as transparent and comprehensive information as possible about the cookies used on OGER.nl. We use cookies to improve your user experience on our website and to filter advertisements and other content based on your interests. Below, you'll find further explanation about cookies and similar technologies, what they're used for, and how you can opt out of cookies if you wish. We'll keep you informed about developments regarding cookies via this webpage.
6.1 Regulations regarding cookies in the Netherlands
Dutch law requires websites to be transparent about the use of cookies and similar technologies. These rules are laid down in the Telecommunications Act and are based on European guidelines. Your privacy is, of course, important to us, and that's why we're happy to provide you with detailed information about this topic on this page.
Key principles in 2026:
- For non-essential cookies we require your prior consent
- You must have the option to refuse cookies ("Reject all" button)
- You can always change your choices
- Essential cookies (necessary for the functioning of the website) may be placed without permission
- Silent consent (pre-checked boxes) is not allowed
- Cookie walls (denying access when refusing cookies) are not permitted in principle
Your rights:
- Right to refuse cookies without adverse consequences for website use
- Right to clear and understandable information about cookies
- Right to withdraw consent at any time
- Right to respect Global Privacy Control (GPC) signals
6.2 What are cookies?
Cookies are small text files that are placed on a computer, phone, or tablet when you visit a website. These cookies are read by your browser (e.g., Google Chrome, Internet Explorer, Safari, Firefox, Microsoft Edge) when you open a web page. The creator of a cookie determines what text files are placed in that cookie.
Privacy and personal data:
As long as you as a user do not enter any personal data on the site you visit, the cookie cannot contain this information.
Different types of cookies:
First-party and third-party cookies:
There are direct and indirect cookies, also called first- and third-party cookies:
- First-party cookies: Placed by OGÉR itself (oger.nl domain)
- Third-party cookies: Are placed by external parties such as Google or Facebook
Session and persistent cookies:
- Session cookies: Temporary cookies that are automatically deleted when you close the browser
- Persistent cookies: Remain on your device for a certain period (days, months or years) or until you manually delete them
Safety:
Cookies are not inherently dangerous; they are not computer programs and cannot be used to spread computer viruses.
Similar techniques:
OGÉR uses techniques that are similar to cookies:
- Link tracking: Link tracking involves adding elements to the URL that allow us to recognize you when you click through from our marketing emails to our website.
- Tracking pixels: Small invisible images (1x1 pixels) in emails or on web pages that are used to measure whether emails are opened and which links are clicked.
- Local Storage/Session Storage: Modern web browsers offer storage functionality that allows websites to store more data locally than is possible with traditional cookies.
- Device fingerprinting: A technique that collects information about your browser and device (such as screen resolution, installed fonts, and browser version). OGÉR does not use fingerprinting techniques.
6.3 Functional cookies
These cookies are strictly necessary for the functioning of our website and cannot be disabled. No consent is required for these cookies.
OGÉR: Cookies that are necessary for online shopping (shopping cart, session, login status, language preferences).
Mollie: Cookie used for payment security purposes.
Shopify Payments: Cookie used for payment security purposes.
Gorgias: Cookie that allows you to contact us via live chat and other methods via the contact button.
6. Analytical cookies
These cookies help us understand how visitors use our website. We need your permission for these cookies.
Google Analytics: A tracking service that helps us identify areas for improvement on our website. Collects anonymized information about page visits, session duration, device type, and location. IP anonymization is enabled. Retention period: 24 months.
Google Tag Manager: A service that helps us manage the tracking pixels. It doesn't collect data itself but facilitates other tools.
Billy Grace: An AI-powered marketing analytics platform that helps us measure and optimize the performance of our marketing campaigns. Billy Grace uses first-party tracking technology to collect more accurate data about the customer journey and analyze which marketing channels (such as Google Ads, Facebook, etc.) are most effective.
Billy Grace collects:
- Website visits and conversions (anonymized)
- Origin of traffic (Google, Facebook, email, etc.)
- Device and browser information
- Cross-channel performance data
Privacy: Billy Grace does not place its own marketing cookies. Data is processed anonymously and is not shared with advertisers. Retention period: 24 months.
6.5 Tracking cookies
These cookies are used for personalized advertising and retargeting. We need your permission for these cookies.
Meta: Cookies that collect information about how a user uses the website. This information is used to show the most relevant ads for a specific user on third-party sites (Facebook and Instagram). Facebook uses session and persistent cookies for its advertising products. Retention period: up to 90 days.
Google Ads: Cookies that collect information about how a user uses the website. This information is used to show the most relevant ads to a specific user on third-party sites (Google, YouTube, Display Network) based on your recent searches and website visits. Google Ads uses session and persistent cookies for its advertising products. Retention period: up to 390 days.
Important: You can refuse tracking cookies without affecting the functionality of our website. You will still see ads, but they will not be personalized.
Meta: Cookies that collect information about how a user uses the website. This information is used to show the most relevant ads for a specific user on third-party sites (Facebook and Instagram). Meta uses session and persistent cookies for its advertising products.
Google Ads: Cookies that collect information about how a user uses the website. This information is used to show the most relevant ads to a specific user on third-party websites (Google) based on your recent searches. Google AdWords uses session and persistent cookies for its advertising products.
