We welcome you to our website and online shop, and thank you for your interest in this Privacy Policy. At HIVTest.EU, we understand that the careful handling of your Personal Data is important to you.
We have written this Privacy Policy to explain, in accordance with the General Data Protection Regulation ("GDPR") and other applicable data protection laws, which Personal Data we as Data Controller process, which service providers may process data on our behalf, why we process this information and what rights you have.
In short, we want to inform you as clearly and comprehensively as possible about the Personal Data we process about you.
Privacy Policies are usually very technical and use legal terminology. However, this Privacy Policy is intended to describe the most important things to you as simply and transparently as possible. Where technical terms are necessary, we try to explain them in a reader-friendly manner. If you still have questions, please contact us.
Last updated: 9 September 2026
This Privacy Policy applies to Personal Data processed by us in connection with HIVTest.EU and to Personal Data processed on our behalf by service providers acting as processors.
By Personal Data, we mean information relating to an identified or identifiable natural person. This may include your name, address, telephone number, email address and IP address. Information that can no longer be linked to an identifiable individual is not Personal Data.
Under the GDPR, the Data Controller is responsible for determining why and how Personal Data is processed. For HIVTest.EU, the Data Controller is:
International Web & Distribution Services (IWDS)
Keizersgracht 520H
1017 EK Amsterdam
The Netherlands
Chamber of Commerce: 86873717
VAT identification number: NL004327802B11
Telephone: +31 6 24230891
Email: info@hivtest.eu
Web: www.hivtest.eu
The GDPR provides several legal bases that allow organisations to process Personal Data. We only process your Personal Data where an appropriate legal basis applies. Depending on the circumstances, this may include the following:
You have given us your consent to process Personal Data for a specific purpose. An example is information you voluntarily submit through a contact form, or your consent to receive marketing communications.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing that took place before consent was withdrawn.
We process Personal Data where this is necessary to perform a contract with you or to take steps at your request before entering into a contract. For example, we need certain information to process and deliver an order.
We process Personal Data where this is necessary to comply with a legal obligation. For example, we may be legally required to retain certain transaction and accounting information.
In certain circumstances, we process Personal Data where this is necessary for our legitimate interests or those of a third party, provided that these interests are not overridden by your fundamental rights and freedoms.
Examples may include maintaining the security and proper operation of our website, preventing fraud, improving our services and handling customer enquiries.
As a general rule, we keep Personal Data only for as long as necessary for the purpose for which it was collected, unless we are required or permitted by law to retain it for a longer period.
Different retention periods may apply depending on the type of information. For example:
Dutch business records, including relevant invoices and transaction records, may in many cases need to be retained for at least seven years.
Where you request deletion of your Personal Data, we will delete or anonymise the information where there is no legal or other valid reason requiring us to retain it.
In the course of providing our website and services, we may disclose Personal Data to service providers, companies or other organisations where this is necessary and legally permitted.
Where a third party processes Personal Data on our behalf as a processor, we require that party to process the information in accordance with applicable data protection requirements and our instructions.
Our service providers may include companies that assist us with:
We only share Personal Data that is reasonably necessary for the relevant service.
The GDPR gives you a number of rights concerning your Personal Data. Depending on the circumstances and applicable legal requirements, these include:
If you wish to exercise one of your rights, please contact us at info@hivtest.eu. We may need to verify your identity before responding to a request in order to protect your Personal Data.
As our Data Controller is established in the Netherlands, you may also contact or lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (AP): autoriteitpersoonsgegevens.nl.
When you contact us by telephone, email, contact form or social media, Personal Data may be processed.
The information is processed for the purpose of handling your question, communicating with you and, where relevant, carrying out the related business transaction.
The legal basis may be your consent, the performance of a contract, steps taken before entering into a contract or our legitimate interest in responding to enquiries and providing customer service.
Whenever you browse the internet, most websites use small text files known as cookies. Cookies can store certain information such as language preferences, session information or website settings.
Some cookies are necessary for the website and online shop to function properly. Other cookies, including certain analytics, advertising or tracking cookies, are only used after you have given consent where consent is legally required.
You can manage your cookie preferences through the cookie settings available on our website. You can also change your browser settings or delete cookies from your device.
For more information about the cookies and similar technologies used on HIVTest.EU, please read our Cookie Policy.
When you visit our website, our web server may automatically process technical information such as:
As a rule, server log information is stored for approximately 14 days and is then automatically deleted, unless a longer period is necessary for security, fraud prevention, investigation of unlawful activity or compliance with a legal obligation.
The processing of this information is based primarily on our legitimate interest in ensuring the security, stability and proper technical operation of the website.
We use external technical service providers to support the operation, maintenance and security of our website.
Where applicable, information submitted through the website, including information entered into forms, may be processed by our hosting, technical or Content Management System (CMS) providers on our behalf.
These service providers process Personal Data only to the extent necessary to provide the relevant technical services and subject to applicable contractual and data protection requirements.
In our online shop, you may be able to place an order using a customer account or, where available, place an order as a guest.
For order processing, delivery, payment administration, customer service and fraud prevention, we may request information including:
If the delivery address differs from the billing address, we process the delivery details necessary to deliver the order.
We do not currently request your date of birth when creating a customer account or placing an order.
Because the products offered through HIVTest.EU relate to HIV testing, we recognise that information concerning your order may be particularly sensitive to you.
We therefore treat order and customer information confidentially and restrict access to employees and service providers who require the information for legitimate purposes such as processing the order, payment, delivery, customer service, security or compliance with legal obligations.
We do not use the fact that you purchased an HIV test to make assumptions about your HIV status or to create a medical diagnosis or health profile.
If you decide to register in our shop, you may have the advantage of being able to view your order history and manage certain account information.
The information you provide when creating an account is stored for the purpose of operating the protected customer area and making future orders easier.
You may contact us if you wish to close your customer account. Where there is no legal reason requiring us to retain particular information, the account data will be deleted or anonymised as appropriate.
Passwords are stored in protected form and should not be readable by our employees. No member of our staff is authorised to ask you to provide your password by telephone or email. Please never disclose your password if you receive such a request.
If you place an order as a guest, no permanent customer account is created for you.
However, the information required to process the order, complete payment, deliver your goods, provide customer service and comply with administrative or legal obligations will still be processed and retained where necessary.
In our online shop, you can choose between different payment methods. The Personal Data required to process the selected payment method may be transmitted to the relevant payment service provider.
Where applicable, payment processing may be carried out by Mollie B.V. or another payment provider displayed during checkout.
We do not normally receive or store all payment information handled directly by an independent payment provider, such as complete card details.
Payment-related processing is generally necessary for the performance of the purchase contract. Certain fraud-prevention and security processing may also be based on our legitimate interests or those of the payment provider, where permitted by law.
In order to fulfil your order, we provide the shipping company or delivery service with the Personal Data necessary to deliver your goods.
This normally includes information such as your name and delivery address. Where necessary for delivery notifications or coordination, your email address or telephone number may also be provided to the delivery service.
We do not provide shipping companies with more Personal Data than is reasonably necessary for the delivery and related services.
To protect the Personal Data we process, we use appropriate technical and organisational security measures. These measures are intended to protect information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
Depending on the processing involved, measures may include restricted access, password protection, encrypted connections, security monitoring, firewalls and organisational access controls.
No internet-based system can be guaranteed to be completely secure. However, we regularly consider the security measures appropriate to the nature of the information and the risks associated with the processing.
If a Personal Data breach occurs, we will assess the incident and notify the competent supervisory authority and/or affected individuals where notification is required under applicable data protection law.
We do not disclose or distribute your Personal Data to third parties unless there is an appropriate reason and legal basis. This may include situations where:
External processors acting on our behalf may support us with technical operation, website services, payment processing, shipping, email services, security, data management and other necessary business functions.
Where required, we enter into appropriate processing arrangements and require service providers to protect the Personal Data entrusted to them.
We may also disclose Personal Data where we are legally required to do so, for example in response to a lawful court order or a request from an authorised public authority.
Some of the service providers or technology providers we use may process Personal Data in countries outside the European Economic Area (EEA).
Where Personal Data is transferred outside the EEA, we take appropriate steps to ensure that the transfer is permitted under applicable data protection law. Depending on the destination and service provider, this may include:
We maintain a presence on social media platforms, including Facebook and Instagram.
When you visit or interact with our pages on these platforms, the relevant social media provider may process information about you in accordance with its own privacy policy and platform settings.
We may receive statistical or interaction information from social media platforms to help us understand how visitors engage with our content.
For more information about how these platforms process Personal Data, please consult their respective privacy policies:
We use Personal Data to fulfil and process orders and to respond to enquiries. We only use Personal Data for direct electronic marketing where there is an appropriate legal basis and where the requirements applicable to such communications have been met.
Where consent is required, we will ask you to provide that consent before sending marketing communications. We do not treat the mere fact that you visited our website or purchased a product as unrestricted consent to receive marketing messages.
Marketing emails sent by us will identify the sender and include a simple method for unsubscribing or opting out. You can withdraw your consent to marketing at any time.
Where advertising or conversion-tracking technologies such as a social media advertising pixel are enabled on HIVTest.EU, non-essential tracking technologies are only activated after consent where consent is legally required.
These technologies may help us understand whether an advertising campaign resulted in visits or other actions on our website and may help us measure the effectiveness of advertising.
You can manage or withdraw your consent through the cookie settings on our website. Further information about the technologies currently in use is provided in our Cookie Policy.
We use email services to send order confirmations, customer service communications and other service-related messages. Where you have subscribed to marketing communications, we may also use email services to send newsletters or information about our offers.
For email infrastructure and newsletter-related services, we may use services provided by Webvalue and Chipmail. Depending on the type of communication, your email address and relevant technical information may be processed by one or both providers on our behalf.
Marketing and newsletter emails are sent only where there is an appropriate legal basis and consent is obtained where required.
You can unsubscribe from marketing emails at any time using the unsubscribe option provided in the message or by contacting us at info@hivtest.eu.
Unsubscribing from marketing communications does not prevent us from sending service-related messages that are necessary in connection with an order, customer account, security issue or other requested service.
The products and services offered through HIVTest.EU are intended for people aged 18 and over.
We do not knowingly collect Personal Data through our online shop from children under the age of 18 for the purpose of allowing them to purchase our products.
If we become aware that Personal Data has been collected from a minor in circumstances where it should not have been collected, we will take appropriate steps in accordance with applicable law.
Our website may contain links to external websites. We do not control the privacy practices or content of those websites.
We therefore recommend that you read the Privacy Policy of any external website you visit before providing Personal Data.
Because we are always looking for ways to improve our website and services, and because legal or technical requirements may change, this Privacy Policy may be updated from time to time.
Where a change materially affects how we process your Personal Data, we will provide appropriate information or request new consent where this is required by law.
The date of the most recent revision is displayed near the top of this Privacy Policy.
If you have any questions or comments about this Privacy Policy or wish to exercise your rights under applicable data protection law, please contact us:
International Web & Distribution Services (IWDS)
Keizersgracht 520H
1017 EK Amsterdam
The Netherlands
Chamber of Commerce: 86873717
VAT identification number: NL004327802B11
Telephone: +31 6 24230891
Email: info@hivtest.eu
Web: www.hivtest.eu
You also have the right to lodge a complaint with a competent data protection supervisory authority.
In the Netherlands, this is the Autoriteit Persoonsgegevens (AP).
