Privacy Statement
In this privacy statement, you will find our information, an explanation of what personal data is, the meaning of processing personal data, the purposes for which we process your personal data, your rights, what we do to ensure the secure processing of your personal data, and how long we retain your personal data.
This privacy statement applies when you visit our website, place an order, or enter into an agreement with us.
Our Information:
Jan van Krimpenweg 9M
2031 CE Haarlem
The Netherlands
Phone: +31 850 478 078
Chamber of Commerce (KvK) number: 77589289
Email: [email protected]
Personal Data
Personal data refers to all information that provides details about you and by which you can be directly or indirectly identified.
Processing of Personal Data
Processing of personal data includes collecting, recording, organizing, storing, updating, modifying, retrieving, consulting, using, providing by means of transmission, dissemination, or any other form of making available, combining, linking, as well as shielding, erasing, or destroying your personal data.
Purposes
We process your personal data for various purposes, including contacting you, for example in response to questions or complaints, handling orders, creating quotes and agreements, informing you of changes to our services or products, and delivering our products or services to you.
Additionally, we process your personal data to send newsletters, SMS messages, general or targeted offers, or requests to participate in customer surveys if you have given your consent.
Your personal data is also processed for creating and managing an account on our website and preventing fraud.
- Performance of a contract — handling orders, creating quotes and agreements, delivering products and services, and managing your account.
- Consent — sending newsletters, SMS messages, targeted offers, and customer survey invitations. You may withdraw consent at any time.
- Legitimate interests — preventing fraud, securing our website, and responding to your questions or complaints. Where we rely on legitimate interests, you have the right to object.
- Legal obligation — retaining records required by tax and accounting law.
We use service providers and other third parties to support our business operations, including payment processing, order fulfillment, website hosting, communications, analytics, security, and other services. Where a third party processes personal data on our behalf as a processor, we enter into appropriate data processing agreements as required by law.
We also process your data using cookies if you use our website. We process your personal data to comply with legal obligations and only collect data necessary for these purposes. We never sell your personal data to third parties.
Providing your personal data is a necessary condition to enter into an agreement with us. While you are not obligated to provide your personal data, choosing not to do so may result in us being unable to deliver the products or services you have ordered or contact you. Therefore, entering into an agreement with us may not be possible without the personal data necessary to perform that agreement.
Processed Personal Data
- First and last name
- Address details
- Phone number
- Email address
- Account credentials and account activity
- Order history and transaction details
- IP address and approximate location derived from it
- Device and browser information
- Cookie and similar identifiers
- Website usage data, including pages viewed and referring URLs
- Correspondence with our customer service team
Payment transactions are handled by our payment provider. We do not store your payment card details.
Retention of Personal Data
We do not retain your personal data longer than strictly necessary for the purposes for which it is processed. Where legal retention requirements apply, personal data will be retained for the period required by applicable law.
Data kept to fulfil our contractual obligations will not be retained longer than necessary. Data retained for sending newsletters, general or targeted offers, or requests for customer surveys will be kept until you withdraw your consent. Account data is retained while your account remains active and thereafter only for as long as reasonably necessary for the purposes described in this Privacy Statement or as required by applicable law. Data retained to prevent fraud will not be kept longer than necessary.
We also retain certain data to comply with applicable fiscal and accounting obligations. Where the applicable statutory retention period is seven years, that data will be retained for that required period.
Your Privacy Rights
- Right of access — obtain confirmation of whether we process your personal data and receive a copy, together with information about the purposes, categories of data, recipients, and retention periods.
- Right to rectification — have inaccurate personal data corrected and incomplete data completed.
- Right to erasure — request deletion of your personal data where the applicable conditions are met.
- Right to restriction of processing — request that we limit how we process your data in certain circumstances.
- Right to data portability — receive the personal data you provided in a structured, commonly used, machine-readable format, and have it transmitted to another controller where technically feasible.
- Right to object — object to processing based on our legitimate interests and object at any time to processing for direct marketing purposes.
- Right to withdraw consent — where processing is based on your consent, withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
- Rights related to automated decision-making — where applicable, you have rights in relation to decisions based solely on automated processing that produce legal or similarly significant effects.
How to Exercise Your Rights
Submit a request using our Submit a Privacy Request form.
You may also email [email protected].
After submitting a request through our Privacy Request Form, you will receive a confirmation email containing a reference number that you can use to reference your request.
Our Response Time
We respond within one month of receiving your request.
Where a request is complex or where we receive a number of requests, we may extend this period by up to two further months. We will inform you of any extension and the reasons for it within one month of receiving your request.
Verification
We may need to verify your identity before acting on your request. We will request only information reasonably necessary for this purpose.
Requests Made on Your Behalf
If someone submits a request on your behalf, we require written authorisation, and we may ask you to confirm your identity directly.
No Charge
Exercising your rights is free of charge.
Where a request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act, and we will explain why.
If You Are Not Satisfied
If we refuse your request in whole or in part, we will explain our reasons.
You may ask us to review that decision using our Request a Review form.
We respond to review requests within one month.
Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority at any time, regardless of whether you contact us first.
Our lead supervisory authority is the Dutch Data Protection Authority:
Autoriteit Persoonsgegevens
Postbus 93374
2509 AJ Den Haag
The Netherlands
autoriteitpersoonsgegevens.nl
You may also complain to the supervisory authority in the EU member state where you live or work.
Security
We implement appropriate technical and organisational measures designed to provide a level of security appropriate to the risks associated with the processing of personal data.