Privacy Policy

We care a lot about your privacy. We exclusively process the data we need to (improve) our services, and we carefully handle all the information collected about you and your use of our services. Your data is not shared with
third parties for commercial purposes. This privacy policy applies to the use of the website and the services provided by us. The start date of validity of these terms and conditions is 01/28/2020, with the publication of a new
'With the publication of a new version, the validity of all previous versions is annulled. This privacy policy describes what information about you is collected by us, how this data is used, and with whom and under what conditions this data may be shared with third parties.'
third parties. We also explain how we store your data, how we protect it against misuse, and what rights you have regarding the personal data you provide to us.

If you have any questions about our privacy policy, please contact our privacy contact person, you will find the contact details at the end of our privacy policy.

About our data processing
Below you can read how we process your data, where we store it, what security techniques we use, and who can see the data.

Web store software
Our online store has been developed using Shopify software. The personal data collected through the use of our website and services is shared with Shopify. Shopify requires access to this data to provide support (technical). They will not use this data for any other purpose. Shopify is obligated, based on the agreement we have with them, to take the necessary precautions and security measures when it comes to your personal data. Shopify uses cookies to collect technical information about the use of the software. Personal data is not collected and/or stored. Shopify reserves the right to share the collected data internally to improve its own services.

Payment processors
To conclude and process (part of) our payments on our web store, we use the payment provider Shopify. Shopify processes your name, address, and residency information. It also processes payment information, such as your bank account number or credit card number. Shopify has implemented technical measures and
and appropriate organizational measures to protect your personal data. Shopify reserves the right to use your personal information (anonymized) to improve its services and, in this context, share it with third parties. All the aforementioned guarantees regarding the protection of your personal data also apply to any Shopify service that uses third parties. Shopify does not store your data beyond the time limits permitted by the corresponding legal bases.

Opinions
We use Shopify to collect reviews. To leave a review, you are asked to enter your email address, name, and place of residence. WebwinkelKeur shares certain data with us that is necessary for us to link your review to your order. Additionally, Shopify publishes your name and place of residence on its own website. In some cases, Shopify may contact you to ask you to clarify or comment on your review. In the case of one of our review requests, we share your name and email address with Shopify; they use this information solely for the purpose of inviting you to leave a review. Shopify has implemented appropriate technical and organizational measures to protect your personal data. Shopify reserves the right to use your personal information to provide its services and share it with third parties; we have given Shopify permission to do so. All guarantees mentioned regarding the protection of your personal data also apply to any Shopify service that uses third parties.

Transport and logistics
If you place an order with us, it is our responsibility to ensure that your order is delivered correctly. For delivery, we use the services of GLS. In order for the delivery to be carried out correctly, it is important that we share your name, address, and residence details with GLS. GLS uses this information solely for the purpose of carrying out the delivery agreement. In the event that GLS hires subcontractors, it will share this information with them.

Purpose of data processing
General purpose of data processing. We use your data solely for the purpose of providing our services to you. This means that the objective of processing this data is directly related to the assignment or task you offer us. We do not use this data for marketing purposes (targeted). If you share information with us and we use this information to -not based on a request- contact you later, we will first ask for your explicit consent. Your data will not be shared with third parties for any purpose other than to fulfill accounting and administrative obligations. All these third parties are bound by a duty of confidentiality based on the agreement we have with them, an oath, or a legal obligation.

Automatically collected data
The information automatically collected by our website is processed solely for the purpose of providing and/or improving our services. This information (for example, your IP address (anonymized), web browser, and operating system) is not personal information.

Cooperation in tax and criminal investigations
In some cases, we may be required by the government to have a legal duty to share your information in order to assist in a tax or criminal investigation. In such cases, we are obligated to comply and assist, but, based on legal possibilities, we will offer an objection.

Conservation periods
"We store your data while you are our customer. This means that we maintain and keep your customer profile until you inform us that you no longer wish to use our services. This message also serves as a request for erasure. We are required to keep invoices with your (personal) information due to relevant administrative obligations; this information is stored securely as long as the relevant period for these obligations has not elapsed. Staff no longer have access to your customer profile or the documents created as a result of your order or task."

Your rights
According to current Dutch and European legislation, you, as a data subject, have certain rights regarding the personal data that we process or on our behalf. Below you will find an explanation of these rights and how you, as a data subject, can invoke them. In principle, to prevent abuse, we only send invoices and copies of your data to the email addresses you have provided to us. If you wish to receive this data at another email address or, for example, by postal mail, we will ask you to identify yourself accordingly. We maintain a record of completed requests; in the case of a right to be forgotten request, we will keep a record of anonymized data. You will receive all invoices and copies of data in structured files in a machine-readable format based on the data classifications we use in our system. You always have the right to lodge a complaint with the Autoriteit Persoonsgegevens if you suspect that we are processing or using your personal data unlawfully.

Right of inspection
You maintain the right at all times to view the data we process that relates to or can be reduced to your person. You can request such viewing from our contact responsible for privacy matters. You will receive a response to your request within 30 days. If your request is approved, we will send it to you via the email address.
a copy of all the data with a summary of the processors that manage this data, also mentioning the categories in which we store this data.

Right of rectification
You maintain at all times the right to have the data we process that relates to or can be reduced to your person adjusted. You can request such rectification from our contact responsible for privacy matters. You will receive a response to your request within 30 days. If your request is approved, we will send you, through the email address we have, a confirmation that the data has been adjusted.

Right to the limitation of processing
You maintain the right at all times to limit the data we process that relates to or can be reduced to your person. You can request such limitation from our contact responsible for privacy matters. You will receive a response to your request within 30 days. If your request is approved, we will send you, through the email address we have, a confirmation that the processing of your data is limited until you decide to cancel such limitation.

Right of transferability
You retain the right at all times to request that the data we process and that relates to or can be reduced to your person be handled by a third party of your choice. You can send such a request to our contact responsible for privacy matters. You will receive a response to your request within 30 days. If your request is approved, we will send you, via the email address we have on file, your (personal) invoices or copies of the data that we, or third parties on our behalf, have processed. It is very likely that in such a case we will no longer be able to continue providing you with our services, as we can no longer guarantee the security of the previous data.

Right to object and other rights
You retain the right at all times to object to the processing of your personal data carried out by us, or on our behalf by third parties. In the event of an objection, we will immediately cease processing your data while your objection is investigated and processed. In the case of a justified objection, we will return all invoices and/or copies of the personal data that we, or third parties on our behalf, have processed up to that point and will cease processing them from then on. You also retain the right not to be subject to automated decision-making processes or profiling. We process your data in such a way that this right is not applicable.
If you believe this right applies, please contact our privacy officer.

Changes to the privacy policy
At all times we reserve the right to modify our privacy policy. However, this page always displays the most recent version of our privacy policy. In the event that a new privacy policy has implications for the way we process data collected recently regarding you, we will notify you by email.