Privacy policy

Last updated: May 24, 2018

Introduction
De Kristalloods takes your privacy very seriously and will process and use information about you in a secure manner. We appreciate the trust you place in us and will therefore handle your data with the utmost care. In this privacy policy we explain to you which data we process and for what purpose we do this. In addition, you can read in this privacy policy about your rights with regard to our processing of your personal data. We recommend that you read this privacy policy carefully (it is possible to print it out). For questions you can always contact info@dekristalloods.nl

Who is De Kristalloods?
De Kristalloods is a trade name of De Vijf Wijzen, established in Bergen op Zoom (4625 AH), Antwerpsestraatweg 484, registered in the trade register of the Chamber of Commerce under number 67677606.

The Kristalloods operates the website www.dekristalloods.nl.

De Kristalloods is the controller with regard to the processing of your personal data by De Kristalloods.
Owner Marie-José van der Laan of De Kristalloods is a data protection officer. You can reach Marie-José at info@dekristalloods.nl

Special and/or sensitive personal data that we process
De Kristalloods does not intend to collect data about website visitors who are younger than 16 years; unless they have parental or guardian permission. However, we cannot check whether a visitor is older than 16. We therefore advise parents to be involved in the online activities of their children, in order to prevent data about children being collected without parental consent.

Personal data that we process
De Kristalloods processes your personal data because you use our services and/or because you provide this data to us yourself.
Below is an overview of the personal data that we process

name and address details
billing address
e-mail address
phone number
payment details
Company Name

For what purpose and on the basis of which we process data
De Kristalloods processes your personal data for the following purposes:

handling your payment
sending our newsletter, only if you have given permission here yourself
to be able to call or e-mail you if this is necessary to be able to carry out our services
to inform you about changes to our services and products
create an account
legal obligation, such as data necessary for the tax return

Automated decision making
De Kristalloods will never make decisions based on automated processing on matters that can have (significant) consequences for people.

Retention periods
De Kristalloods does not store your personal data for longer than is strictly necessary to realize the purposes for which your data is collected. We use the following retention periods for the following (categories) of personal data.

Product purchase / account creation
Data: name and address details, billing address, e-mail address, payment details, (possibly Chamber of Commerce number, VAT number)
Retention period: at least 8 years
Reason: obligations from the tax authorities

Services
Data: name and address details, company name, billing address, e-mail address, payment details, Chamber of Commerce number, VAT number
Retention period: as long as necessary for this purpose
Reason: this data is required for the execution of the agreement
Data: name and address details, company name, billing address, e-mail address, payment details, Chamber of Commerce number, VAT number
Storage period: 8 years
Reason: these obligations from the tax authorities

Subscribe and send our newsletter
Data: name and e-mail address via "double opt-in"
Retention period: until you unsubscribe yourself (possible via the link in every newsletter)
Reason: to be able to send and deliver the newsletter
We use Mailchimp to send newsletters.

Mail exchanges/contact form
Data: name, e-mail address, telephone number, the text in the mail
Data: password
retention period: as long as necessary for this purpose

Backups
To guarantee the continuity of the business operations of De Kristalloods, our systems are regularly backed up. Naturally, these backups contain personal data. The backups are kept for a maximum of 30 days. If, in the event of a disaster, it is necessary to restore a backup, any data that may still be present of persons who have invoked the right to be forgotten will first be deleted.

View, modify or delete data
Under the European General Data Protection Regulation you have a number of rights with regard to your data and its processing:
You have the right to view, correct or delete your personal data. In addition, you have the right to withdraw your consent to the data processing