Privacy declaration

Privacy policy of Penshop Europe B.V.

 

About our privacy policy

Penshop Europe B.V. cares a good deal about your privacy. That is why we only process data that we need for (improving) our service and carefully use the information we have collected about you and your use of our services. We will never make your data available to third parties for commercial reasons. This privacy policy applies to the use of the website and the service of Penshop Europe B.V. that is accessible there. The start date for the applicability of these terms and conditions is 21/02/2020, when a new version is published, any older versions automatically become invalid. This privacy notice describes which of your personal data are collected by us, the purpose(s) for which these data are used and conditions under which these data may be shared with third parties and who these third parties are. We also explain how we store your data and how we protect these data from misuse and which rights you have with respect to the personal data that you have provided to us. If you have any questions about our privacy policy, please get in touch with our contact for privacy matters, whose details are listed at the end of our privacy policy.

 

About processing personal data

Below, you can read about the way in which we process your data, where we (instruct others to) store them, which security technology we use and who have access to the data.

 

Web store software

 

Magento

Our web store was developed with software created by Magento. The personal data that you provide us with in order to use our services are shared with this party. Magento have access to your data in order to provide (technical) support to us, but they will never use your personal data for any other purpose. By virtue of the agreement that we entered into with Magento, Magento is required to take suitable security measures. Magento uses cookies to collect technical information with regard to your use of the software, no personal data are collected and/or stored.

 

Web hosting

 

Hipex

We purchase web hosting and email services from Hipex. Hipex processes personal data on our behalf and does not use your personal data for its own purposes. However, this party may collect metadata about the use of the services. These are not personal data. Hipex has taken appropriate technical and organizational measures to prevent loss and unauthorized use of your personal data. Because of the agreement, Hipex is bound by an obligation of confidentiality.

 

We use the services offered by Hipex for our regular business emails. Hipex has also taken suitable technical and organizational measures in this respect in order to prevent misuse, loss and corruption of your and our data as much as possible. Hipex does not have access to our mailbox and we treat all our communications by email as confidential.

 

Payment processors

 

MultiSafepay

The conclusion of (part of) the transactions in our online store is handled by the MultiSafepay platform. MultiSafepay processes your name and address details and your payment details, such as your bank account number or credit card number. MultiSafepay has taken appropriate technical and organizational measures to protect your personal data. MultiSafepay reserves the right to use your personal data with a view to improving its service and to share (anonymized) data with third parties to that end. All the above-mentioned guarantees regarding the protection of your personal data also apply to components of MultiSafepay’s service for which they engage third parties. MultiSafepay does not retain your data any longer than is allowed by law.

 

Reviews

 

Feedback Company

We collect reviews via the Feedback Company platform. If you leave a review via Feedback Company, you are required to specify your name, place of residence and email address. Feedback Company shares these data with us, so we can link the review to your order. Feedback Company publishes your name and address details on its own website as well. Your review is also shown on the Penshop website. In some cases, Feedback Company may contact you to ask you to comment on your review. If we invite you to leave a review, we will share your name and email address and information regarding your order with Feedback Company. They use these data exclusively for the purpose of inviting you to write a review. Feedback Company has taken appropriate technical and organizational measures to protect your personal data. Feedback Company reserves the right to deploy third parties in order to deliver the service, and we have granted Feedback Company permission for this. All the above-mentioned guarantees regarding the protection of your personal data also apply to components of Feedback Company’s service for which they engage third parties.

 

Dispatch and logistics

If you place an order with us, it is our task to get your parcel delivered to you. We use the services of various carriers for our deliveries. It is therefore necessary that we share your name and address details with them. These data are only used to execute the agreement. In the event that such a carrier outsources the work to subcontractors, it must necessarily make your data available to such parties as well.

 

Invoicing and bookkeeping

 

Exact

To update our administration and books, we use the services of Exact. We share your name, address details and order details with them. These data are used for the administration of sales invoices. Your personal data are transmitted and stored securely. Exact is bound to secrecy and will treat your data as confidential. Exact uses your personal data for no other purpose than the one described above.

 

Purpose of data processing

 

General purpose of processing

We exclusively use your data for our own service provision. That means that the purpose of the processing is always directly related to the order you have placed with us. Additionally, we use your data for (targeted) marketing purposes when you have given your permission for that. This way, we can improve your browsing experience on our website. If you share data with us and we use these data - other than at your request - to contact you later, we will explicitly ask you to give your permission for that. Your data are not shared or sold to third parties without reason. However, after you have agreed to allow cookies to be placed on your device, your data may be used to show you relevant advertisements. Third parties are all bound to confidentiality by virtue of the agreement between them and us or an oath or legal obligation.

 

Automatically collected data

Data that are collected automatically by our website are processed in order to improve our service. These data (for example your IP address, web browser and operating system) are not personal data.

 

 

Assisting with fiscal and criminal investigations

In some cases, Penshop Europe B.V. may be legally required to share your data in the context of fiscal or criminal investigations by government bodies. In such a case, we are obliged to share your data, but we will oppose this within the possibilities provided by the law.

 

Retention periods

We retain your data as long as you are our client. This means that we keep your customer profile until such time that you indicate you no longer wish to use our services. If you inform us of this, we will also treat this as a request “to be forgotten”. Because of applicable administrative obligations, we are required to retain invoices with your (personal) data, so we will keep these data for the duration of the applicable term. However, employees no longer have access to your client profile and documents that we created in connection with your order.

 

Your rights

Pursuant to the applicable Dutch and European legislation, as a data subject you have certain rights with regard to the personal data that are processed by or on behalf of us. Below, we will explain the rights in question and how you can invoke these rights. In principle, to avoid misuse, we will only send extracts and copies of your data to you at the email address you have already given us. If you wish to receive the data at another email address or for example by post, we will ask you to provide proof of identity. You will receive all extracts and copies of data in the machine readable data format that we use within our systems. At any time, you have the right to lodge a complaint with the Data Protection Authority if you believe that we have incorrectly used your personal data.

 

Right of access

You always have the right to have access to the data that we (instruct others to) process and that relate to your person or can be traced back to you. You can also send a request to that effect to our contact for privacy matters. You will then receive a response to your request within 30 days. If your request is accepted, we will send a copy of all data to you at the email address known to us, together with an overview of the processors holding these data, stating the category under which we have stored these data.

 

Right of rectification

You always have the right to have the data amended that we (instruct others to) process and that relate to your person or that can be traced back to you. You can also send a request to that effect to our contact for privacy matters. You will then receive a response to your request within 30 days. If your request is accepted, we will send a confirmation of the fact that these data have been amended to you at the email address known to us.

 

Right to restrict processing

You always have the right to restrict the data that we (instruct others to) process and that relate to your person or can be traced back to you. You can also send a request to that effect to our contact for privacy matters. You will then receive a response to your request within 30 days. If your request is accepted, we will send a confirmation to you at the email address known to us, stating that these data will no longer be processed until you lift the restriction.

 

Right to data portability

You always have the right to have the data that we (instruct others to) process and that relate to your person or can be traced back to you processed by another party. You can also send a request to that effect to our contact for privacy matters. You will then receive a response to your request within 30 days. If your request is accepted, we will send you extracts or copies of all the data we have processed or that have been processed by other processors or third parties on our instructions, at the email address known to us. In all likelihood, we will not be able to continue the service in such a case, because the secure connection of data files can no longer be guaranteed.

 

Right to object and other rights

If applicable, you have the right to object to the processing of your personal data by or on behalf of Penshop Europe B.V.. If you object, we will immediately stop processing your data while your complaint is being dealt with. If your objection is justified, we will make extracts and/or copies of the data that we (instruct others to) process available to you and then stop processing permanently. Moreover, you have the right to refuse to be subjected to automated individual decision-making or profiling. We do not process your data in a way where this right applies. However, if you think that this is the case, please get in touch with our contact for privacy matters.

 

Cookies

 

Google Analytics

The American company Google places cookies via our website, as part of their “Analytics” service. We use this service to keep track of the number of visitors to our website and to create reports on this. Current legislation and regulations possibly require this processor to provide access to these data. We collect information about your browsing behaviour and share these data with Google. Google may interpret this information in combination with other data sets and track your movements on the Internet in this way. Google uses this information to offer targeted advertisements (Adwords) and other Google services and products.

 

Third party cookies

In the event that third party software solutions use cookies, this has been specified in this privacy notice.

 

Changes in the privacy policy

We reserve the right to change our privacy policy at all times. You will always find the most recent version on this page. If the new privacy policy affects the way in which we process data about you that we have already collected, we will inform you about this by email.

 

Contact details

Penshop Europe B.V.

De Prinsenhof 1.03

4004 LN  Tiel

The Netherlands

T +31(0)85-4012699

E info@penshopeurope.com