Privacy policy Bold Concepts B.V.
About our privacy policy
Bold Concepts B.V. cares about your privacy. We only collect and process data that is required for (improvement of) our services. We handle information about you and how you use our services with strict confidentiality. We never share your data with third parties for commercial purposes.
This privacy policy applies to the usage of the website and the services Bold Concepts B.V. provides. This policy is effective 13 April 2018. By publishing a new version, the validity of all other versions automatically expires. This privacy policy describes what personal data is collected, what we use this data for and under what conditions we can share which data with third parties. We also explain how we store your data, how we protect your data from misuse and what your rights are regarding the personal data you provide.
If you have any questions about our privacy policy, please contact our representative for privacy issues. You can find the contact details at the end of our privacy policy.
How we store and process data
Below is an overview of how we process your data, where it is stored, what security measures are in place and who has access to the data.
Webshop software
WooCommerce
Our online store is developed using software from WooCommerce, which we host on a self-managed server. We have taken appropriate technical and organizational measures to prevent misuse, loss and corruption of the data as much as possible. These security measures include SSL encryption and a strong password policy. We make regular backups to ensure data redundancy.
Webhosting
dots.hosting
We use dots.hosting for webhosting and email services. dots.hosting processes personal data on behalf of us and does not utilize this data for personal purposes. This third party can, however, collect metadata about the usage of its services. This is not personal data. dots.hosting has taken appropriate technical and organizational measures to prevent loss and unauthorized use of your data. dots.hosting is obliged to observe confidentiality on the grounds of the agreement.
Email and mailing lists
Klaviyo
Our website uses Klaviyo, a third party that handles email traffic originating from our website and any newsletters we may send out. All confirmation emails you receive from our website and web forms are sent through Klaviyo servers. Klaviyo will never use your name and email address for its own purposes. At the bottom of each automated email, you will find an ‘unsubscribe’ link. Clicking this will prevent you from receiving any emails from our website. (Note: this can greatly reduce the functionality of the website!) Your personal data is stored securely by Klaviyo. Klaviyo uses cookies and other technologies to track if emails are opened or read. Klaviyo reserves the right to use this information to improve its services and can share information with third parties for that purpose.
Payment processors
Mollie
For processing (some) payments in our online store, we use the platform provided by Mollie. Mollie collects your name and address, as well as payment details such as your bank account number or your credit card number. Mollie has taken appropriate technical and organizational measures to protect your data. Mollie reserves the right to use your data to improve its services and can share (anonymized) information with third parties for that purpose. All aforementioned claims also apply to components of Mollie’s service where third parties are involved. Mollie does not keep your data longer than is allowed on the basis of legal terms.
Reviews
WebwinkelKeur
We collect reviews via the platform provided by WebwinkelKeur. When you leave a review via WebwinkelKeur, you are required to provide your name, city and email address. WebwinkelKeur shares this information with us, so we can link your review to your order. WebwinkelKeur also publishes your name and city on its own website. In some cases, WebwinkelKeur may contact you to elaborate on a review. When we invite you to leave a review, we share your name and email address with WebwinkelKeur. They use this information only to invite you to leave a review. WebwinkelKeur has taken appropriate technical and organizational measures to protect your data. WebwinkelKeur reserves the right to use third parties to provide its services, for which we have granted WebwinkelKeur permission. All aforementioned claims also apply to components of WebwinkelKeur’s service where third parties are involved.
Shipping and logistics
DHL and PostNL
When you order with us, we deliver your parcel to the address you provide. To do this, we use the shipping services provided by DHL and PostNL, which require that we share your name and address with DHL and PostNL. DHL and PostNL only use this information for purposes of our agreement. If DHL or PostNL subcontract a third party, they will provide your information to that third party as well.
Billing and bookkeeping
Exact Online
For maintaining our administration and bookkeeping, we use services provided by Exact Online. We share your name, address and details about your order. These details are used for managing sales invoices. Your personal details are securely sent and stored. Exact Online is obliged to observe secrecy and will treat your information confidentially. Exact Online does not use your information for any purpose other than what is listed here.
How we use your data
We use your data that we collect for the following reasons:
Automatically collected data
Data that is collected automatically by our website is processed with the purpose of improving our services. This data (for instance, your IP address, web browser and operating system) is not personal information.
Cooperation with fiscal and judicial investigations
In some cases, Bold Concepts B.V. can be asked on the basis of legal obligations to share your data for purposes of fiscal or judicial investigations from the government. If this occurs, we will be forced to share your data, but will, as far as the law allows, resist in doing so.
Retention periods
We will retain your data while you are our customer. This means we will keep your customer profile until you indicate you no longer wish to utilize our services. If you indicate this to us, we will treat it as an appeal to the right to be forgotten. Due to applicable administrative obligations, we are required to retain invoices with your (personal) information, which we will keep for the applicable legal period. However, employees will no longer have access to your customer profile and documents that we have manufactured in response to your order.
Your rights
On the grounds of applicable Dutch and European legislation, you as a data subject have certain rights regarding personal data that is processed by or on behalf of us. Below, we explain which rights these are and how you can appeal to them.
In principle, we send copies of your data only to the email address we already have on file. If you wish to receive the data at another email address or, for instance, by mail, we will ask you for identification. We keep records of processed requests; if you appeal to the right to be forgotten, we only store anonymized data. You will receive all copies of data in the machine-readable data format that we use within our systems.
At any moment, you have the right to file a complaint with the Dutch DPA if you suspect we misuse personal data.
Right of inspection
You always have the right to inspect data that we process (or have processed by a third party) related to, or traceable to your person. You can make a request to that effect to our representative for privacy issues. You will then receive a response to your request within 30 days. If your request is granted, we will send you a copy of all data and an overview of processors who have this data in their possession, stating the categories we have assigned to this data.
Right of rectification
You always have the right to rectify data that we process (or have processed by a third party) related to, or traceable to your person. You can submit a request to that effect to our representative for privacy issues. You will then receive a response to your request within 30 days. If your request is granted, we will send you a confirmation to the email address we have on file, confirming that these details have been changed.
Right to restriction of processing
You always have the right to restrict the data we process (or have processed by a third party) related to, or traceable to your person. You can submit a request to that effect to our representative for privacy issues. You will then receive a response to your request within 30 days. If your request is granted, we will send you a confirmation to the email address we have on file, confirming that this data will no longer be processed until you cancel the restriction.
Right of transferability
You always have the right to have the data that we process (or have processed by a third party) related to, or traceable to your person, processed by another party. You can submit a request to that effect to our representative for privacy issues. You will then receive a response to your request within 30 days. If your request is granted, we will send you copies of all personal data that we have processed or that have been processed by other processors or third parties on our behalf to the email address we have on file. We will most likely no longer be able to continue to provide our services in such a case, because the secure linking of data files can no longer be guaranteed.
Right of objection and other rights
In some cases, you have the right to object to the processing of your personal data by or on behalf of Bold Concepts B.V. If you object, we will immediately cease all data processing pending the settlement of your objection. If your objection is well-founded, we will make copies of data that we process (or have processed by a third party) available to you and permanently discontinue the processing.
You also have the right not to be subjected to automated individual decision making or profiling. We do not process your data in such a way that this right is applicable. If you think we do, please contact our representative for privacy issues.
Changes to the privacy policy
We reserve the right to change our privacy policy at any time. On this page you will always find the most recent version. If a new privacy policy affects the way in which we process already collected data that is related to you, we will notify you by email.
Contact details
Bold Concepts B.V.
Klokgebouw 147
5617AB Eindhoven
The Netherlands
T +31 (0) 85-1051164
E hello@bold-banana.com
Representative for privacy issues
Sonja Voortman