Bold Concepts B.V. cares about your privacy. We only collect and process data that is required for (improvement of) our services. We handle information about you and how you use our services with strict confidentiality. We never share your data with third parties for commercial purposes.
How we store and process data
Below is an overview of how we process your data, where it is stored, what security measures are in place and who has access to the data.
Our online store is developed using software from WooCommerce, which we host on a self-managed server. We have taken appropriate technical and organizational measures to prevent misuse, loss and corruption of the data as much as possible. These security measures include SSL encryption and a strong password policy. We make regular backups to ensure data redundancy.
We use dots.hosting for webhosting and email services. dots.hosting processes personal data on behalf of us and does not utilize this data for personal purposes. This third party can, however, collect metadata about the usage of its services. This is not personal data. dots.hosting has taken appropriate technical and organizational measures to prevent loss and unauthorized use of your data. dots.hosting is obliged to observe confidentiality on the grounds of the agreement.
Email and mailing lists
For processing (some) payments in our online store, we use the platform provided by Mollie. Mollie collects your name and address, as well as payment details such as your bank account number or your credit card number. Mollie has taken appropriate technical and organizational measures to protect your data. Mollie reserves the right to use your data to improve its services and can share (anonymized) information with third parties for that purpose. All aforementioned claims also apply to components of Mollie’s service where third parties are involved. Mollie does not keep your data longer than is allowed on the basis of legal terms.
We collect reviews via the platform provided by WebwinkelKeur. When you leave a review via WebwinkelKeur, you are required to provide your name, city and email address. WebwinkelKeur shares this information with us, so we can link your review to your order. WebwinkelKeur also publishes your name and city on its own website. In some cases, WebwinkelKeur may contact you to elaborate on a review. When we invite you to leave a review, we share your name and email address with WebwinkelKeur. They use this information only to invite you to leave a review. WebwinkelKeur has taken appropriate technical and organizational measures to protect your data. WebwinkelKeur reserves the right to use third parties to provide its services, for which we have granted WebwinkelKeur permission. All aforementioned claims also apply to components of WebwinkelKeur’s service where third parties are involved.
Shipping and logistics
DHL and PostNL
When you order with us, we deliver your parcel to the address you provide. To do this, we use the shipping services provided by DHL and PostNL, which require that we share your name and address with DHL and PostNL. DHL and PostNL only use this information for purposes of our agreement. If DHL or PostNL subcontract a third party, they will provide your information to that third party as well.
Billing and bookkeeping
For maintaining our administration and bookkeeping, we use services provided by Exact Online. We share your name, address and details about your order. These details are used for managing sales invoices. Your personal details are securely sent and stored. Exact Online is obliged to observe secrecy and will treat your information confidentially. Exact Online does not use your information for any purpose other than what is listed here.
Purpose of data processing
We only use your data to provide our services. This means the purpose of data processing is always directly related to the order you provide. We do not use your data for (targeted) marketing. When you share data with us that is used — other than at your direct request — to contact you at a later time, we ask for explicit consent. Your data will not be shared with third parties other than to meet accounting and other administrative obligations. These third parties are all obliged to observe confidentiality on the grounds of an agreement, oath or legal obligation.
Automatically collected data
Data that is collected automatically by our website is processed with the purpose of improving our services. This data (for instance, your IP address, web browser and operating system) is not personal information.
Cooperation with fiscal and judicial investigations
In some cases, Bold Concepts B.V. can be asked on the basis of legal obligations to share your data for purposes of fiscal or judicial investigations from the government. If this occurs, we will be forced to share your data, but will, as far as the law allows, resist in doing so.
We will retain your data while you are our customer. This means we will keep your customer profile until you indicate you no longer wish to utilize our services. If you indicate this to us, we will treat it as an appeal to the right to be forgotten. Due to applicable administrative obligations, we are required to retain invoices with your (personal) information, which we will keep for the applicable legal period. However, employees will no longer have access to your customer profile and documents that we have manufactured in response to your order.
On the grounds of applicable Dutch and European legislation, you as a data subject have certain rights regarding personal data that is processed by or on behalf of us. Below, we explain which rights these are and how you can appeal to them.
In principle, we send copies of your data only to the email address we already have on file. If you wish to receive the data at another email address or, for instance, by mail, we will ask you for identification. We keep records of processed requests; if you appeal to the right to be forgotten, we only store anonymized data. You will receive all copies of data in the machine-readable data format that we use within our systems.
At any moment, you have the right to file a complaint with the Dutch DPA if you suspect we misuse personal data.
Right of inspection
You always have the right to inspect data that we process (or have processed by a third party) related to, or traceable to your person. You can make a request to that effect to our representative for privacy issues. You will then receive a response to your request within 30 days. If your request is granted, we will send you a copy of all data and an overview of processors who have this data in their possession, stating the categories we have assigned to this data.
Right of rectification
You always have the right to rectify data that we process (or have processed by a third party) related to, or traceable to your person. You can submit a request to that effect to our representative for privacy issues. You will then receive a response to your request within 30 days. If your request is granted, we will send you a confirmation to the email address we have on file, confirming that these details have been changed.
Right to restriction of processing
You always have the right to restrict the data we process (or have processed by a third party) related to, or traceable to your person. You can submit a request to that effect to our representative for privacy issues. You will then receive a response to your request within 30 days. If your request is granted, we will send you a confirmation to the email address we have on file, confirming that this data will no longer be processed until you cancel the restriction.
Right of transferability
You always have the right to have the data that we process (or have processed by a third party) related to, or traceable to your person, processed by another party. You can submit a request to that effect to our representative for privacy issues. You will then receive a response to your request within 30 days. If your request is granted, we will send you copies of all personal data that we have processed or that have been processed by other processors or third parties on our behalf to the email address we have on file. We will most likely no longer be able to continue to provide our services in such a case, because the secure linking of data files can no longer be guaranteed.
Right of objection and other rights
In some cases, you have the right to object to the processing of your personal data by or on behalf of Bold Concepts B.V. If you object, we will immediately cease all data processing pending the settlement of your objection. If your objection is well-founded, we will make copies of data that we process (or have processed by a third party) available to you and permanently discontinue the processing.
You also have the right not to be subjected to automated individual decision making or profiling. We do not process your data in such a way that this right is applicable. If you think we do, please contact our representative for privacy issues.
Bold Concepts B.V.
T +31 (0) 85-1051164
Representative for privacy issues