We respect the privacy of our users. We only process personal data for the purpose for which they were provided and in accordance with the Dutch Personal Data Protection Act and the Dutch Telecommunications Act.
The website is managed by Unforgotten.
Unforgotten is the controller for the processing of your personal data within the meaning of the Dutch Personal Data Protection Act.
Our contact details are:
2111 VN Aerdenhout
Chamber of Commerce: 65541006
Which data do we process?
When you order one of our products, fill out our contact form or make other requests for one of our services, you will be asked to fill in certain personal data. In that case, we only process the personal data that you provide to us, which can be the following:
Postcode, place of residence and country;
For which purposes do we process your personal data?
Your personal data is processed for the following purposes:
Your name, address, postcode, place of residence, country, e-mail address and telephone number that you fill in when ordering a product are used to enable the order and payment of the product, to send the product to you and to contact you with regard to your purchase.
When you fill out our contact form, your name and e-mail address are required so that we can contact you with a response.
By providing the information to us, you give us permission to use the data for the purposes mentioned above. In addition, some of these data are necessary for the execution of the purchase agreement. We therefore process your data on the basis of article 8 sub a and sub b Dutch Personal Data Protection Act.
With whom do we share your personal data?
In order to pay for your purchase, you will be redirected to one of the following payment services, after which that service will also process personal data:
Stripe may transfer your data to locations outside of the EER, including the United States. The transfer of data to the United States takes place on the basis of the EU-US Privacy Shield Framework. More information on the transfer of data to the United States by Stripe can be found here: [https://stripe.com/privacy-shield-policy].
Security of personal data
We have taken appropriate organisational and technical measures to protect personal data against loss or other forms of unlawful processing. These measures, for example encryption using an SSL certificate, are put in place in order to provide a level of security that befits the personal data we process.
We like to know how visitors of our website use it, so that we can optimize the use of this website. For that purpose, we use Google Analytics. Therefore, analytical cookies from Google are placed via this website. The data gathered through these cookies will be anonymized as well as possible. Your IP address will explicitly not be used. We can therefore not trace the data back to you. More information about the Google Analytics policy can be found here: [https://www.google.com/policies/privacy/].
We do not store your data longer than necessary for the purpose for which they were received.
The information we only use to reply to a message that you have sent to us will be deleted within 1 year of our last correspondence.
We keep the data relating to your purchase in our web shop at least 7 years, in order to meet our legal obligation.
This information will be removed by us within 1 year after the expiration of this obligation.
The deadlines above apply, unless we have further legal obligations to retain and/or keep available the data for a longer period.
You always have the right to withdraw your consent to the processing of your data, after which we will no longer process your data. Withdrawal of your consent does not affect the legality of our data processing on the basis of your consent, which took place prior to this withdrawal.
You also have the right to access your personal data and the right to rectify your personal data. If you wish to know which personal data we process about you, you can send us a written request for access. If your details are incorrect, incomplete or irrelevant, you can request us in writing to change or supplement your data.
You also have a right to erase your personal data, a right to limit the processing and a right to object to the processing. You also have the right of data portability, for which you can also submit a written request. We will process your request within 4 weeks. In writing also includes e-mail. You can e-mail your request to us via firstname.lastname@example.org.
We reserve the right to make changes to this privacy statement. The changes take effect on the announced time of entry into force.