Broekbeke Privacy Policy
https://broekbeke.nl
About our privacy policy
Broekbeke cares deeply about your privacy. We therefore only process data that we need for (improving) our services and handle the information we have collected about you and your use of our services with care. We never make your data available to third parties for commercial purposes.
This privacy policy applies to the use of the website and the services offered by Broekbeke through it. The effective date of these provisions is 21/12/2023; publishing a new version renders all previous versions invalid. This privacy policy describes which data about you we collect, what this data is used for, and with whom and under what conditions this data may be shared with third parties. We also explain how we store your data, how we protect your data against misuse, and what rights you have regarding the personal data you have provided to us.
If you have questions about our privacy policy, you can contact our privacy officer; the contact details can be found at the end of this privacy policy.
About data processing
Below you can read how we process your data, where we store it (or have it stored), what security techniques we use, and who can access the data.
Webshop software
Shopify
Our webshop is developed using software from Shopify. Personal data that you make available to us for our services is shared with this party. Shopify has access to your data to provide us with (technical) support; they will never use your data for any other purpose. Under the agreement we have concluded with them, Shopify is obliged to take appropriate security measures. These measures consist of the application of SSL encryption and a strong password policy. Shopify uses cookies to collect technical information regarding your use of the software; no personal data is collected and/or stored.
Web hosting
Antagonist
We obtain web hosting and email services from Antagonist. Antagonist processes personal data on our behalf and does not use your data for its own purposes. This party may, however, collect metadata about the use of the services. This is not personal data. Antagonist has taken appropriate technical and organisational measures to prevent loss and unauthorised use of your personal data. Antagonist is obliged to maintain confidentiality under the agreement.
Email and mailing lists
Antagonist
For our regular business email traffic we use the services of Antagonist. This party has taken appropriate technical and organisational measures to prevent misuse, loss and corruption of your and our data as much as possible. Antagonist does not have access to our mailbox, and we treat all our email traffic confidentially.
Payment processors
MultiSafepay
To process (part of) the payments in our webshop, we use the MultiSafepay platform. MultiSafepay processes your name, address and place of residence details, as well as your payment details such as your bank account or credit card number. MultiSafepay has taken appropriate technical and organisational measures to protect your personal data. MultiSafepay reserves the right to use your data to further improve its services and, in that context, to share (anonymised) data with third parties. All the safeguards mentioned above regarding the protection of your personal data also apply to the parts of MultiSafepay's services for which they engage third parties. MultiSafepay does not retain your data longer than permitted by statutory terms.
Shipping and logistics
PostNL
When you place an order with us, it is our task to have your package delivered to you. We use the services of PostNL to carry out deliveries. For this purpose, it is necessary that we share your name, address and place of residence details with PostNL. PostNL only uses this data to fulfil the agreement. If PostNL engages subcontractors, PostNL also makes your data available to these parties.
Purpose of data processing
General purpose of processing
We use your data solely for our services. This means that the purpose of the processing is always directly related to the assignment you provide. We do not use your data for (targeted) marketing. If you share data with us and we use this data to contact you at a later time other than at your request, we will explicitly ask for your consent. Your data is not shared with third parties other than to comply with accounting and other administrative obligations. All these third parties are bound to confidentiality on the basis of the agreement between them and us, or an oath or statutory obligation.
Automatically collected data
Data automatically collected by our website is processed for the purpose of further improving our services. This data (for example your IP address, web browser and operating system) is not personal data.
Cooperation with tax and criminal investigations
In applicable cases, Broekbeke may be obliged by law to share your data in connection with a government tax or criminal investigation. In such a case we are forced to share your data, but we will oppose this to the extent permitted by law.
Retention periods
We retain your data for as long as you are a client of ours. This means that we keep your customer profile until you indicate that you no longer wish to use our services. If you inform us of this, we will also treat it as a request to be forgotten. This also means that we do not retain your data for longer than two years from the last contact moment or transaction, unless there is a statutory justification for doing so. Under applicable administrative obligations, we must retain invoices containing your (personal) data; we will therefore retain this data for as long as the applicable period runs. Employees, however, no longer have access to your client profile and the documents we have produced as a result of your assignment.
Your rights
Under applicable Dutch and European legislation, you, as a data subject, have certain rights regarding personal data processed by or on behalf of us. Below we explain what these rights are and how you can invoke them. In principle, to prevent misuse, we only send transcripts and copies of your data to your email address already known to us. If you wish to receive the data at a different email address or, for example, by post, we will ask you to identify yourself. We keep a record of handled requests; in the case of a request to be forgotten, we record anonymised data. You will receive all transcripts and copies of data in the machine-readable data format we use within our systems. You always have the right to lodge a complaint with the Dutch Data Protection Authority if you suspect that we are misusing your personal data.
Right of access
You always have the right to view the data we process (or have processed) that relates to you or is traceable to you. You can submit a request to that effect to our privacy officer. You will then receive a response to your request within 30 days. If your request is granted, we will send a copy of all data to the email address known to us, together with an overview of the processors holding this data and the category under which we have stored it.
Right of rectification
You always have the right to have the data we process (or have processed) that relates to you or is traceable to you corrected. You can submit a request to that effect to our privacy officer. You will then receive a response to your request within 30 days. If your request is granted, we will send a confirmation to the email address known to us that the data has been corrected.
Right to restriction of processing
You always have the right to have the processing of data relating to you or traceable to you restricted. You can submit a request to that effect to our privacy officer. You will then receive a response to your request within 30 days. If your request is granted, we will send a confirmation to the email address known to us that the data will no longer be processed until you lift the restriction.
Right to data portability
You always have the right to have the data we process (or have processed) that relates to you or is traceable to you transferred to another party. You can submit a request to that effect to our privacy officer. You will then receive a response to your request within 30 days. If your request is granted, we will send transcripts or copies of all data about you that we have processed, or that has been processed on our behalf by other processors or third parties, to the email address known to us. In such a case, we will most likely no longer be able to continue our services, as the secure linking of data files can no longer be guaranteed.
Right to object and other rights
In applicable cases, you have the right to object to the processing of your personal data by or on behalf of Broekbeke. If you object, we will immediately halt the processing of the data pending resolution of your objection. If your objection is upheld, we will make transcripts and/or copies of the data processed (or have processed) available to you and thereafter permanently cease the processing. You furthermore have the right not to be subjected to automated individual decision-making or profiling. We do not process your data in a manner to which this right applies. If you believe otherwise, please contact our privacy officer.
Cookies
Google Analytics
Cookies from the American company Google are placed via our website as part of the "Analytics" service. We use this service to track and receive reports on how visitors use the website. This processor may be obliged, under applicable laws and regulations, to provide access to this data. We have not allowed Google to use the obtained analytics information for other Google services.
Third-party cookies
If software solutions from third parties use cookies, this is stated in this privacy statement.
Changes to the privacy policy
We reserve the right at all times to change our privacy policy. However, the most recent version can always be found on this page. If the new privacy policy has consequences for the way in which we process data already collected about you, we will notify you by email.
Contact details
Broekbeke
Hardenbergerweg 145
7678 VR Geesteren
The Netherlands
0546 631 361