When you visit our website, order products or, for example, sign up for our newsletter, we (Smartblinds B.V.) process your personal data. “Personal data” means all information about natural persons. This includes information such as names, telephone numbers, addresses and email addresses. We would like to inform you clearly about how we process your personal data and how we protect your privacy. In this privacy statement, we explain, among other things, for which purposes we process your personal data in this context, on which legal bases this is based and what your rights are based on the General Data Protection Regulation (GDPR).
Types of personal data
Where this privacy statement refers to processing by us, this may also mean processing by processors or other recipients engaged by us. The recipients concerned are mentioned in this privacy statement.
Purposes of the processing
We only process your personal data if and insofar as this is necessary for our (legitimate) purposes. In that context, we process your personal data for the following purposes:
We only process your personal data if and insofar as a processing basis within the meaning of the GDPR applies. We describe the applicable legal bases of the processing of personal data below. In doing so, we indicate for which of the purposes (numbered above) the legal bases apply. For some processing purposes, multiple legal bases apply.
Performance of a contract
Some of the personal data processing takes place because this is necessary for the performance of a contract to which you are a party or to take measures at your request prior to entering into a contract.
This basis applies to the processing of personal data for the purposes described above under 2, 3, 4 and 6.
Part of the processing of personal data takes place on the basis of our legitimate interests. These interests lie in enabling orders and payments, good and efficient business operations, being able to respond to contact requests, receiving your feedback and being able to offer a website.
This basis applies to the processing of personal data for the purposes mentioned above under points 1 to 9 and points 11 to 18. For questions about the balancing of interests in relation to the above, you can contact us via the contact details at the bottom of this document.
Part of the processing of personal data takes place on the basis of your consent (or that of your parent(s) or legal representative, if you are not yet 16 years old or if this is necessary for another reason). If you have given your consent, you can always withdraw it. This does not affect the lawfulness of the processing of your personal data in the period that your consent was granted and you had not yet withdrawn it.
We base the processing for the purposes mentioned above under 7 and 10 on your consent.
Finally, part of the processing of your personal data takes place because this is necessary to comply with legal obligations imposed on us.
This basis applies to the processing of personal data for the purposes described above under 12 and 19.
Provision of your personal data
You are not statutory or contractually obliged to provide your personal data to us. However, the provision of a part of your personal data is a requirement necessary to, for example, process your order, to be able to send you the newsletter or to respond to a contact request. If you do not provide that personal data, you may not be able to place an order, you may not be able to register for the newsletter or we may not be able to respond to your contact request(s).
Recipients of your personal data
We share your personal data with third parties if this is necessary for the aforementioned purposes. For example, hosting parties and parties from whom we purchase administration software and other tools. We provide your personal data to the following recipients, insofar as necessary:
Retention period of personal data
We will not process your personal data for longer than is necessary to achieve the previously described objectives. We store personal data that are necessary to comply with the fiscal retention obligations for 7 years, to be counted from the moment that the "currentness" of the respective personal data expires (in other words, from the moment that the personal data is no longer current for the business operations).
Rights of data subjects
If your personal data is processed, you have several rights based on the GDPR. We describe these below.
Right to access, correct and delete data
You have the right to be informed by us whether we process your personal data and to view this personal data and certain information about the processing thereof, insofar as this does not affect the rights (such as privacy rights) and freedoms of others.
In addition, you have the right to have personal data corrected that is incorrect or incomplete but that is processed by us.
Under certain circumstances, you also have the right to have your personal data deleted. This is the case:
Right to restriction of processing
You have the right to temporarily “halt” the processing of your personal data. This is possible in the following cases:
Right to transferability of data
Under certain conditions, you have the right to obtain the personal data you have provided to us in a structured, commonly used and machine-readable form. You can then transfer this personal data to another party. You can also ask us to transfer your personal data directly to the other party.
The right to transferability only applies to provided data that is processed by automatic means and that is processed on the following legal bases:
Right of objection
Under certain circumstances, you may object to the (further) processing of your personal data. We will then stop the processing, unless there are compelling legitimate grounds for the processing of your personal data.
Identification upon exercise
Your aforementioned rights can be exercised by means of a written request to us (including a request by email). We may ask you to identify yourself.
Right to file a complaint with a supervisory authority
You have the right to file a complaint with the supervisory authority (in the Netherlands, the Dutch Data Protection Authority). This can be the case, for example, if you believe that the processing of your personal data is not in line with the applicable legislation or if you otherwise have a complaint.
If you have questions, comments or complaints regarding this privacy statement, the processing of your personal data or the exercise of your rights, you can contact us via firstname.lastname@example.org or +31851306287.
We may change this privacy statement. We will publish any new versions of this privacy statement via our website.Request free samples Free sample