Privacy policy Curls & More Nederland BV About our privacy policy
Curls & More Nederland BV attaches great importance to the protection of your privacy. We therefore only process data that we need to (improve) our services and treat the information we have collected about you and your use of our services with care. We never share your data with third parties for commercial purposes.
This Privacy Policy applies to the use of the website and related services of Curls & More Nederland BV. The effective date of these terms is 27/06/2022, with the release of a new version the validity of all previous versions expires. This Privacy Policy describes what information about you is collected by us, what this information is used for and with whom and under what conditions, if any, this information is shared with third parties. We also explain how we store your data and how we protect it from misuse and what rights you have in relation to the personal data you provide.
If you have any questions about our data protection policy, please contact our contact person for data protection matters; the contact details can be found at the end of our data protection policy.
About data processing
In the following, you will learn how we process your data, where we (let) store it, which security techniques we use and for whom the data can be viewed.
Webshop software
Lightspeed
Our webshop is developed with the software Lightspeed. Personal data that you provide to us for our services is shared with this party. Lightspeed has access to your data to provide us with (technical) support, they will never use your data for any other purpose. Lightspeed is required by its agreement with us to take reasonable security measures. These security measures consist of the use of SSL encryption and a strict password policy. Lightspeed uses cookies to collect technical information related to your use of the software, no personal data is collected and/or stored. Lightspeed reserves the right to share collected data within its own group to further improve its services.
Lightspeed hosting
Our web store was developed using WooCommerce software, and we have chosen AndersHostnet for our web hosting. Personal information that you provide to us for the purpose of our service is shared with this party. AndersHostnet has access to your data to provide us with (technical) support, they will never use your data for any other purpose. AndersHostnet is required by their agreement with us to take reasonable security measures. These security measures consist of the use of SSL encryption and a strict password policy. Backups are made regularly to prevent data loss.
Web hosting
Hostnet
EXAMPLE: We purchase web hosting and email services from [SUPPLIER]. SUPPLIER] processes personal data on our behalf and does not use your data for its own purposes. However, this party may collect metadata about your use of the services. This is not personal data. SUPPLIER] has taken appropriate technical and organizational measures to prevent the loss and unauthorized use of your personal data. SUPPLIER] is bound by the contract to maintain confidentiality.
E-mail and distribution lists
MailChimp
We send our email newsletters using MailChimp. MailChimp will never use your name and email address for its own purposes. At the bottom of every email sent automatically through our website, you will find an "unsubscribe" link. You will then no longer receive our newsletter. Your personal data is stored securely by MailChimp. MailChimp uses cookies and other Internet technologies that provide information about whether emails are opened and read. MailChimp reserves the right to use your data to further improve its services and to share information with third parties in this context.
Office365
We use the services of Office365 for our regular business email traffic. The latter has taken appropriate technical and organizational measures to prevent misuse, loss and falsification of your and our data as far as possible. Office365 does not have access to our mailbox and we keep all our email traffic confidential.
Payment processor
Mollie
We use the platform of Mollie to process (part of) the payments in our webshop. Mollie processes your name, address and place of residence as well as your payment data such as your bank details or credit card number. Mollie has taken appropriate technical and organizational measures to protect your personal data. Mollie reserves the right to use your data to further improve the service and, in this context, to pass on (anonymized) data to third parties. All of the above guarantees for the protection of your personal data also apply to the parts of Mollie's services for which Mollie uses third parties. Mollie will not keep your data longer than the legal time limits allow.
Reviews
WebwinkelKeur
We collect reviews through the WebwinkelKeur platform. When you submit a review through WebwinkelKeur, you must provide a name and email address. WebwinkelKeur shares this information with us so that we can link the review to your order. WebwinkelKeur also publishes your name on its own website. In some cases, WebwinkelKeur may contact you to comment on your review. When we ask you to submit a review, we share your name and email address with WebwinkelKeur. WebwinkelKeur uses this information only for the purpose of inviting you to submit a review. WebwinkelKeur has taken appropriate technical and organizational measures to protect your personal data. WebwinkelKeur reserves the right to engage third parties for the provision of services.
For the provision of services, WebwinkelKeur has received permission from us to do so. All of the above guarantees regarding the protection of your personal data also apply to the parts of the service for which WebwinkelKeur engages third parties.
Shipping and logistics
DHL
When you place an order with us, it is our responsibility to deliver your package to you. We use the services of DHL to make the deliveries. To do this, we need to pass on your name, address and place of residence to DHL. DHL uses this data only for the purpose of fulfilling the contract. If DHL uses subcontractors, DHL will also provide your data to them.
Billing and accounting
Account overview
EXAMPLE: We use the services of [SUPPLIER] to maintain our administrative and accounting records. We share your name, address, and city of residence, as well as information about your order. This information is used to manage sales invoices. Your personal information is transmitted and stored in a protected manner. [SUPPLIER] is committed to confidentiality and will keep your information confidential. [SUPPLIER] will not use your personal data for purposes other than those described above.
Purpose of data processing
General purpose of processing
We use your data exclusively for the provision of our services. This means that the purpose of processing is always directly related to the order you have placed with us. We do not use your data for (targeted) marketing. If you provide us with data and we use this data to contact you at a later date - other than at your request - we will ask for your explicit permission to do so. Your information will not be shared with third parties except to fulfill accounting and other administrative obligations. These third parties are bound to confidentiality by an agreement between them and us, or by an affidavit or legal obligation.
Automatically collected data
Data automatically collected by our website is processed to further improve our services. This data (e.g. your IP address, web browser and operating system) is not personal data.
Cooperation with tax and law enforcement authorities
If applicable, Curls & More Nederland BV may be required by law to disclose your data in connection with government tax or criminal investigations. In such a case, we will be forced to pass on your data, but we will oppose this to the extent permitted by law.
Retention periods
We keep your data for as long as you are our customer. This means that we will keep your customer profile until you inform us that you no longer wish to use our services. When you notify us of this, we also interpret this as a request to be forgotten. Due to applicable administrative obligations, we are required to keep invoices that contain your (personal) data and therefore keep them for as long as the relevant period runs. However, our employees no longer have access to your customer profile and the documents we have created on your behalf.
Your rights
Under applicable Dutch and European law, you have certain rights as a data subject with respect to personal data processed by us or on our behalf. We explain below what these rights are and how you can exercise them. In order to prevent misuse, we will generally only send copies and transcripts of your data to your e-mail address already known to us. If you wish to receive the data, for example, to another e-mail address or by mail, we will ask you to identify yourself. Completed requests are logged by us, in case of forgotten requests we manage anonymized data. You will receive all copies and transcripts of data in the machine-readable data format that we use in our systems. You have the right to complain to the personal data supervisory authority at any time if you suspect that we are using your personal data inappropriately.
Right of access
You have the right at any time to inspect the data we process (or process) that relates to or can be traced back to you. You can send a request to this effect to our contact person for data protection matters. You will then receive a response to your request within 30 days. If your request is granted, we will send you a copy of all data to the email address we have on file, along with an overview of the processors who hold this data, indicating the category under which we have stored it.
Right to rectification
You have the right at any time to have the data we have processed that relates to you or can be traced back to you corrected. You can submit a request to this effect to our contact person for data protection matters. You will then receive a response to your request within 30 days. If your request is granted, we will send you a confirmation to the e-mail address known to us that the data has been corrected.
Right to restriction of processing
You have the right at any time to restrict the data that we process (or have had processed) and that relate to or can be traced back to you. You can submit a request to this effect to our contact person for data protection matters. You will then receive a response to your request within 30 days. If your request is granted, we will send you a confirmation to the email address we have that the data will no longer be processed until you lift the restriction.
Right to portability
You have the right at any time to have the data that we process (or have had processed) and that relates to you personally or can be traced back to you, processed by another party. You can submit a request to this effect to our contact person for data protection issues. You will then receive a response to your request within 30 days. If your request is granted, we will send you copies or transcripts of all data about you that we have processed or had processed on our behalf by other processors or third parties to the email address we have on file. In all likelihood, we will no longer be able to provide our services in such a case, as the secure connection of the files is no longer guaranteed.
Right to object and other rights
You may have the right to object to the processing of your personal data by or on behalf of Curls & More Nederland BV. If you object, we will immediately stop processing your data until your objection is resolved. If your objection is justified, we will provide you with copies and/or transcripts of the data that we process (or have processed) and thereafter permanently cease processing. You also have the right not to be subject to automated individual decision-making or profiling. We do not process your data in a way to which this right applies. If you believe that this is the case, please contact our data protection contact.
Cookies
Google Analytics
Cookies from the US company Google are set on our website as part of the "Analytics" service. We use this service to track and receive reports on how visitors use the website. The processor may be required by applicable laws and regulations to provide access to this data. We collect information about your browsing behavior and share this information with Google. Google may interpret this information in conjunction with other data sets to track your movements on the Internet. Google uses this information, among other things, to provide targeted advertising (Adwords) and other Google services and products.
Third-party cookies
If third-party software solutions use cookies, this will be indicated in this privacy policy.
Changes to the privacy policy
We reserve the right to change our privacy policy at any time. However, you will always find the most current version on this page. If the new privacy policy affects the way we process information we have already collected about you, we will notify you by email.