Declaration on the protection of personal data
- buyers,
- potential buyers,
- users of our website,
- our suppliers and business partners.
General on the processing of personal data
We only process personal data on the basis of predefined, legitimate purposes and on the basis of an appropriate legal basis. You can find out which purposes and legal bases we use for each group of individuals in the sections below. We only keep personal data for as long as is necessary to fulfil the processing purpose for which the personal data was collected. Where we process personal data on the basis of your consent, we will continue to process it until you withdraw your consent. We specify the retention periods for processing for each purpose in more detail in the paragraphs below.
How do we collect your data?
Purposes of processing your personal data
Transmission of personal data
We will not share your personal data with others, except in the following cases:
- When affiliated companies or third parties perform services on our behalf, for example, responding to your requests, or delivering packages and services to customers, and the like. These companies are prohibited from using your personal information for purposes other than those that we have asked them to do or that they are required to do by law. This includes, for example, delivery services, email providers, etc.
- When we share personal information within our company or with third parties to ensure the safety and security of our customers, to protect our rights and property in accordance with legal process, or in other cases where we have a good faith belief that disclosure is required by law. This includes, for example, IT and financial advisors, external legal advisors, etc.
Data security, integrity and retention
- Regular updates of software, hardware and applications,
- staff training,
- checking and monitoring of contract processors; and
- adequate security of business premises.
Your rights
You have the following rights:
- Access to personal data: you can request information from us about whether we process personal data about you and, if we do, you can request access to your personal data and information about the processing (what data we process and where this data comes from).
- Correction of personal data: you can ask us to correct or complete incomplete or inaccurate data that we process about you.
- Restriction of processing of personal data: you can ask us to restrict the processing of your personal data (e.g. when we are checking the accuracy or completeness of your personal data).
- Erasure of personal data: you can ask us to erase your personal data (we cannot erase personal data that we hold as a result of a legal requirement or a contractual relationship).
- Extract of personal data: you can ask us to provide you with the personal data you have provided to us in a structured, commonly used and machine-readable format.
- Withdrawal of consent: you have the right to withdraw your consent at any time with respect to the use of your personal data that we collect and process on the basis of consent. Consent may be withdrawn in any of the ways set out in this Policy. Withdrawal of consent does not have any negative consequences, but it is possible that, as a result of the withdrawal, we may no longer be able to provide you with certain services.
- Objection to the processing of personal data: you have the right to object to the processing of your personal data where the processing is for direct marketing purposes or for the transfer of your personal data to third parties for direct marketing purposes. You may also object to processing where we use your personal data for direct marketing purposes using personalised or individualised offers (˝profiling˝). You may object in any of the ways set out in this Policy.
- Right to data portability: you have the right to request the extract of the personal data you have provided to us. We will provide you with the data in a structured, commonly used and machine-readable format. You are entitled to transmit this data to another controller of your choice. Where technically feasible, you may request that your personal data be transferred directly to another controller.