Through our webshop privacy-sensitive data or personal data are processed. Baktotaal Bouwhuis B.V. considers careful handling of personal data of great importance. Personal data are therefore carefully processed and protected by us.
 In our processing we comply with the requirements of privacy legislation. This means among other things that:

-we clearly state the purposes for which we process personal data. We do so through this privacy statement;
-we limit our collection of personal data to only those personal data that are necessary for legitimate purposes;
-we first seek your consent to process your personal data in cases where your consent is required; -we
take appropriate security measures to protect your personal data and require the same from parties processing personal data on our behalf;
-we respect your right to provide access to, correct or delete your personal data at your request.

Baktotaal Bouwhuis B.V. is the data controller. In this privacy statement we explain which personal data we collect and use and for what purpose. We advise you to read it carefully.

This privacy statement was last updated on 26-04-2018.

Use of personal data
When you visit our online shop, we obtain certain data from you. This may include personal data. We store and use only the personal data provided by you in the context of the service you have requested or of which it is clear, upon submission, that it is provided to us for processing.
 We use the following data for the purposes set out in this privacy statement:

-NAW details
-Telephone number
-Billing address
-E-mail address
-Payment details
-IP address
-Order history

Access account environment
With our customer account you can gain access to a management environment where you can set up, enter and change data yourself.

 Baktotaal Bouwhuis B.V. cares about your privacy. We therefore only process data that we need for (the improvement of) our service and deal carefully with the information we have collected about you and your use of our services. We never make your data available to third parties for commercial purposes. This privacy policy applies to the use of the website and the services provided by Baktotaal Bouwhuis B.V. The effective date for the validity of these conditions is 26-04-2018, with the publication of a new version the validity of all previous versions expires. This privacy policy describes what information about you is collected by us, what this information is used for and with whom and under what conditions, if any, this information may be shared with third parties. We also explain to you how we store your data and how we protect your data against misuse, and what rights you have in relation to the personal data you provide to us.

 Our online shop is developed with Magento software, we have chosen Byte for our web hosting. Personal data that you make available to us for the purpose of our service is shared with this party. Byte has access to your data to provide us with (technical) support, they will never use your data for any other purpose. Based on the agreement we have with them, Byte is obliged to take appropriate security measures. These security measures consist of the application of SSL encryption and a strong password policy. Regular backups are made to prevent loss of data.

Feedback Company
We collect reviews through Feedback Company's platform. If you leave a review via Feedback Company, you can choose whether to post your review anonymously or under your own name. The email address must be filled in, it is your own choice whether to display it or post it anonymously. Feedback Company shares this information with us so we can link the review to your order. In case we invite you to leave a review, we share your name and email address with Feedback Company. They only use this information for the purpose of inviting you to leave a review. Feedback Company has taken appropriate technical and organisational measures to protect your personal data. Feedback Company reserves the right to use third parties for the provision of services, for which we have given Feedback Company permission. All the above guarantees regarding the protection of your personal data also apply to those parts of the service for which Feedback Company engages third parties.

Sovendus
Vouchers from Sovendus GmbH: For the selection of a voucher offer that is currently of interest to you, we send the pseudonymised and encrypted hash value of your e-mail address and your IP address to Sovendus GmbH, Moltkestr. 11, 76133 Karlsruhe, Germany (Sovendus) (Art. 6 para. 1 f AVG). The pseudonymised hash value of the e-mail address is used to take account of any existing opposition to advertising from Sovendus (opt-out) (Art. 21 (3), Art. 6 (1 c) AVG). The IP address is used by Sovendus exclusively for data security purposes and, as a rule, anonymised after seven days (Art. 6 (1) f AVG). We also transmit pseudonymised; order number, order amount and currency, session ID, coupon code and timestamp to Sovendus for accounting purposes (art. 6, paragraph 1 f AVG). If you are interested in a voucher offer from Sovendus, and no opt-out has been registered in the Sovendus system at your e-mail address, when you click on the Sovendus banner displayed only in this case, we encryptedly transmit your salutation, name and e-mail address to Sovendus for the preparation of the voucher (Art. 6(1) b, f AVG). Further information on the processing of your data by Sovendus can be found in the online data protection guidelines at www.sovendus.nl/verklaring_inzake_gegevensbescherming/

PostNL
When you place an order with us, it is our job to get your parcel delivered to you. We use the services of PostNL to make the deliveries. This requires us to share your name, address and place of residence details with PostNL. PostNL uses this data solely for the purpose of executing the agreement. If PostNL engages subcontractors, PostNL will also make your details available to these parties.

Multisafepay and AfterPay We use
the services of Multisafepay and AfterPay for our administration and accounting. We share your name, address and place of residence data and details relating to your order. This data is used to administer sales invoices. Your personal data are transmitted and stored in a protected manner. Multisafepay and AfterPay are bound to confidentiality and will treat your data confidentially. Multisafepay and AfterPay do not use your personal data for other purposes than described above.

Bol.com
We sell (part of) our items via the platform of Bol.com. If you place an order via this platform, Bol.com shares your order and personal data with us. We use this information to process your order. We treat your data confidentially and have taken appropriate technical and organisational measures to protect your data against loss and unauthorised use.

General purpose of processing
We use your data exclusively for the purpose of our services. This means that the purpose of processing is always directly related to the order you provide. We do not use your data for (targeted) marketing. If you share data with us and we use this data to contact you - other than at your request - at a later time, we will ask you explicit permission to do so. Your data will not be shared with third parties other than to meet accounting and other administrative obligations. These third parties are all bound to confidentiality by virtue of the agreement between them and us or an oath or legal obligation.

Order processing
In order to process the order correctly, we use your name and address details.

Handling payment transactions In
order to process the payment of the order correctly, we use your payment details.

Communication
To make communication regarding your order and/or other questions easy, we use your personal/contact data.

Execution of legal duty
To comply with our legal duty, we store your order history including payment details within the stipulated legal period.

Marketing (if authorised)
To provide you with personalised offers, we use your personal/contact data. This data will only be used if you have given your consent.

Fraud prevention
For fraud prevention purposes, if there is a legitimate interest, we use your IP address, address and payment details.

If necessary for the proper handling of your order, we may also provide your personal data to third parties. You can read more about this in this privacy statement.

Contact and newsletter
Through our online shop, we offer the opportunity to ask questions through various channels (such as e-mail, telephone and social media). You choose which data you provide when doing so. The data you send us will be kept as long as necessary to fully answer and process your question.
 We offer a newsletter with which we want to inform interested parties about our products and/or services. Each newsletter contains a link allowing you to unsubscribe.

Publication
We do not publish your customer data.

Disclosure to third parties
We may pass on your data to our partners. These partners are involved in the execution of the agreement and may under no circumstances use data for purposes other than those stated by us. The safe processing of your data is guaranteed through a processor agreement between Baktotaal Bouwhuis B.V. and the partner.
 Our webshop contains social media buttons. These buttons only provide a link and do not pass on personal data to third parties.

Cookies
When you visit our webshop for the first time, a notice is displayed explaining why we use cookies (the cookie banner). Baktotaal Bouwhuis B.V. uses 1st and 3rd party cookies. According to use of our webshop we consider as consent to the use of cookies.
 You are free to disable cookies via your internet browser. However, please note that our website may then no longer work optimally.
 We have made agreements with third parties that place cookies and applications. However, we do not have full control over what the providers of these applications themselves do with the cookies when they read them. For more information about these applications and how they handle cookies, please refer to the privacy statements of these parties. For more information
about our cookies, please refer to our cookie policy.

Google Analytics
We use Google Analytics to track how visitors use our website. We have entered into a data-processing agreement with Google to make arrangements for handling our data. Furthermore, we have not allowed Google to use the information obtained for other Google services. Finally, we have the IP addresses anonymised. See here how Google uses data from sites or apps for their services.

Security
We take security measures to limit misuse of and unauthorised access to personal data. All our connections are encrypted via SSL.

Retention periods
The personal data described above will be kept for as long as necessary to process your order(s), including warranty, unless there is a legal obligation that requires longer retention (such as tax retention obligations). We keep your data for as long as you are a client of ours. This means that we keep your client profile until you indicate that you no longer wish to use our services. If you indicate this to us, we will also interpret this as a forgetting request. In accordance with applicable administrative obligations, we must retain invoices containing your (personal) data, which we will therefore retain for as long as the applicable term runs. However, employees no longer have access to your client profile and documents we have produced as a result of your assignment.

Third-party websites
This privacy statement does not apply to third-party websites. We cannot guarantee that these third parties will handle your personal data reliably or securely. We advise you to read the privacy statement of these websites before using them.

Changes to this privacy statement
We reserve the right to make changes to this privacy statement. You are advised to consult this privacy statement regularly so that you are aware of these changes.

Inspection and modification of your data
For questions about our privacy policy or questions concerning inspection and modification (or deletion) of your personal data, please contact us at any time using the details below.
 You can also send us a request to view, amend or delete this data. You can also submit a request to request a data export for data that we use with your consent, or substantiated indication that you want us to restrict the processing of personal data.
 To prevent misuse, we may ask you to provide adequate identification when doing so. When it comes to accessing personal data linked to a cookie, you should send a copy of the cookie in question. You can find it in the settings of your internet browser. If the data is incorrect, you can ask us to change the data or have it deleted.

Right of rectification
You always have the right to have the data we process (or have processed) that relate to your person or can be traced back to you rectified. You can make a request to this effect to our contact person for privacy matters. You will then receive a response to your request within 30 days. If your request is granted, we will send you a confirmation at the e-mail address known to us that the data has been adjusted.

Right to restrict processing
You always have the right to restrict the data we process or have processed that relate to your person or can be traced back to you. You can make a request to this effect to our contact person for privacy matters. You will then receive a response to your request within 30 days. If your request is granted, we will send you confirmation at the e-mail address known to us that the data will no longer be processed until you lift the restriction.

Right to portability
You always have the right to have the data we process (or have processed) that relates to your person or can be traced back to you, carried out by another party. You can make a request to this effect to our contact person for privacy matters. You will then receive a response to your request within 30 days. If your request is granted, we will send you, at the e-mail address known to us, copies or transcripts of all data about you that we have processed or have processed on our behalf by other processors or third parties. In all likelihood, we will no longer be able to continue providing services in such a case, as the secure interconnection of data files can then no longer be guaranteed.

Right of objection and other rights When
the occasion arises you have the right to object to the processing of your personal data by or on behalf of Baktotaal Bouwhuis B.V. If you object we will immediately cease data processing pending the handling of your objection. If your objection is well-founded we will provide you with copies and/or copies of data that we process (or have processed) and will then permanently cease processing. You also have the right not to be subjected to automated individual decision-making or profiling. We do not process your data in such a way that this right applies. If you believe that it does, please contact our privacy contact.

Personal Data Authority
Of course, we are happy to help you if you have complaints about the processing of your personal data. Under privacy legislation, you also have the right to lodge a complaint with the Personal Data Authority against such processing of personal data. You can contact the Personal Data Authority for this purpose.

Contact details
Baktotaal Bouwhuis B.V.
Klavermaten 37
7472DD Goor
[email protected]
 0548-623016