Privacy Policy
Privacy Policy Hugs and Things
http://www.hugs-and-things.nl
About my privacy policy
I care deeply about your privacy. Therefore, I only process data that I need to (improve) my services, and I handle the information I have collected about you and your use of my services with care.
I never make your data available to third parties for commercial purposes.
This privacy policy applies to the use of the website and the related services provided by Hugs and Things. These terms take effect on 01/06/2021. Publishing a new version invalidates all previous versions.
This privacy policy describes what data about you I collect, what it is used for, and with whom and under what conditions it may be shared with third parties.
I also explain how I store your data, how I protect it against misuse, and what rights you have regarding the personal data you provide to me.
If you have any questions about my privacy policy, you can always get in touch. You’ll find the contact details at the end of this privacy policy.
About data processing
Below, you can read how I process your data, where I have it (or let it) stored, what security techniques I use, and who can access the data.
Online store software: Shopify
My online store was developed using Shopify software. Personal data that you provide to me for my services is shared with this party. Shopify has access to your data to provide me with (technical) support; they will never use your data for any other purpose.
Under the agreement I have entered into with them, Shopify is required to take appropriate security measures. Shopify uses cookies to collect technical information about your use of the software; no personal data is collected and/or stored.
Email and mailing list: MailChimp
I send my email newsletters with MailChimp. MailChimp will never use your name and email address for its own purposes. At the bottom of every email sent automatically through my website, you’ll see the ‘unsubscribe’ link. If you click it and confirm your subscription cancellation, you will no longer receive the newsletter. Your personal data is stored securely by MailChimp. MailChimp uses cookies and other internet technologies to track whether emails are opened and read. MailChimp reserves the right to use your data to further improve its services and, for this purpose, to share information with third parties.
Business email:
I use Shopify’s email services for my regular business email correspondence. This provider has taken appropriate technical and organizational measures to prevent misuse, loss, and corruption of your data and ours as much as possible. Shopify has no access to my inbox, and I treat all my email correspondence confidentially.
Payment processor: Shopify Payments
To process iDeal and other payments in my online store, I use the Shopify platform. Shopify processes your name, address, and city details, as well as your payment details such as your bank account number, so that a thorough customer due diligence check can be performed, as required by law, before Shopify provides its services.
Reviews: WebwinkelKeur
I collect reviews through the WebwinkelKeur platform. If you leave a review through WebwinkelKeur, you are required to provide your name, city, and email address. WebwinkelKeur shares this information with me so that I can link the review to your order. WebwinkelKeur also publishes your name and city on its own website. In some cases, WebwinkelKeur may contact you to ask for further details about your review. If I invite you to leave a review, I share your name and email address with WebwinkelKeur. They use this information solely to invite you to leave a review.
WebwinkelKeur has taken appropriate technical and organizational measures to protect your personal data. WebwinkelKeur reserves the right to engage third parties to provide its services; I have given WebwinkelKeur permission to do so. All the safeguards mentioned above regarding the protection of your personal data also apply to the parts of the service for which WebwinkelKeur engages third parties.
Shipping and logistics: MyParcel/PostNL
If you place an order with me, it is my responsibility to ensure your envelope or package is delivered to you. I use the services of MyParcel/PostNL to handle deliveries. To do so, I need to share your name, address, and city details with MyParcel/PostNL.
MyParcel/PostNL uses this data solely to fulfill the agreement. If PostNL engages subcontractors, it will also make your data available to those parties.
Invoicing and bookkeeping: Exact Online
I use Exact Online to maintain my records and accounts. I share your name, address and place of residence, as well as details relating to your order. This data is used to administer sales invoices. Your personal data is transmitted and stored securely. Exact Online is bound by confidentiality obligations and will treat your data confidentially. Exact Online does not use your personal data for any purpose other than those described above.
Purpose of data processing
General purpose of processing
I use your data solely to provide my services. This means that the purpose of processing is always directly related to the assignment you give me or the purchase you make. I do not use your data for (targeted) marketing. If you share your data with me and I use it to contact you at a later date for any reason other than at your request, I will ask for your explicit consent.
Your data is not shared with third parties, except to meet accounting and other administrative obligations. These third parties are all bound by confidentiality obligations under their agreement with me, an oath, or a legal obligation.
Automatically collected data
Data automatically collected by my website is processed to further improve my services. This data (for example, your IP address, web browser and operating system) is not personal data.
Cooperation with tax and criminal investigations
In certain cases, Hugs and Things may be required by law to share your data in connection with a tax or criminal investigation by the authorities. In such a case, I am obliged to share your data, but I will resist this to the extent permitted by law.
Retention periods
I retain your data for as long as you are my customer. This means that I keep your customer profile until you let me know that you no longer wish to use my services. If you let me know this, I will also treat it as a request to be forgotten.
Under applicable administrative obligations, I must retain invoices containing your (personal) data. I will therefore retain this data for the duration of the applicable retention period.
Your rights
Under applicable Dutch and European legislation, as a data subject, you have certain rights regarding the personal data processed by or on my behalf.
Below, I explain what these rights are and how you can exercise them.
In principle, to prevent misuse, I only send extracts and copies of your data to the email address I already have on file for you. If you want to receive the data at another email address or, for example, by post, I will ask you to verify your identity.
I keep a record of completed requests. In the case of a request to be forgotten, I record anonymized data. You will receive all data extracts and copies in the machine-readable data format I use within my systems. You have the right at all times to file a complaint with the Dutch Data Protection Authority if you suspect that I am using your personal data improperly.
Right of access
You always have the right to access the data that I process (or have processed) and that relates to you or can be traced back to you. You can submit a request to this effect by emailing info@hugs-and-things.nl . You will receive a response to your request within 30 days.
If your request is granted, I will send a copy of all the data to the email address I have on file for you, along with an overview of the processors holding this data and the category under which I have stored it.
Right to rectification
You always have the right to have the data that I process (or have processed) and that relates to you or can be traced back to you amended. You can submit a request to this effect by emailing info@hugs-and-things.nl . You will receive a response to your request within 30 days. If your request is granted, I will send a confirmation to the email address I have on file for you that the data has been amended.
Right to restrict processing
You always have the right to restrict the processing of data that I process (or have processed) and that relates to you or can be traced back to you. You can submit a request to this effect by emailing info@hugs-and-things.nl You will receive a response to your request within 30 days. If your request is granted, I will send a confirmation to the email address I have on file for you that the data will no longer be processed until you lift the restriction.
Right to data portability
You always have the right to have the data I process (or have processed) that relates to you or can be traced back to you transferred to another party. You can submit a request to this effect by sending an email to info@hugs-and-things.nl . You will receive a response to your request within 30 days. If your request is granted, I will send copies or records of all data about you that I have processed, or that other processors or third parties have processed on my behalf, to the email address I have on file for you. In all likelihood, I will be unable to continue providing the service in this case, as the secure linking of data files can no longer be guaranteed.
Right to object and other rights
In applicable cases, you have the right to object to the processing of your personal data by or on behalf of Hugs and Things. If you object, I will immediately suspend the data processing pending the resolution of your objection. If your objection is justified, I will make available to you copies and/or records of the data I process (or have processed) and then permanently cease processing. You also have the right not to be subject to automated individual decision-making or profiling. I do not process your data in such a way that this right applies. If you believe that I do, please contact me by sending an email to info@hugs-and-things.nl .
Cookies: Google Analytics
Cookies from the US company Google are placed through my website as part of the “Analytics” service. I use this service to track and receive reports on how visitors use the website. This processor may be required to provide access to this data under applicable laws and regulations. We have not allowed Google to use the analytics information collected for other Google services.
I have instructed Google that the data collected may be retained for a maximum of the minimum period of 14 months (as determined by Google).
Cookies: Shopify
To prevent you from losing the contents of your shopping cart each time, the online store uses temporary cookies.
Third-party cookies
If third-party software uses cookies, this is stated in this privacy notice.
Changes to the privacy policy
I reserve the right to change my privacy policy at any time. However, you will always find the latest version on this page. If the new privacy policy affects how I process data already collected about you, I will notify you by email.
Contact details
Hugs and Things
Industrieweg Oost 1B
6662NE Elst Netherlands
T: (06) 81216026
E: info@hugs-and-things.nl
Privacy contact person: Marit Schotten