Hebor Watersport values your privacy. We therefore process only the data we need to provide and improve our services, and handle the information we have collected about you and your use of our services with care. We never make your data available to third parties for commercial purposes.
This privacy policy applies to the use of the Hebor Watersport website and the services made available through it. These terms took effect on 17/09/2018. Publication of a new version invalidates all previous versions. This policy describes which data we collect about you, how we use them, and with whom and under which conditions they may be shared with third parties. It also explains how we store your data, protect them against misuse, and which rights you have concerning the personal data you provide to us.
If you have questions about this policy, please contact our privacy contact person. Their details are at the end of this policy.
Data processing
Below we explain how we process your data, where we store them or have them stored, which security measures we use, and who can access the data.
Online shop software
Lightspeed
Our online shop is built using Lightspeed software. Personal data you provide to us for our services are shared with this party. Lightspeed can access your data to provide us with technical support and will never use your data for another purpose.
Under our agreement, Lightspeed must take appropriate security measures. Lightspeed uses cookies to collect technical information about your use of the software; no personal data are collected or stored.
Email and mailing lists
Lightspeed
We send our newsletters and transactional emails using our online shop software, Lightspeed. All confirmation emails from our website and web forms are sent via Lightspeed’s servers. Lightspeed will never use your name or email address for its own purposes. At the bottom of each email sent automatically through our website, you will find an unsubscribe link. Clicking it means you will no longer receive email from our website. This may significantly reduce the functionality of our website.
Lightspeed securely transmits, stores and makes your personal data accessible. It uses cookies and other internet technologies to determine whether emails are opened and read. Lightspeed also processes information about you as a recipient and email subject lines to improve its service quality; these data are retained for 30 days. Lightspeed reserves the right to use your data to further improve its services and to share information with third parties for that purpose.
Gmail
We use Gmail for our regular business email. This party has taken appropriate technical and organisational measures to prevent misuse, loss and corruption of your data and ours as far as possible. Gmail does not have access to our mailbox, and we treat all our email correspondence confidentially.
Payment processors
Mollie
We use the Mollie platform to process some or all payments in our online shop. Mollie processes your name, address and place of residence, and payment details such as your bank account or credit card number. Mollie has taken appropriate technical and organisational measures to protect your personal data. It reserves the right to use your data to further improve its services and to share anonymised data with third parties for that purpose. All the safeguards described above also apply to parts of Mollie’s services for which it engages third parties. Mollie retains your data no longer than permitted by statutory retention periods.
Shipping and logistics
PostNL
When you place an order, we are responsible for having your parcel delivered. We use PostNL for deliveries. This requires us to share your name, address and place of residence with PostNL. PostNL uses these data only to perform the agreement. If PostNL uses subcontractors, it also makes your data available to those parties.
Purpose of data processing
General purpose
We use your data exclusively to provide our services. The purpose of processing is therefore always directly related to the assignment you give us. We do not use your data for targeted or other marketing. If you share data with us and we wish to use them to contact you later other than at your request, we ask for your explicit consent. Your data are not shared with third parties except to fulfil accounting and other administrative obligations.
All these third parties are bound by confidentiality under their agreement with us, an oath or a statutory obligation.
Automatically collected data
Data automatically collected by our website are processed to improve our services. These data, such as your IP address, web browser and operating system, are not personal data.
Cooperation with tax and criminal investigations
In certain cases, Hebor Watersport may be legally required to share your data in connection with a government tax or criminal investigation. In such a case we are obliged to share your data, but will oppose this within the options available to us under the law.
Retention periods
We retain your data for as long as you are our client. This means we keep your customer profile until you tell us that you no longer wish to use our services. We will also treat such a notification as a request to be forgotten. Applicable administrative obligations require us to retain invoices containing your personal data, so we keep these data for the relevant statutory period. Employees will, however, no longer have access to your customer profile or documents we created in connection with your assignment.
Your rights
Under applicable Dutch and European legislation, you have certain rights as a data subject concerning personal data processed by us or on our behalf. We explain these rights and how to exercise them below. To prevent misuse, we generally send copies of your data only to the email address already known to us. If you wish to receive data at another email address or by post, we will ask you to verify your identity. We keep a record of completed requests; for requests to be forgotten, we record anonymised data. You receive all copies in the machine-readable data format used in our systems. You may complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at any time if you believe we are using your personal data incorrectly.
Right of access
You always have the right to access data that we process or have processed which relate to you or can be traced back to you. Submit a request to our privacy contact person. You will receive a response within 30 days. If your request is granted, we will send a copy of all data to the email address known to us, together with an overview of the processors holding those data and the categories under which we stored them.
Right to rectification
You always have the right to have data that we process or have processed which relate to you or can be traced back to you corrected. Submit a request to our privacy contact person. You will receive a response within 30 days. If granted, we will send confirmation of the correction to the email address known to us.
Right to restriction of processing
You always have the right to restrict the processing of data that we process or have processed which relate to you or can be traced back to you. Submit a request to our privacy contact person. You will receive a response within 30 days. If granted, we will confirm to the email address known to us that the data will no longer be processed until you lift the restriction.
Right to data portability
You always have the right to have another party process data that we process or have processed which relate to you or can be traced back to you. Submit a request to our privacy contact person. You will receive a response within 30 days. If granted, we will send copies of all data about you processed by us or by other processors or third parties on our behalf to the email address known to us. In such a case, we will probably no longer be able to continue providing our services, because a secure connection between data files can no longer be guaranteed.
Right to object and other rights
In certain circumstances, you may object to the processing of your personal data by or on behalf of Hebor Watersport. If you object, we will immediately stop processing the data while your objection is considered. If your objection is justified, we will provide copies of the data we process or have processed, then permanently stop processing them.
You also have the right not to be subject to automated individual decision-making or profiling. We do not process your data in a way that makes this right applicable. If you believe otherwise, please contact our privacy contact person.
Cookies
Google Analytics
Our website places cookies from the US company Google as part of its Analytics service. We use this service to monitor and receive reports on how visitors use the website. This processor may be required to disclose these data under applicable laws and regulations. We have not authorised Google to use the analytics information obtained for other Google services.
Third-party cookies
If third-party software solutions use cookies, this is stated in this privacy policy.
Changes to the privacy policy
We reserve the right to change our privacy policy at any time. The latest version is always available on this page. If a new policy affects how we process data already collected about you, we will inform you by email.
Contact details
Hebor Watersport
Kompasstraat 42
2901 AM Capelle aan den IJssel
The Netherlands
Telephone: (010) 442-0010
Email: [email protected]
Privacy contact person
Ferry Molendijk